@kensio/yulin 0.33.0 → 0.34.2

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.js

@@ -0,0 +1,71 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Creates simulated IAM Managed Policies from CloudFormation Resources.
+ */
+export class SimCfnIamManagedPolicyCreator {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Create a simulated Managed Policy from an AWS::IAM::ManagedPolicy Resource.
+     */
+    async create(resource, properties) {
+        const policyName = this.managedPolicyName(resource, properties);
+        const path = this.path(resource, properties);
+        const description = this.description(resource, properties);
+        const policyDocument = this.policyDocument(resource, properties);
+        const createOutput = await this.iam.createPolicy({
+            input: {
+                PolicyName: policyName,
+                Path: path,
+                Description: description,
+                PolicyDocument: policyDocument,
+            },
+        });
+        const policy = this.iam.policies.get(createOutput.Policy.Arn);
+        assertDefined(policy, `Sim IAM Managed Policy ${createOutput.Policy.Arn} after CloudFormation creation`);
+        return policy;
+    }
+    managedPolicyName(resource, properties) {
+        const managedPolicyName = properties["ManagedPolicyName"];
+        if (managedPolicyName === undefined) {
+            return resource.logicalId;
+        }
+        if (typeof managedPolicyName !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: ManagedPolicyName must be a string`);
+        }
+        return managedPolicyName;
+    }
+    path(resource, properties) {
+        const path = properties["Path"];
+        if (path === undefined) {
+            return undefined;
+        }
+        if (typeof path !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: Path must be a string`);
+        }
+        return path;
+    }
+    description(resource, properties) {
+        const description = properties["Description"];
+        if (description === undefined) {
+            return undefined;
+        }
+        if (typeof description !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: Description must be a string`);
+        }
+        return description;
+    }
+    policyDocument(resource, properties) {
+        const policyDocument = properties["PolicyDocument"];
+        if (policyDocument === undefined ||
+            typeof policyDocument !== "object" ||
+            policyDocument === null ||
+            Array.isArray(policyDocument)) {
+            throw new TypeError(`Invalid AWS::IAM::ManagedPolicy ${resource.logicalId}: PolicyDocument must be an object`);
+        }
+        return JSON.stringify(policyDocument);
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-managed-policy-creator.js.map

package/dist/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-managed-policy-creator.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/managed-policy/sim-cfn-iam-managed-policy-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;GAEG;AACH,MAAM,OAAO,6BAA6B;IACvB,GAAG,CAAS;IAE7B,YAAY,UAAmD;QAC7D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEjE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YAC/C,KAAK,EAAE;gBACL,UAAU,EAAE,UAAU;gBACtB,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,WAAW;gBACxB,cAAc,EAAE,cAAc;aAC/B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,aAAa,CACX,MAAM,EACN,0BAA0B,YAAY,CAAC,MAAM,CAAC,GAAG,gCAAgC,CAClF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CACvB,QAAwB,EACxB,UAAqC;QAErC,MAAM,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAE1D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,sCAAsC,CAC5F,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAEO,IAAI,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,yBAAyB,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CACjB,QAAwB,EACxB,UAAqC;QAErC,MAAM,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QAE9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,gCAAgC,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,cAAc,CACpB,QAAwB,EACxB,UAAqC;QAErC,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,mCAAmC,QAAQ,CAAC,SAAS,oCAAoC,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.d.ts

