@kensio/yulin 0.33.0 → 0.34.0

package/dist/service/dynamodb/table/dynamodb-table-create-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamodb-table-create-input.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACN,aAAa;IAA1C,YAA6B,aAAoC;6BAApC,aAAa;QACxC,EAAE;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,aAAa,CACX,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAClC,+BAA+B,CAChC,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAA8B,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"dynamodb-table-create-input.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGxF;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACN,aAAa;IAA1C,YAA6B,aAAoC;6BAApC,aAAa;QACxC,EAAE;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,aAAa,CACX,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAClC,+BAA+B,CAChC,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAoC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/service/dynamodb/table/sim-dynamodb-table.d.ts

@@ -1,10 +1,10 @@
 import type { Brand } from "../../../util/brand.type.js";
 import { type SimArn, type SimArnComponents } from "../../aws/arn.js";
-import type { DynamoDbItem } from "../item/dynamodb-item.js";
+import type { DynamoDbItem as DynamoDatabaseItem } from "../item/dynamodb-item.js";
 import { type BackgroundScheduler } from "../../../util/background/background.js";
-import type { SimCreateTableCommand, SimDynamoDbTableStatus } from "../command/create-table/create-table.cmd.js";
+import type { SimCreateTableCommand, SimDynamoDbTableStatus as SimDynamoDatabaseTableStatus } from "../command/create-table/create-table.cmd.js";
 export type DynamoDbTableName = Brand<string, "DynamoDbTableName">;
-interface SimDynamoDbTableProps {
+interface SimDynamoDatabaseTableProperties {
     readonly createCommand: SimCreateTableCommand;
     readonly arn?: SimArn;
     readonly background?: BackgroundScheduler;
@@ -19,7 +19,7 @@ export declare class SimDynamoDbTable {
     readonly arn: SimArn;
     private readonly background;
     private readonly items;
-    constructor(props: SimDynamoDbTableProps);
+    constructor(properties: SimDynamoDatabaseTableProperties);
     /**
      * Simulate the table entering ACTIVE status.
      */
@@ -27,11 +27,11 @@ export declare class SimDynamoDbTable {
     /**
      * Get the current table status.
      */
-    get status(): SimDynamoDbTableStatus;
+    get status(): SimDynamoDatabaseTableStatus;
     /**
      * Put an item into the table.
      */
-    putItem(item: DynamoDbItem): Promise<void>;
+    putItem(item: DynamoDatabaseItem): Promise<void>;
 }
 /**
  * Generate a fake simulated DynamoDB Table ARN.

package/dist/service/dynamodb/table/sim-dynamodb-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-table.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,6CAA6C,CAAC;AAGrD,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEnE,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,gBAAgB;;IAC3B,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAEvC,SAAgB,SAAS,EAAE,iBAAiB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IAEzD,YAAY,KAAK,EAAE,qBAAqB,EAcvC;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,IAAW,MAAM,IAAI,sBAAsB,CAE1C;IAED;;OAEG;IACI,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhD;CACF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC,GACzE,MAAM,CAMR"}
+{"version":3,"file":"sim-dynamodb-table.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,IAAI,4BAA4B,EACvD,MAAM,6CAA6C,CAAC;AAGrD,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEnE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,gBAAgB;;IAC3B,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAEvC,SAAgB,SAAS,EAAE,iBAAiB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAE/D,YAAY,UAAU,EAAE,gCAAgC,EAcvD;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,IAAW,MAAM,IAAI,4BAA4B,CAEhD;IAED;;OAEG;IACI,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtD;CACF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC,GACzE,MAAM,CAMR"}

