@kensio/yulin 0.34.2 → 0.36.0

package/dist/service/iam/validate/trust/sim-iam-trust-policy-document-validator.js

@@ -0,0 +1,85 @@
+import { jsonParse } from "../../../../util/type-guard/json.js";
+import { SimIamMalformedPolicyDocument } from "../../error/sim-iam.error.js";
+import { simIamPolicyDocumentStatements } from "../../policy/sim-iam-pol-document-statements.js";
+/**
+ * Validates an IAM Role trust policy.
+ *
+ * Trust policies differ from identity policies:
+ *
+ * - they require Principal or NotPrincipal;
+ * - they require Action or NotAction;
+ * - Resource and NotResource are not valid because the policy is implicitly
+ *   attached to its owning Role.
+ */
+export class SimIamTrustPolicyDocumentValidator {
+    /**
+     * Validate a required JSON Role trust-policy document.
+     */
+    validateRequired(policyDocument) {
+        if (policyDocument === undefined || policyDocument.length === 0) {
+            throw new Error("AssumeRolePolicyDocument is required");
+        }
+        const parsedPolicyDocument = jsonParse(policyDocument);
+        this.validateParsed(parsedPolicyDocument);
+    }
+    validateParsed(policyDocument) {
+        for (const statement of simIamPolicyDocumentStatements(policyDocument)) {
+            // JSON parsing could produce any value so we have to runtime validate.
+            // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+            if (statement.Effect !== "Allow" && statement.Effect !== "Deny") {
+                throw new SimIamMalformedPolicyDocument('IAM trust policy statement Effect must be either "Allow" or "Deny"');
+            }
+            if (statement.Action === undefined && statement.NotAction === undefined) {
+                throw new SimIamMalformedPolicyDocument("IAM trust policy statement must define either Action or NotAction");
+            }
+            if (statement.Principal === undefined &&
+                statement.NotPrincipal === undefined) {
+                throw new SimIamMalformedPolicyDocument("IAM trust policy statement must define either Principal or NotPrincipal");
+            }
+            if (statement.Principal !== undefined &&
+                statement.NotPrincipal !== undefined) {
+                throw new SimIamMalformedPolicyDocument("IAM trust policy statement cannot define both Principal and NotPrincipal");
+            }
+            if (statement.Resource !== undefined ||
+                statement.NotResource !== undefined) {
+                throw new SimIamMalformedPolicyDocument("IAM trust policy statement cannot define Resource or NotResource");
+            }
+            if (statement.Principal !== undefined) {
+                this.validatePrincipal(statement.Principal);
+            }
+            if (statement.NotPrincipal !== undefined) {
+                this.validatePrincipal(statement.NotPrincipal);
+            }
+        }
+    }
+    validatePrincipal(principal) {
+        if (typeof principal === "string") {
+            this.validatePrincipalValue(principal);
+            return;
+        }
+        if (Array.isArray(principal)) {
+            for (const value of principal) {
+                this.validatePrincipalValue(value);
+            }
+            return;
+        }
+        for (const [principalType, values] of Object.entries(principal)) {
+            if (principalType !== "AWS" && principalType !== "Service") {
+                throw new SimIamMalformedPolicyDocument(`Unsupported IAM trust policy principal type: ${principalType}`);
+            }
+            if (typeof values === "string") {
+                this.validatePrincipalValue(values);
+                continue;
+            }
+            for (const value of values) {
+                this.validatePrincipalValue(value);
+            }
+        }
+    }
+    validatePrincipalValue(value) {
+        if (value.length === 0) {
+            throw new SimIamMalformedPolicyDocument("IAM trust policy principal cannot be empty");
+        }
+    }
+}
+//# sourceMappingURL=sim-iam-trust-policy-document-validator.js.map