@@ -0,0 +1,39 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIam } from "../../sim-iam.js";
+interface SimCfnIamPolicyCreatorProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Creates simulated IAM inline role policies from AWS::IAM::Policy
+ * CloudFormation Resources.
+ *
+ * AWS::IAM::Policy is an inline policy put onto the referenced principals,
+ * which is how CDK grants such as bucket.grantRead(fn) attach permissions to
+ * a function's execution role (the "DefaultPolicy" resource). Only Roles are
+ * simulated; the policy has no standalone stored resource, so creation
+ * returns undefined and Ref resolution uses the default adapter.
+ */
+export declare class SimCfnIamPolicyCreator {
+    private readonly iam;
+    constructor(properties: SimCfnIamPolicyCreatorProperties);
+    /**
+     * Put the inline policy onto each referenced Role.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<undefined>;
+    private policyName;
+    private policyDocument;
+    /**
+     * The Role names the policy attaches to. Role Refs are resolved to Role
+     * names before creation, so entries arrive as plain strings.
+     */
+    private roleNames;
+    /**
+     * IAM Users and Groups are not simulated as CloudFormation policy
+     * principals, and silently dropping a grant would be misleading, so their
+     * presence fails creation.
+     */
+    private rejectUnsimulatedPrincipals;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-policy-creator.d.ts.map

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-policy-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/policy/sim-cfn-iam-policy-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,SAAS,CAAC,CAoBpB;IAED,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,cAAc;IAoBtB;;;OAGG;IACH,OAAO,CAAC,SAAS;IAsBjB;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;CAcpC"}

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.js

@@ -0,0 +1,81 @@
+/**
+ * Creates simulated IAM inline role policies from AWS::IAM::Policy
+ * CloudFormation Resources.
+ *
+ * AWS::IAM::Policy is an inline policy put onto the referenced principals,
+ * which is how CDK grants such as bucket.grantRead(fn) attach permissions to
+ * a function's execution role (the "DefaultPolicy" resource). Only Roles are
+ * simulated; the policy has no standalone stored resource, so creation
+ * returns undefined and Ref resolution uses the default adapter.
+ */
+export class SimCfnIamPolicyCreator {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Put the inline policy onto each referenced Role.
+     */
+    async create(resource, properties) {
+        this.rejectUnsimulatedPrincipals(resource, properties);
+        const policyName = this.policyName(resource, properties);
+        const policyDocument = this.policyDocument(resource, properties);
+        const roleNames = this.roleNames(resource, properties);
+        await Promise.all(roleNames.map(async (roleName) => this.iam.putRolePolicy({
+            input: {
+                RoleName: roleName,
+                PolicyName: policyName,
+                PolicyDocument: policyDocument,
+            },
+        })));
+        return undefined;
+    }
+    policyName(resource, properties) {
+        const policyName = properties["PolicyName"];
+        if (typeof policyName !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::Policy ${resource.logicalId}: PolicyName must be a string`);
+        }
+        return policyName;
+    }
+    policyDocument(resource, properties) {
+        const policyDocument = properties["PolicyDocument"];
+        if (policyDocument === undefined ||
+            typeof policyDocument !== "object" ||
+            policyDocument === null ||
+            Array.isArray(policyDocument)) {
+            throw new TypeError(`Invalid AWS::IAM::Policy ${resource.logicalId}: PolicyDocument must be an object`);
+        }
+        return JSON.stringify(policyDocument);
+    }
+    /**
+     * The Role names the policy attaches to. Role Refs are resolved to Role
+     * names before creation, so entries arrive as plain strings.
+     */
+    roleNames(resource, properties) {
+        const roles = properties["Roles"];
+        if (!Array.isArray(roles) || roles.length === 0) {
+            throw new TypeError(`Invalid AWS::IAM::Policy ${resource.logicalId}: Roles must be a non-empty array`);
+        }
+        return roles.map((roleName) => {
+            if (typeof roleName !== "string") {
+                throw new TypeError(`Invalid AWS::IAM::Policy ${resource.logicalId}: Roles entries must be strings`);
+            }
+            return roleName;
+        });
+    }
+    /**
+     * IAM Users and Groups are not simulated as CloudFormation policy
+     * principals, and silently dropping a grant would be misleading, so their
+     * presence fails creation.
+     */
+    rejectUnsimulatedPrincipals(resource, properties) {
+        for (const principalProperty of ["Users", "Groups"]) {
+            // eslint-disable-next-line security/detect-object-injection -- fixed property names.
+            if (properties[principalProperty] !== undefined) {
+                throw new TypeError(`Invalid AWS::IAM::Policy ${resource.logicalId}: ` +
+                    `${principalProperty} are not simulated`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-policy-creator.js.map