package/dist/service/dynamodb/table/sim-dynamodb-table.js

@@ -1,6 +1,6 @@
 import { makeSimArn, } from "../../aws/arn.js";
 import { BackgroundTasks, } from "../../../util/background/background.js";
-import { DynamoDbTableCreateInput } from "./dynamodb-table-create-input.js";
+import { DynamoDbTableCreateInput as DynamoDatabaseTableCreateInput } from "./dynamodb-table-create-input.js";
 /**
  * Simulated DynamoDB Table.
  */
@@ -12,9 +12,9 @@ export class SimDynamoDbTable {
     #keySchema;
     #status = "CREATING";
     items = new Map();
-    constructor(props) {
-        const { createCommand, arn = makeSimDynamoDbTableArn(), background = new BackgroundTasks(), } = props;
-        const createInput = new DynamoDbTableCreateInput(createCommand);
+    constructor(properties) {
+        const { createCommand, arn = makeSimDynamoDbTableArn(), background = new BackgroundTasks(), } = properties;
+        const createInput = new DynamoDatabaseTableCreateInput(createCommand);
         this.arn = arn;
         this.background = background;
         this.tableName = createInput.tableName();

package/dist/service/dynamodb/table/sim-dynamodb-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-table.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAEL,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAU5E;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAO;IAEvB,SAAS,CAAoB;IAC7B,GAAG,CAAS;IAEX,UAAU,CAAsB;IACxC,UAAU,CAAoB;IACvC,OAAO,GAA2B,UAAU,CAAC;IAE5B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD,YAAY,KAA4B;QACtC,MAAM,EACJ,aAAa,EACb,GAAG,GAAG,uBAAuB,EAAE,EAC/B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,IAAkB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA0E;IAE1E,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,OAAO;QACrB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sim-dynamodb-table.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAEL,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,wBAAwB,IAAI,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAU9G;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAO;IAEvB,SAAS,CAAoB;IAC7B,GAAG,CAAS;IAEX,UAAU,CAAsB;IACxC,UAAU,CAA0B;IAC7C,OAAO,GAAiC,UAAU,CAAC;IAElC,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE/D,YAAY,UAA4C;QACtD,MAAM,EACJ,aAAa,EACb,GAAG,GAAG,uBAAuB,EAAE,EAC/B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,MAAM,WAAW,GAAG,IAAI,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAEtE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,IAAwB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA0E;IAE1E,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,OAAO;QACrB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts

@@ -3,7 +3,7 @@ import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
 import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
 import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
 import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
-interface SimIamAuthZIdentityPolicySourceBuilderProps {
+interface SimIamAuthZIdentityPolicySourceBuilderProperties {
     policies?: ReadonlyMap<SimArn, SimIamPolicy>;
     roles?: ReadonlyMap<SimIamRoleName, SimIamRole>;
     users?: ReadonlyMap<SimIamUsername, SimIamUser>;
@@ -24,7 +24,7 @@ interface SimIamAuthZIdentityPolicySourceBuilderProps {
 export declare class SimIamAuthZIdentityPolicyCoordinator {
     private readonly ownerResolver;
     private readonly ownerSourceBuilder;
-    constructor(props: SimIamAuthZIdentityPolicySourceBuilderProps);
+    constructor(properties: SimIamAuthZIdentityPolicySourceBuilderProperties);
     /**
      * Return identity-policy sources belonging to the principal ARN.
      *

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAI5E,UAAU,2CAA2C;IACnD,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E,YAAY,KAAK,EAAE,2CAA2C,EAc7D;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,uBAAuB,EAAE,CAI1E;CACF"}
+{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAI5E,UAAU,gDAAgD;IACxD,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E,YAAY,UAAU,EAAE,gDAAgD,EAcvE;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,uBAAuB,EAAE,CAI1E;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js

@@ -16,8 +16,8 @@ import { SimIamIdentityPolicyOwnerSourceBuilder } from "./sim-iam-id-pol-owner-s
 export class SimIamAuthZIdentityPolicyCoordinator {
     ownerResolver;
     ownerSourceBuilder;
-    constructor(props) {
-        const { policies = new Map(), roles = new Map(), users = new Map(), } = props;
+    constructor(properties) {
+        const { policies = new Map(), roles = new Map(), users = new Map(), } = properties;
         this.ownerResolver = new SimIamIdentityPolicyOwnerResolver({
             roles,
             users,