package/dist/service/iam/validate/trust/sim-iam-trust-policy-document-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-trust-policy-document-validator.js","sourceRoot":"","sources":["../../../../../src/service/iam/validate/trust/sim-iam-trust-policy-document-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAK7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AAEjG;;;;;;;;;GASG;AACH,MAAM,OAAO,kCAAkC;IAC7C;;OAEG;IACH,gBAAgB,CACd,cAAkC;QAElC,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,oBAAoB,GAAG,SAAS,CACpC,cAAkD,CACnD,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAEO,cAAc,CAAC,cAAoC;QACzD,KAAK,MAAM,SAAS,IAAI,8BAA8B,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChE,MAAM,IAAI,6BAA6B,CACrC,oEAAoE,CACrE,CAAC;YACJ,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxE,MAAM,IAAI,6BAA6B,CACrC,mEAAmE,CACpE,CAAC;YACJ,CAAC;YAED,IACE,SAAS,CAAC,SAAS,KAAK,SAAS;gBACjC,SAAS,CAAC,YAAY,KAAK,SAAS,EACpC,CAAC;gBACD,MAAM,IAAI,6BAA6B,CACrC,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YAED,IACE,SAAS,CAAC,SAAS,KAAK,SAAS;gBACjC,SAAS,CAAC,YAAY,KAAK,SAAS,EACpC,CAAC;gBACD,MAAM,IAAI,6BAA6B,CACrC,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YAED,IACE,SAAS,CAAC,QAAQ,KAAK,SAAS;gBAChC,SAAS,CAAC,WAAW,KAAK,SAAS,EACnC,CAAC;gBACD,MAAM,IAAI,6BAA6B,CACrC,kEAAkE,CACnE,CAAC;YACJ,CAAC;YAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACzC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,SAAwC;QAChE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,sBAAsB,CAAC,KAAe,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC3D,MAAM,IAAI,6BAA6B,CACrC,gDAAgD,aAAa,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBACpC,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,KAAa;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,6BAA6B,CACrC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.d.ts

@@ -3,12 +3,14 @@ import type { SimCfnLambdaFunctionProperties } from "./sim-cfn-lambda-function-p
 /**
  * Skips functions whose code lives in a missing CDK bootstrap assets bucket.
  *
- * CDK-synthesized templates include helper functions, such as the CDK
- * BucketDeployment provider, whose code zip lives in the CDK bootstrap assets
- * bucket. That bucket does not exist in sim AWS, and sim CloudFormation
- * simulates the CDK custom resources directly instead of running their
- * provider functions. The "Unsupported sim ... CloudFormation" wording marks
- * the Resource as skipped rather than failing the stack.
+ * Deploying from a synthesized template file publishes the cloud assembly's
+ * assets into that bucket in sim S3 first, so asset-bundled function code is
+ * normally found there. This skip covers what is left: a CDK-shaped template
+ * deployed without its cloud assembly, such as a template object passed
+ * inline, where there is no asset to publish and nothing to fetch.
+ *
+ * The "Unsupported sim ... CloudFormation" wording marks the Resource as
+ * skipped rather than failing the stack.
  */
 export declare class SimCfnLambdaCdkAssetsSkip {
     /**

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAE3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAQrG;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAQ,EAAE,cAAc,EACxB,kBAAkB,EAAE,8BAA8B,EAClD,KAAK,EAAE,OAAO,GACb,KAAK,GAAG,SAAS,CAWnB;IAED,OAAO,CAAC,iCAAiC;CAa1C"}
+{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAE3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAQrG;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAQ,EAAE,cAAc,EACxB,kBAAkB,EAAE,8BAA8B,EAClD,KAAK,EAAE,OAAO,GACb,KAAK,GAAG,SAAS,CAcnB;IAED,OAAO,CAAC,iCAAiC;CAa1C"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.js