package/dist/service/iam/cfn/policy/sim-cfn-iam-policy-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-policy-creator.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/policy/sim-cfn-iam-policy-creator.ts"],"names":[],"mappings":"AAQA;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAAS;IAE7B,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEvD,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,UAAU;gBACtB,cAAc,EAAE,cAAc;aAC/B;SACF,CAAC,CACH,CACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU,CAChB,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,4BAA4B,QAAQ,CAAC,SAAS,+BAA+B,CAC9E,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,cAAc,CACpB,QAAwB,EACxB,UAAqC;QAErC,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,4BAA4B,QAAQ,CAAC,SAAS,oCAAoC,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,SAAS,CACf,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,SAAS,CACjB,4BAA4B,QAAQ,CAAC,SAAS,mCAAmC,CAClF,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CACjB,4BAA4B,QAAQ,CAAC,SAAS,iCAAiC,CAChF,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,2BAA2B,CACjC,QAAwB,EACxB,UAAqC;QAErC,KAAK,MAAM,iBAAiB,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,qFAAqF;YACrF,IAAI,UAAU,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,IAAI,SAAS,CACjB,4BAA4B,QAAQ,CAAC,SAAS,IAAI;oBAChD,GAAG,iBAAiB,oBAAoB,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-creator.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIam } from "../../sim-iam.js";
+import type { SimIamRole } from "../../role/sim-iam-role.js";
+interface SimCfnIamRoleCreatorProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Creates simulated IAM Roles from CloudFormation Resources.
+ */
+export declare class SimCfnIamRoleCreator {
+    private readonly iam;
+    private readonly propsParser;
+    constructor(properties: SimCfnIamRoleCreatorProperties);
+    /**
+     * Create a simulated Role from an AWS::IAM::Role Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimIamRole>;
+    private putInlinePolicies;
+    private attachManagedPolicies;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-role-creator.d.ts.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,4BAA4B,CAAC;AAO7E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IAEnE,YAAY,UAAU,EAAE,8BAA8B,EAErD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,UAAU,CAAC,CAwBrB;YAEa,iBAAiB;YAgBjB,qBAAqB;CAcpC"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-creator.js

@@ -0,0 +1,51 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimCfnIamRolePropsParser as SimCfnIamRolePropertiesParser, } from "./sim-cfn-iam-role-props-parser.js";
+/**
+ * Creates simulated IAM Roles from CloudFormation Resources.
+ */
+export class SimCfnIamRoleCreator {
+    iam;
+    propsParser = new SimCfnIamRolePropertiesParser();
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Create a simulated Role from an AWS::IAM::Role Resource.
+     */
+    async create(resource, properties) {
+        const roleProperties = this.propsParser.parse(resource, properties);
+        await this.iam.createRole({
+            input: {
+                RoleName: roleProperties.roleName,
+                Path: roleProperties.path,
+                Description: roleProperties.description,
+                AssumeRolePolicyDocument: roleProperties.assumeRolePolicyDocument,
+            },
+        });
+        await Promise.all([
+            this.putInlinePolicies(roleProperties),
+            this.attachManagedPolicies(roleProperties),
+        ]);
+        const role = this.iam.roles.get(roleProperties.roleName);
+        assertDefined(role, `Sim IAM Role ${roleProperties.roleName} after CloudFormation creation`);
+        return role;
+    }
+    async putInlinePolicies(roleProperties) {
+        await Promise.all(roleProperties.inlinePolicies.map(async (inlinePolicy) => this.iam.putRolePolicy({
+            input: {
+                RoleName: roleProperties.roleName,
+                PolicyName: inlinePolicy.policyName,
+                PolicyDocument: inlinePolicy.policyDocument,
+            },
+        })));
+    }
+    async attachManagedPolicies(roleProperties) {
+        await Promise.all(roleProperties.managedPolicyArns.map(async (policyArn) => this.iam.attachRolePolicy({
+            input: {
+                RoleName: roleProperties.roleName,
+                PolicyArn: policyArn,
+            },
+        })));
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-role-creator.js.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-creator.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,wBAAwB,IAAI,6BAA6B,GAE1D,MAAM,oCAAoC,CAAC;AAM5C;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,GAAG,CAAS;IACZ,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAEnE,YAAY,UAA0C;QACpD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEpE,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACxB,KAAK,EAAE;gBACL,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,WAAW,EAAE,cAAc,CAAC,WAAW;gBACvC,wBAAwB,EAAE,cAAc,CAAC,wBAAwB;aAClE;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC;YACtC,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC;SAC3C,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,QAA0B,CAAC,CAAC;QAC3E,aAAa,CACX,IAAI,EACJ,gBAAgB,cAAc,CAAC,QAAQ,gCAAgC,CACxE,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,cAAuC;QAEvC,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CACvD,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,cAAc,EAAE,YAAY,CAAC,cAAc;aAC5C;SACF,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,cAAuC;QAEvC,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACvD,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxB,KAAK,EAAE;gBACL,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,SAAS,EAAE,SAAS;aACrB;SACF,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.d.ts