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAQ/F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oCAAoC;IAC9B,aAAa,CAAoC;IACjD,kBAAkB,CAAyC;IAE5E,YAAY,KAAkD;QAC5D,MAAM,EACJ,QAAQ,GAAG,IAAI,GAAG,EAAE,EACpB,KAAK,GAAG,IAAI,GAAG,EAAE,EACjB,KAAK,GAAG,IAAI,GAAG,EAAE,GAClB,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiC,CAAC;YACzD,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,sCAAsC,CAAC;YACnE,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAgC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAQ/F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oCAAoC;IAC9B,aAAa,CAAoC;IACjD,kBAAkB,CAAyC;IAE5E,YAAY,UAA4D;QACtE,MAAM,EACJ,QAAQ,GAAG,IAAI,GAAG,EAAE,EACpB,KAAK,GAAG,IAAI,GAAG,EAAE,EACjB,KAAK,GAAG,IAAI,GAAG,EAAE,GAClB,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiC,CAAC;YACzD,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,sCAAsC,CAAC;YACnE,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAgC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts

@@ -7,7 +7,7 @@ import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
  * process a resolved owner without branching on the principal type.
  */
 export type SimIamIdentityPolicyOwner = SimIamRole | SimIamUser;
-interface SimIamIdentityPolicyOwnerResolverProps {
+interface SimIamIdentityPolicyOwnerResolverProperties {
     readonly roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
     readonly users: ReadonlyMap<SimIamUsername, SimIamUser>;
 }
@@ -29,7 +29,7 @@ interface SimIamIdentityPolicyOwnerResolverProps {
 export declare class SimIamIdentityPolicyOwnerResolver {
     private readonly roles;
     private readonly users;
-    constructor(props: SimIamIdentityPolicyOwnerResolverProps);
+    constructor(properties: SimIamIdentityPolicyOwnerResolverProperties);
     /**
      * Find the role or user whose ARN exactly matches the supplied principal ARN.
      *

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-id-pol-owner-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhE,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAEhE,YAAY,KAAK,EAAE,sCAAsC,EAGxD;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,yBAAyB,GAAG,SAAS,CAMvC;IAED;;OAEG;IACH,OAAO,CAAC,IAAI;IAIZ;;OAEG;IACH,OAAO,CAAC,IAAI;CAGb"}
+{"version":3,"file":"sim-iam-id-pol-owner-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhE,UAAU,2CAA2C;IACnD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAEhE,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,yBAAyB,GAAG,SAAS,CAMvC;IAED;;OAEG;IACH,OAAO,CAAC,IAAI;IAIZ;;OAEG;IACH,OAAO,CAAC,IAAI;CAGb"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js

@@ -16,9 +16,9 @@
 export class SimIamIdentityPolicyOwnerResolver {
     roles;
     users;
-    constructor(props) {
-        this.roles = props.roles;
-        this.users = props.users;
+    constructor(properties) {
+        this.roles = properties.roles;
+        this.users = properties.users;
     }
     /**
      * Find the role or user whose ARN exactly matches the supplied principal ARN.

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-id-pol-owner-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA0C;IAC/C,KAAK,CAA0C;IAEhE,YAAY,KAA6C;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAgC;QAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;CACF"}
+{"version":3,"file":"sim-iam-id-pol-owner-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA0C;IAC/C,KAAK,CAA0C;IAEhE,YAAY,UAAuD;QACjE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAgC;QAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts

@@ -2,7 +2,7 @@ import type { SimArn } from "../../../../aws/arn.js";
 import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
 import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
 import type { SimIamIdentityPolicyOwner } from "./sim-iam-id-pol-owner-resolver.js";
-interface SimIamIdentityPolicyOwnerSourceBuilderProps {
+interface SimIamIdentityPolicyOwnerSourceBuilderProperties {
     readonly policies: ReadonlyMap<SimArn, SimIamPolicy>;
 }
 /**
@@ -18,7 +18,7 @@ interface SimIamIdentityPolicyOwnerSourceBuilderProps {
  */
 export declare class SimIamIdentityPolicyOwnerSourceBuilder {
     private readonly policies;
-    constructor(props: SimIamIdentityPolicyOwnerSourceBuilderProps);
+    constructor(properties: SimIamIdentityPolicyOwnerSourceBuilderProperties);
     /**
      * Build all available inline and managed policy sources for an IAM owner.
      */

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-id-pol-owner-src-builder.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,UAAU,2CAA2C;IACnD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,KAAK,EAAE,2CAA2C,EAE7D;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,yBAAyB,GAAG,SAAS,uBAAuB,EAAE,CAK1E;IAED;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAgB5B"}
+{"version":3,"file":"sim-iam-id-pol-owner-src-builder.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,UAAU,gDAAgD;IACxD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,UAAU,EAAE,gDAAgD,EAEvE;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,yBAAyB,GAAG,SAAS,uBAAuB,EAAE,CAK1E;IAED;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAgB5B"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js

@@ -12,8 +12,8 @@ import { jsonParse } from "../../../../../util/type-guard/json.js";
  */
 export class SimIamIdentityPolicyOwnerSourceBuilder {
     policies;
-    constructor(props) {
-        this.policies = props.policies;
+    constructor(properties) {
+        this.policies = properties.policies;
     }
     /**
      * Build all available inline and managed policy sources for an IAM owner.

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-id-pol-owner-src-builder.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAQnE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,QAAQ,CAAoC;IAE7D,YAAY,KAAkD;QAC5D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAgC;QACpC,OAAO;YACL,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAClC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,UAAU,EAAE,iBAAiB;YAC7B,UAAU;YACV,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC3B,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;aACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;aAChE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,MAAoB;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-iam-id-pol-owner-src-builder.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAQnE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,QAAQ,CAAoC;IAE7D,YAAY,UAA4D;QACtE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAgC;QACpC,OAAO;YACL,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAClC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,UAAU,EAAE,iBAAiB;YAC7B,UAAU;YACV,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC3B,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;aACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;aAChE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,MAAoB;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-account-auth-z.d.ts

@@ -0,0 +1,34 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsCredentialIdentityResolver } from "../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamManagedPolicy } from "../policy/sim-iam-policy.js";
+import type { SimIamRole, SimIamRoleName } from "../role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "../user/sim-iam-user.js";
+import type { SimIamAuthorizationInput } from "./context/sim-iam-auth-z-context-builder.js";
+import type { SimIamPolicyDecision } from "./sim-iam-decision.js";
+interface SimIamAccountAuthZProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly roles: Map<SimIamRoleName, SimIamRole>;
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly credentialIdentityResolver: SimAwsCredentialIdentityResolver;
+}
+/**
+ * Evaluates IAM authorization attempts against one simulated Account's IAM
+ * state.
+ *
+ * If the caller is omitted, authorization defaults to the root principal of
+ * the owning sim Account. An explicit anonymous caller suppresses that
+ * fallback and is evaluated without identity policies.
+ */
+export declare class SimIamAccountAuthZ {
+    private readonly properties;
+    constructor(properties: SimIamAccountAuthZProperties);
+    /**
+     * Evaluate an IAM authorization attempt against policies relevant to the
+     * request caller.
+     */
+    authorize(input: SimIamAuthorizationInput): SimIamPolicyDecision;
+}
+export {};
+//# sourceMappingURL=sim-iam-account-auth-z.d.ts.map

package/dist/service/iam/authorize/sim-iam-account-auth-z.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-auth-z.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-account-auth-z.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,UAAU,4BAA4B;IACpC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;CACvE;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAE1D,YAAY,UAAU,EAAE,4BAA4B,EAEnD;IAED;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAW/D;CACF"}