@@ -6,12 +6,14 @@ const cdkBootstrapAssetsBucketPattern = /^cdk-[a-z0-9]+-assets-\d{12}-[a-z0-9-]+
 /**
  * Skips functions whose code lives in a missing CDK bootstrap assets bucket.
  *
- * CDK-synthesized templates include helper functions, such as the CDK
- * BucketDeployment provider, whose code zip lives in the CDK bootstrap assets
- * bucket. That bucket does not exist in sim AWS, and sim CloudFormation
- * simulates the CDK custom resources directly instead of running their
- * provider functions. The "Unsupported sim ... CloudFormation" wording marks
- * the Resource as skipped rather than failing the stack.
+ * Deploying from a synthesized template file publishes the cloud assembly's
+ * assets into that bucket in sim S3 first, so asset-bundled function code is
+ * normally found there. This skip covers what is left: a CDK-shaped template
+ * deployed without its cloud assembly, such as a template object passed
+ * inline, where there is no asset to publish and nothing to fetch.
+ *
+ * The "Unsupported sim ... CloudFormation" wording marks the Resource as
+ * skipped rather than failing the stack.
  */
 export class SimCfnLambdaCdkAssetsSkip {
     /**
@@ -24,7 +26,10 @@ export class SimCfnLambdaCdkAssetsSkip {
         }
         const bucketName = functionProperties.code?.S3Bucket ?? "";
         return new Error(`Unsupported sim Lambda CloudFormation Resource ${resource.logicalId}: ` +
-            `function code from missing CDK bootstrap assets bucket ${bucketName}`);
+            `function code from missing CDK bootstrap assets bucket ${bucketName}. ` +
+            `Deploy from a synthesized CDK template file so its cloud assembly ` +
+            `assets can be published, or bind a real in-process handler to this ` +
+            `function.`);
     }
     isMissingCdkBootstrapAssetsBucket(functionProperties, error) {
         const bucketName = functionProperties.code?.S3Bucket;

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAG1F;;GAEG;AACH,MAAM,+BAA+B,GACnC,2CAA2C,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAwB,EACxB,kBAAkD,EAClD,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE3D,OAAO,IAAI,KAAK,CACd,kDAAkD,QAAQ,CAAC,SAAS,IAAI;YACtE,0DAA0D,UAAU,EAAE,CACzE,CAAC;IACJ,CAAC;IAEO,iCAAiC,CACvC,kBAAkD,EAClD,KAAc;QAEd,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAErD,OAAO,CACL,UAAU,KAAK,SAAS;YACxB,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC;YAChD,KAAK,YAAY,uCAAuC;YACxD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CACvC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAG1F;;GAEG;AACH,MAAM,+BAA+B,GACnC,2CAA2C,CAAC;AAE9C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAwB,EACxB,kBAAkD,EAClD,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE3D,OAAO,IAAI,KAAK,CACd,kDAAkD,QAAQ,CAAC,SAAS,IAAI;YACtE,0DAA0D,UAAU,IAAI;YACxE,oEAAoE;YACpE,qEAAqE;YACrE,WAAW,CACd,CAAC;IACJ,CAAC;IAEO,iCAAiC,CACvC,kBAAkD,EAClD,KAAc;QAEd,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAErD,OAAO,CACL,UAAU,KAAK,SAAS;YACxB,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC;YAChD,KAAK,YAAY,uCAAuC;YACxD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CACvC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.d.ts

@@ -1,12 +1,20 @@
 import type { SimCfnExecutableResourceBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
-import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.cmd.js";
+import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.command.js";
 import type { SimCfnLambdaFunctionProperties } from "./sim-cfn-lambda-function-properties-parser.js";
 interface SimCfnLambdaCodeInputProperties {
     readonly resource: SimCfnResource;
     readonly functionProperties: SimCfnLambdaFunctionProperties;
     readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
 }
+/**
+ * The code a Resource's function will be created with, and whether an
+ * executable binding supplied it.
+ */
+export interface SimCfnLambdaCodeInput {
+    readonly code: SimLambdaFunctionCode | undefined;
+    readonly bound: boolean;
+}
 /**
  * The CreateFunction code input for an AWS::Lambda::Function Resource: an
  * executable binding's real handler when one targets the Resource, otherwise
@@ -18,6 +26,6 @@ interface SimCfnLambdaCodeInputProperties {
  * replaces the code wholesale. Bindings can target the logical ID (or CDK
  * construct ID), the resolved function name, or the function ARN.
  */
-export declare function simCfnLambdaCodeInput(properties: SimCfnLambdaCodeInputProperties): SimLambdaFunctionCode | undefined;
+export declare function simCfnLambdaCodeInput(properties: SimCfnLambdaCodeInputProperties): SimCfnLambdaCodeInput;
 export {};
 //# sourceMappingURL=sim-cfn-lambda-code-input.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-code-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AAEjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAIlG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAErG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,+BAA+B,GAC1C,qBAAqB,GAAG,SAAS,CAoBnC"}
+{"version":3,"file":"sim-cfn-lambda-code-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AAEjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0DAA0D,CAAC;AAItG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAErG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,+BAA+B,GAC1C,qBAAqB,CAuBvB"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.js