@@ -0,0 +1,25 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+export interface SimCfnIamRoleInlinePolicy {
+    readonly policyName: string;
+    readonly policyDocument: string;
+}
+/**
+ * Parses the AWS::IAM::Role policy collection properties: the inline `Policies`
+ * list and the attached `ManagedPolicyArns` list.
+ *
+ * These list-shaped properties carry the bulk of the Role property validation,
+ * so grouping them here keeps the main Role props parser small.
+ */
+export declare class SimCfnIamRolePoliciesParser {
+    /**
+     * Parse the inline `Policies` property into normalised inline policies.
+     */
+    inlinePolicies(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): readonly SimCfnIamRoleInlinePolicy[];
+    /**
+     * Parse the attached `ManagedPolicyArns` property into policy ARN strings.
+     */
+    managedPolicyArns(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): readonly string[];
+    private inlinePolicy;
+}
+//# sourceMappingURL=sim-cfn-iam-role-policies-parser.d.ts.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-policies-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,SAAS,yBAAyB,EAAE,CActC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,SAAS,MAAM,EAAE,CAsBnB;IAED,OAAO,CAAC,YAAY;CAuCrB"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.js

@@ -0,0 +1,62 @@
+/**
+ * Parses the AWS::IAM::Role policy collection properties: the inline `Policies`
+ * list and the attached `ManagedPolicyArns` list.
+ *
+ * These list-shaped properties carry the bulk of the Role property validation,
+ * so grouping them here keeps the main Role props parser small.
+ */
+export class SimCfnIamRolePoliciesParser {
+    /**
+     * Parse the inline `Policies` property into normalised inline policies.
+     */
+    inlinePolicies(resource, properties) {
+        const policies = properties["Policies"];
+        if (policies === undefined) {
+            return [];
+        }
+        if (!Array.isArray(policies)) {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: Policies must be an array`);
+        }
+        return policies.map((policy) => this.inlinePolicy(resource, policy));
+    }
+    /**
+     * Parse the attached `ManagedPolicyArns` property into policy ARN strings.
+     */
+    managedPolicyArns(resource, properties) {
+        const managedPolicyArns = properties["ManagedPolicyArns"];
+        if (managedPolicyArns === undefined) {
+            return [];
+        }
+        if (!Array.isArray(managedPolicyArns)) {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: ManagedPolicyArns must be an array`);
+        }
+        return managedPolicyArns.map((arn) => {
+            if (typeof arn !== "string") {
+                throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: each ManagedPolicyArns entry must be a string`);
+            }
+            return arn;
+        });
+    }
+    inlinePolicy(resource, policy) {
+        if (typeof policy !== "object" ||
+            policy === null ||
+            Array.isArray(policy)) {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: each Policies entry must be an object`);
+        }
+        const policyName = policy["PolicyName"];
+        if (typeof policyName !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: Policies entry PolicyName must be a string`);
+        }
+        const policyDocument = policy["PolicyDocument"];
+        if (typeof policyDocument !== "object" ||
+            policyDocument === null ||
+            Array.isArray(policyDocument)) {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: Policies entry PolicyDocument must be an object`);
+        }
+        return {
+            policyName,
+            policyDocument: JSON.stringify(policyDocument),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-role-policies-parser.js.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-policies-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACtC;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,UAAqC;QAErC,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,6BAA6B,CAC1E,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAwB,EACxB,UAAqC;QAErC,MAAM,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAE1D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,sCAAsC,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,iDAAiD,CAC9F,CAAC;YACJ,CAAC;YAED,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,QAAwB,EACxB,MAAqD;QAErD,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,yCAAyC,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QAExC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,8CAA8C,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEhD,IACE,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,mDAAmD,CAChG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU;YACV,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-props-parser.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { type SimCfnIamRoleInlinePolicy } from "./sim-cfn-iam-role-policies-parser.js";
+export interface SimCfnIamRoleProps {
+    readonly roleName: string;
+    readonly path: string | undefined;
+    readonly description: string | undefined;
+    readonly assumeRolePolicyDocument: string;
+    readonly inlinePolicies: readonly SimCfnIamRoleInlinePolicy[];
+    readonly managedPolicyArns: readonly string[];
+}
+/**
+ * Parses and validates AWS::IAM::Role CloudFormation properties into the shape
+ * the sim IAM Role creator needs.
+ *
+ * Keeping the property-shape validation here keeps the creator focused on
+ * orchestrating IAM command calls.
+ */
+export declare class SimCfnIamRolePropsParser {
+    private readonly policiesParser;
+    /**
+     * Parse the resolved CloudFormation properties for an AWS::IAM::Role.
+     */
+    parse(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCfnIamRoleProps;
+    private optionalString;
+    private jsonObject;
+}
+//# sourceMappingURL=sim-cfn-iam-role-props-parser.d.ts.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-props-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-props-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-props-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,uCAAuC,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC9D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IAEpE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,kBAAkB,CAsBpB;IAED,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,UAAU;CAanB"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-props-parser.js