package/dist/service/iam/authorize/sim-iam-account-auth-z.js

@@ -0,0 +1,31 @@
+import { makeSimAwsAccountRootPrincipal } from "../../aws/caller/sim-aws-account-root-principal.js";
+import { SimIamAuthorizer } from "./sim-iam-authorizer.js";
+/**
+ * Evaluates IAM authorization attempts against one simulated Account's IAM
+ * state.
+ *
+ * If the caller is omitted, authorization defaults to the root principal of
+ * the owning sim Account. An explicit anonymous caller suppresses that
+ * fallback and is evaluated without identity policies.
+ */
+export class SimIamAccountAuthZ {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Evaluate an IAM authorization attempt against policies relevant to the
+     * request caller.
+     */
+    authorize(input) {
+        const simIamAuthorizer = new SimIamAuthorizer({
+            policies: this.properties.policies,
+            roles: this.properties.roles,
+            users: this.properties.users,
+            defaultCallerPrincipal: makeSimAwsAccountRootPrincipal(this.properties.accountId),
+            credentialIdentityResolver: this.properties.credentialIdentityResolver,
+        });
+        return simIamAuthorizer.authorize(input);
+    }
+}
+//# sourceMappingURL=sim-iam-account-auth-z.js.map

package/dist/service/iam/authorize/sim-iam-account-auth-z.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-auth-z.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-account-auth-z.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,oDAAoD,CAAC;AAOpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAY3D;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IACZ,UAAU,CAA+B;IAE1D,YAAY,UAAwC;QAClD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAA+B;QACvC,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;YAC5C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;YAClC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,sBAAsB,EAAE,8BAA8B,CACpD,IAAI,CAAC,UAAU,CAAC,SAAS,CAC1B;YACD,0BAA0B,EAAE,IAAI,CAAC,UAAU,CAAC,0BAA0B;SACvE,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-action-authorizer.d.ts

@@ -0,0 +1,28 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "./sim-iam-inter-service-auth-z.js";
+interface SimIamActionAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a simulated service command for one action and
+ * resource.
+ *
+ * This shared authorizer suits services whose commands map one-to-one onto an
+ * IAM action and resource ARN, such as the IAM and CloudFormation control
+ * planes. Commands needing richer context, such as condition values, use
+ * their own per-command authorizers instead.
+ */
+export declare class SimIamActionAuthorizer {
+    private readonly iam;
+    constructor(properties: SimIamActionAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on a resource.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit
+     * anonymous caller, which has no identity policy permissions.
+     */
+    authorize(action: string, resource: string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=sim-iam-action-authorizer.d.ts.map

package/dist/service/iam/authorize/sim-iam-action-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-action-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-action-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAUvE;CACF"}

package/dist/service/iam/authorize/sim-iam-action-authorizer.js

@@ -0,0 +1,34 @@
+import { SimIamAccessDenied } from "../error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a simulated service command for one action and
+ * resource.
+ *
+ * This shared authorizer suits services whose commands map one-to-one onto an
+ * IAM action and resource ARN, such as the IAM and CloudFormation control
+ * planes. Commands needing richer context, such as condition values, use
+ * their own per-command authorizers instead.
+ */
+export class SimIamActionAuthorizer {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may perform an action on a resource.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit
+     * anonymous caller, which has no identity policy permissions.
+     */
+    authorize(action, resource, caller) {
+        const decision = this.iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=sim-iam-action-authorizer.js.map

package/dist/service/iam/authorize/sim-iam-action-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-action-authorizer.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-action-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAqB;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-authorizer.d.ts