@@ -23,8 +23,11 @@ export function simCfnLambdaCodeInput(properties) {
         arn: simLambdaFunctionArn(resource.accountRegionScope, functionProperties.functionName),
     });
     if (binding === undefined) {
-        return functionProperties.code;
+        return { code: functionProperties.code, bound: false };
     }
-    return { ZipFile: makeLambdaZipFileInput(binding.handler) };
+    return {
+        code: { ZipFile: makeLambdaZipFileInput(binding.handler) },
+        bound: true,
+    };
 }
 //# sourceMappingURL=sim-cfn-lambda-code-input.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-code-input.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAG/G,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAU7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA2C;IAE3C,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAE9D,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAAmB;QAClE,QAAQ;QACR,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC;QACxC,YAAY,EAAE,kBAAkB,CAAC,YAAY;QAC7C,GAAG,EAAE,oBAAoB,CACvB,QAAQ,CAAC,kBAAkB,EAC3B,kBAAkB,CAAC,YAAY,CAChC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"sim-cfn-lambda-code-input.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAG/G,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAmB7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA2C;IAE3C,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAE9D,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAAmB;QAClE,QAAQ;QACR,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC;QACxC,YAAY,EAAE,kBAAkB,CAAC,YAAY;QAC7C,GAAG,EAAE,oBAAoB,CACvB,QAAQ,CAAC,kBAAkB,EAC3B,kBAAkB,CAAC,YAAY,CAChC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QAC1D,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.d.ts

@@ -0,0 +1,18 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaFunctionEnvironment } from "../../command/create-function/create-function.command.js";
+/**
+ * Parses the nested AWS::Lambda::Function Environment property.
+ *
+ * Its own parser because Environment is the one function property with a
+ * shape of its own rather than a plain scalar: an object holding a map of
+ * variables, each of which has to be checked individually.
+ */
+export declare class SimCfnLambdaEnvironmentParser {
+    private readonly propertyParser;
+    /**
+     * Parse the Environment property into the declared function environment.
+     */
+    parse(resource: SimCfnResource, environment: SimCfnTemplateValue | undefined): SimLambdaFunctionEnvironment | undefined;
+}
+//# sourceMappingURL=sim-cfn-lambda-environment-parser.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-environment-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,0DAA0D,CAAC;AAG7G;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,mBAAmB,GAAG,SAAS,GAC3C,4BAA4B,GAAG,SAAS,CAuB1C;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.js

@@ -0,0 +1,29 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCfnLambdaPropertyParser } from "./sim-cfn-lambda-property-parser.js";
+/**
+ * Parses the nested AWS::Lambda::Function Environment property.
+ *
+ * Its own parser because Environment is the one function property with a
+ * shape of its own rather than a plain scalar: an object holding a map of
+ * variables, each of which has to be checked individually.
+ */
+export class SimCfnLambdaEnvironmentParser {
+    propertyParser = new SimCfnLambdaPropertyParser();
+    /**
+     * Parse the Environment property into the declared function environment.
+     */
+    parse(resource, environment) {
+        if (environment === undefined) {
+            return undefined;
+        }
+        if (!isRecord(environment)) {
+            throw this.propertyParser.invalidPropertyError(resource, "Environment", "an object");
+        }
+        const variables = this.propertyParser.optionalStringRecord(resource, environment["Variables"], "Environment.Variables");
+        if (variables === undefined) {
+            return undefined;
+        }
+        return { Variables: variables };
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-environment-parser.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-environment-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-environment-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAIjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,cAAc,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,WAA4C;QAE5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,QAAQ,EACR,aAAa,EACb,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACxD,QAAQ,EACR,WAAW,CAAC,WAAW,CAAC,EACxB,uBAAuB,CACxB,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.d.ts

@@ -1,6 +1,6 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
-import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.cmd.js";
+import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.command.js";
 /**
  * Parses the AWS::Lambda::Function Code property into sim Lambda
  * CreateFunction code input.