@@ -0,0 +1,41 @@
+import { SimCfnIamRolePoliciesParser, } from "./sim-cfn-iam-role-policies-parser.js";
+/**
+ * Parses and validates AWS::IAM::Role CloudFormation properties into the shape
+ * the sim IAM Role creator needs.
+ *
+ * Keeping the property-shape validation here keeps the creator focused on
+ * orchestrating IAM command calls.
+ */
+export class SimCfnIamRolePropsParser {
+    policiesParser = new SimCfnIamRolePoliciesParser();
+    /**
+     * Parse the resolved CloudFormation properties for an AWS::IAM::Role.
+     */
+    parse(resource, properties) {
+        return {
+            roleName: this.optionalString(resource, properties["RoleName"], "RoleName") ??
+                resource.logicalId,
+            path: this.optionalString(resource, properties["Path"], "Path"),
+            description: this.optionalString(resource, properties["Description"], "Description"),
+            assumeRolePolicyDocument: this.jsonObject(resource, properties["AssumeRolePolicyDocument"], "AssumeRolePolicyDocument"),
+            inlinePolicies: this.policiesParser.inlinePolicies(resource, properties),
+            managedPolicyArns: this.policiesParser.managedPolicyArns(resource, properties),
+        };
+    }
+    optionalString(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "string") {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: ${label} must be a string`);
+        }
+        return value;
+    }
+    jsonObject(resource, value, label) {
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            throw new TypeError(`Invalid AWS::IAM::Role ${resource.logicalId}: ${label} must be an object`);
+        }
+        return JSON.stringify(value);
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-role-props-parser.js.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-props-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-props-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-props-parser.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,2BAA2B,GAE5B,MAAM,uCAAuC,CAAC;AAW/C;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,cAAc,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAEpE;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,UAAqC;QAErC,OAAO;YACL,QAAQ,EACN,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;gBACjE,QAAQ,CAAC,SAAS;YACpB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAC/D,WAAW,EAAE,IAAI,CAAC,cAAc,CAC9B,QAAQ,EACR,UAAU,CAAC,aAAa,CAAC,EACzB,aAAa,CACd;YACD,wBAAwB,EAAE,IAAI,CAAC,UAAU,CACvC,QAAQ,EACR,UAAU,CAAC,0BAA0B,CAAC,EACtC,0BAA0B,CAC3B;YACD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC;YACxE,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,iBAAiB,CACtD,QAAQ,EACR,UAAU,CACX;SACF,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,QAAwB,EACxB,KAAoD,EACpD,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,KAAK,KAAK,mBAAmB,CAC1E,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAChB,QAAwB,EACxB,KAAoD,EACpD,KAAa;QAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,KAAK,KAAK,oBAAoB,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.d.ts