@@ -6,7 +6,7 @@ import { SimIamPolicyDecision } from "./sim-iam-decision.js";
 import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
 import type { SimIamUser, SimIamUsername } from "../user/sim-iam-user.js";
 import type { SimAwsCredentialIdentityResolver } from "../../aws/caller/sim-aws-caller-resolver.js";
-interface SimIamAuthorizerProps {
+interface SimIamAuthorizerProperties {
     readonly policies: ReadonlyMap<SimArn, SimIamPolicy>;
     readonly roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
     readonly users: ReadonlyMap<SimIamUsername, SimIamUser>;
@@ -23,7 +23,7 @@ interface SimIamAuthorizerProps {
  */
 export declare class SimIamAuthorizer {
     private readonly contextBuilder;
-    constructor(props: SimIamAuthorizerProps);
+    constructor(properties: SimIamAuthorizerProperties);
     /**
      * Evaluate an IAM authorization request.
      */

package/dist/service/iam/authorize/sim-iam-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAEpG,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,sBAAsB,EAAE,eAAe,CAAC;IACjD,QAAQ,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;CACvE;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAE3D,YAAY,KAAK,EAAE,qBAAqB,EAQvC;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAE/D;CACF"}
+{"version":3,"file":"sim-iam-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAEpG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,sBAAsB,EAAE,eAAe,CAAC;IACjD,QAAQ,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;CACvE;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAE3D,YAAY,UAAU,EAAE,0BAA0B,EAQjD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAE/D;CACF"}

package/dist/service/iam/authorize/sim-iam-authorizer.js

@@ -10,8 +10,8 @@ import { SimIamPolicyDecision } from "./sim-iam-decision.js";
  */
 export class SimIamAuthorizer {
     contextBuilder;
-    constructor(props) {
-        this.contextBuilder = new SimIamAuthZContextBuilder(props.policies, props.roles, props.users, props.defaultCallerPrincipal, props.credentialIdentityResolver);
+    constructor(properties) {
+        this.contextBuilder = new SimIamAuthZContextBuilder(properties.policies, properties.roles, properties.users, properties.defaultCallerPrincipal, properties.credentialIdentityResolver);
     }
     /**
      * Evaluate an IAM authorization request.

package/dist/service/iam/authorize/sim-iam-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-authorizer.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,yBAAyB,GAE1B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAa7D;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACV,cAAc,CAA4B;IAE3D,YAAY,KAA4B;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,yBAAyB,CACjD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,0BAA0B,CACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;CACF"}
+{"version":3,"file":"sim-iam-authorizer.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,yBAAyB,GAE1B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAa7D;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACV,cAAc,CAA4B;IAE3D,YAAY,UAAsC;QAChD,IAAI,CAAC,cAAc,GAAG,IAAI,yBAAyB,CACjD,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,sBAAsB,EACjC,UAAU,CAAC,0BAA0B,CACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIam } from "../../sim-iam.js";
+import type { SimIamManagedPolicy } from "../../policy/sim-iam-policy.js";
+interface SimCfnIamManagedPolicyCreatorProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Creates simulated IAM Managed Policies from CloudFormation Resources.
+ */
+export declare class SimCfnIamManagedPolicyCreator {
+    private readonly iam;
+    constructor(properties: SimCfnIamManagedPolicyCreatorProperties);
+    /**
+     * Create a simulated Managed Policy from an AWS::IAM::ManagedPolicy Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimIamManagedPolicy>;
+    private managedPolicyName;
+    private path;
+    private description;
+    private policyDocument;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-managed-policy-creator.d.ts.map

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-managed-policy-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAG1E,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAsB9B;IAED,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,IAAI;IAmBZ,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,cAAc;CAmBvB"}