@@ -0,0 +1,17 @@
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
+import type { SimIam } from "../sim-iam.js";
+/**
+ * CloudFormation Resource factory for simulated IAM resources.
+ */
+export declare class SimIamCloudFormationResourceFactory implements SimCfnServiceResourceFactory {
+    private readonly managedPolicyCreator;
+    private readonly policyCreator;
+    private readonly roleCreator;
+    constructor(iam: SimIam);
+    /**
+     * Create a simulated IAM resource from a CloudFormation Resource.
+     */
+    create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
+}
+//# sourceMappingURL=sim-cfn-iam-resource-factory.d.ts.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C;;GAEG;AACH,qBAAa,mCAAoC,YAAW,4BAA4B;IACtF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IAEnD,YAAY,GAAG,EAAE,MAAM,EAItB;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2B7B;CACF"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.js

@@ -0,0 +1,37 @@
+import { SimCfnIamManagedPolicyCreator } from "./managed-policy/sim-cfn-iam-managed-policy-creator.js";
+import { SimCfnIamPolicyCreator } from "./policy/sim-cfn-iam-policy-creator.js";
+import { SimCfnIamRoleCreator } from "./role/sim-cfn-iam-role-creator.js";
+/**
+ * CloudFormation Resource factory for simulated IAM resources.
+ */
+export class SimIamCloudFormationResourceFactory {
+    managedPolicyCreator;
+    policyCreator;
+    roleCreator;
+    constructor(iam) {
+        this.managedPolicyCreator = new SimCfnIamManagedPolicyCreator({ iam });
+        this.policyCreator = new SimCfnIamPolicyCreator({ iam });
+        this.roleCreator = new SimCfnIamRoleCreator({ iam });
+    }
+    /**
+     * Create a simulated IAM resource from a CloudFormation Resource.
+     */
+    async create(resourceTypeName, resource, context) {
+        switch (resourceTypeName) {
+            case "ManagedPolicy": {
+                return await this.managedPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            case "Policy": {
+                await this.policyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return;
+            }
+            case "Role": {
+                return await this.roleCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            default: {
+                throw new Error(`Unsupported sim IAM CloudFormation Resource ${resourceTypeName}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-resource-factory.js.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC7B,oBAAoB,CAAgC;IACpD,aAAa,CAAyB;IACtC,WAAW,CAAuB;IAEnD,YAAY,GAAW;QACrB,IAAI,CAAC,oBAAoB,GAAG,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAC7B,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAClC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy-input-resolver.d.ts

@@ -0,0 +1,34 @@
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { SimCreatePolicyCommand } from "./create-policy.cmd.js";
+import type { SimIamPolicyName } from "../../../policy/sim-iam-policy.js";
+/**
+ * The validated identity of a policy about to be created, derived from the
+ * raw CreatePolicy command input.
+ */
+export interface ResolvedCreatePolicyInput {
+    readonly policyName: SimIamPolicyName;
+    readonly path: string;
+    readonly arn: SimArn;
+}
+/**
+ * Validates CreatePolicy command input and resolves it into the policy's
+ * identity (name, normalised path, and ARN).
+ *
+ * The handler owns orchestration (sequencing, duplicate checks, persistence);
+ * this resolver owns the up-front "is this input usable, and what ARN does it
+ * map to" concern. Keeping name validation, document validation, path
+ * normalisation, and ARN construction together here keeps those input rules in
+ * one place and off the handler's critical path.
+ */
+export declare class CreatePolicyInputResolver {
+    private readonly accountId;
+    private readonly policyDocValidator;
+    constructor(accountId: SimAwsAccountId);
+    /**
+     * Validate the command input and resolve the policy's name, normalised
+     * path, and ARN.
+     */
+    resolve(command: SimCreatePolicyCommand): ResolvedCreatePolicyInput;
+}
+//# sourceMappingURL=create-policy-input-resolver.d.ts.map

package/dist/service/iam/command/policy/create-policy/create-policy-input-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy-input-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-input-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAK1E;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IAIxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAHtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACG;IAEtC,YAA6B,SAAS,EAAE,eAAe,EAAI;IAE3D;;;OAGG;IACH,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,yBAAyB,CAiBlE;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy-input-resolver.js

@@ -0,0 +1,39 @@
+import { makeSimPolicyArn } from "../../../policy/sim-iam-policy-arn.js";
+import { normalisePolicyPath } from "../../../policy/sim-iam-policy-path.js";
+import { SimIamPolicyDocumentValidator } from "../../../validate/sim-iam-policy-doc-validator.js";
+/**
+ * Validates CreatePolicy command input and resolves it into the policy's
+ * identity (name, normalised path, and ARN).
+ *
+ * The handler owns orchestration (sequencing, duplicate checks, persistence);
+ * this resolver owns the up-front "is this input usable, and what ARN does it
+ * map to" concern. Keeping name validation, document validation, path
+ * normalisation, and ARN construction together here keeps those input rules in
+ * one place and off the handler's critical path.
+ */
+export class CreatePolicyInputResolver {
+    accountId;
+    policyDocValidator = new SimIamPolicyDocumentValidator();
+    constructor(accountId) {
+        this.accountId = accountId;
+    }
+    /**
+     * Validate the command input and resolve the policy's name, normalised
+     * path, and ARN.
+     */
+    resolve(command) {
+        const policyName = command.input.PolicyName;
+        if (policyName === undefined || policyName.length === 0) {
+            throw new Error("PolicyName is required");
+        }
+        this.policyDocValidator.validateOptional(command.input.PolicyDocument);
+        const path = normalisePolicyPath(command.input.Path);
+        const arn = makeSimPolicyArn({
+            accountId: this.accountId,
+            path,
+            policyName,
+        });
+        return { policyName, path, arn };
+    }
+}
+//# sourceMappingURL=create-policy-input-resolver.js.map

package/dist/service/iam/command/policy/create-policy/create-policy-input-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy-input-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-input-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAYlG;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IAIP,SAAS;IAHrB,kBAAkB,GACjC,IAAI,6BAA6B,EAAE,CAAC;IAEtC,YAA6B,SAA0B;yBAA1B,SAAS;IAAoB,CAAC;IAE3D;;;OAGG;IACH,OAAO,CAAC,OAA+B;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAA0C,CAAC;QAE5E,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,gBAAgB,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACnC,CAAC;CACF"}