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.js

@@ -0,0 +1,71 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Creates simulated IAM Managed Policies from CloudFormation Resources.
+ */
+export class SimCfnIamManagedPolicyCreator {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Create a simulated Managed Policy from an AWS::IAM::ManagedPolicy Resource.
+     */
+    async create(resource, properties) {
+        const policyName = this.managedPolicyName(resource, properties);
+        const path = this.path(resource, properties);
+        const description = this.description(resource, properties);
+        const policyDocument = this.policyDocument(resource, properties);
+        const createOutput = await this.iam.createPolicy({
+            input: {
+                PolicyName: policyName,
+                Path: path,
+                Description: description,
+                PolicyDocument: policyDocument,
+            },
+        });
+        const policy = this.iam.policies.get(createOutput.Policy.Arn);
+        assertDefined(policy, `Sim IAM Managed Policy ${createOutput.Policy.Arn} after CloudFormation creation`);
+        return policy;
+    }
+    managedPolicyName(resource, properties) {
+        const managedPolicyName = properties["ManagedPolicyName"];
+        if (managedPolicyName === undefined) {
+            return resource.logicalId;
+        }
+        if (typeof managedPolicyName !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: ManagedPolicyName must be a string`);
+        }
+        return managedPolicyName;
+    }
+    path(resource, properties) {
+        const path = properties["Path"];
+        if (path === undefined) {
+            return undefined;
+        }
+        if (typeof path !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: Path must be a string`);
+        }
+        return path;
+    }
+    description(resource, properties) {
+        const description = properties["Description"];
+        if (description === undefined) {
+            return undefined;
+        }
+        if (typeof description !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: Description must be a string`);
+        }
+        return description;
+    }
+    policyDocument(resource, properties) {
+        const policyDocument = properties["PolicyDocument"];
+        if (policyDocument === undefined ||
+            typeof policyDocument !== "object" ||
+            policyDocument === null ||
+            Array.isArray(policyDocument)) {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: PolicyDocument must be an object`);
+        }
+        return JSON.stringify(policyDocument);
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-managed-policy-creator.js.map

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-managed-policy-creator.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;GAEG;AACH,MAAM,OAAO,6BAA6B;IACvB,GAAG,CAAS;IAE7B,YAAY,UAAmD;QAC7D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEjE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YAC/C,KAAK,EAAE;gBACL,UAAU,EAAE,UAAU;gBACtB,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,cAAc;aAC/B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,aAAa,CACX,MAAM,EACN,0BAA0B,YAAY,CAAC,MAAM,CAAC,GAAG,gCAAgC,CAClF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CACvB,QAAwB,EACxB,UAAqC;QAErC,MAAM,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAE1D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,sCAAsC,CAC5F,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAEO,IAAI,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,yBAAyB,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CACjB,QAAwB,EACxB,UAAqC;QAErC,MAAM,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QAE9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,gCAAgC,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,cAAc,CACpB,QAAwB,EACxB,UAAqC;QAErC,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,oCAAoC,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.d.ts

@@ -0,0 +1,39 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIam } from "../../sim-iam.js";
+interface SimCfnIamPolicyCreatorProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Creates simulated IAM inline role policies from AWS::IAM::Policy
+ * CloudFormation Resources.
+ *
+ * AWS::IAM::Policy is an inline policy put onto the referenced principals,
+ * which is how CDK grants such as bucket.grantRead(fn) attach permissions to
+ * a function's execution role (the "DefaultPolicy" resource). Only Roles are
+ * simulated; the policy has no standalone stored resource, so creation
+ * returns undefined and Ref resolution uses the default adapter.
+ */
+export declare class SimCfnIamPolicyCreator {
+    private readonly iam;
+    constructor(properties: SimCfnIamPolicyCreatorProperties);
+    /**
+     * Put the inline policy onto each referenced Role.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<undefined>;
+    private policyName;
+    private policyDocument;
+    /**
+     * The Role names the policy attaches to. Role Refs are resolved to Role
+     * names before creation, so entries arrive as plain strings.
+     */
+    private roleNames;
+    /**
+     * IAM Users and Groups are not simulated as CloudFormation policy
+     * principals, and silently dropping a grant would be misleading, so their
+     * presence fails creation.
+     */
+    private rejectUnsimulatedPrincipals;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-policy-creator.d.ts.map

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-policy-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/policy/sim-cfn-iam-policy-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,SAAS,CAAC,CAoBpB;IAED,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,cAAc;IAoBtB;;;OAGG;IACH,OAAO,CAAC,SAAS;IAsBjB;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;CAcpC"}