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-function-code-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAIlG;;;;;;;;GAQG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,qBAAqB,GAAG,SAAS,CA+BnC;IAED,OAAO,CAAC,YAAY;CAerB"}
+{"version":3,"file":"sim-cfn-lambda-function-code-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0DAA0D,CAAC;AAItG;;;;;;;;GAQG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,qBAAqB,GAAG,SAAS,CA+BnC;IAED,OAAO,CAAC,YAAY;CAerB"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.d.ts

@@ -13,6 +13,7 @@ export declare class SimCfnLambdaFunctionCreator {
     private readonly lambda;
     private readonly propertiesParser;
     private readonly cdkAssetsSkip;
+    private readonly runtimeSkip;
     constructor(properties: SimCfnLambdaFunctionCreatorProperties);
     /**
      * Create a simulated Lambda function from an AWS::Lambda::Function Resource.

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-function-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAQrD,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACY;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;OAOG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,EACrC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GACpD,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;CACF"}
+{"version":3,"file":"sim-cfn-lambda-function-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AASrD,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACY;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;OAOG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,EACrC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GACpD,OAAO,CAAC,iBAAiB,CAAC,CA8C5B;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.js

@@ -1,6 +1,7 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCfnLambdaCdkAssetsSkip } from "./sim-cfn-lambda-cdk-assets-skip.js";
 import { simCfnLambdaCodeInput } from "./sim-cfn-lambda-code-input.js";
+import { SimCfnLambdaRuntimeSkip } from "./sim-cfn-lambda-runtime-skip.js";
 import { simCfnLambdaCreateFunctionInput, SimCfnLambdaFunctionPropertiesParser, } from "./sim-cfn-lambda-function-properties-parser.js";
 /**
  * Creates simulated Lambda functions from CloudFormation Resources.
@@ -9,6 +10,7 @@ export class SimCfnLambdaFunctionCreator {
     lambda;
     propertiesParser = new SimCfnLambdaFunctionPropertiesParser();
     cdkAssetsSkip = new SimCfnLambdaCdkAssetsSkip();
+    runtimeSkip = new SimCfnLambdaRuntimeSkip();
     constructor(properties) {
         this.lambda = properties.lambda;
     }
@@ -22,11 +24,15 @@ export class SimCfnLambdaFunctionCreator {
      */
     async create(resource, properties, bindings) {
         const functionProperties = this.propertiesParser.parse(resource, properties);
-        const code = simCfnLambdaCodeInput({
+        const { code, bound } = simCfnLambdaCodeInput({
             resource,
             functionProperties,
             bindings,
         });
+        const runtimeSkipError = this.runtimeSkip.findSkipError(resource, functionProperties, bound);
+        if (runtimeSkipError !== undefined) {
+            throw runtimeSkipError;
+        }
         try {
             await this.lambda.createFunction({
                 input: simCfnLambdaCreateFunctionInput(functionProperties, code),

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-function-creator.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,gDAAgD,CAAC;AAMxD;;GAEG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAY;IAClB,gBAAgB,GAC/B,IAAI,oCAAoC,EAAE,CAAC;IAC5B,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC,EACrC,QAAqD;QAErD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CACpD,QAAQ,EACR,UAAU,CACX,CAAC;QACF,MAAM,IAAI,GAAG,qBAAqB,CAAC;YACjC,QAAQ;YACR,kBAAkB;YAClB,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC/B,KAAK,EAAE,+BAA+B,CAAC,kBAAkB,EAAE,IAAI,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAChD,QAAQ,EACR,kBAAkB,EAClB,KAAK,CACN,CAAC;YACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAClD,kBAAkB,CAAC,YAAY,CAChC,CAAC;QACF,aAAa,CACX,WAAW,EACX,uBAAuB,kBAAkB,CAAC,YAAY,gCAAgC,CACvF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-function-creator.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,gDAAgD,CAAC;AAMxD;;GAEG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAY;IAClB,gBAAgB,GAC/B,IAAI,oCAAoC,EAAE,CAAC;IAC5B,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAChD,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE7D,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC,EACrC,QAAqD;QAErD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CACpD,QAAQ,EACR,UAAU,CACX,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC;YAC5C,QAAQ;YACR,kBAAkB;YAClB,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CACrD,QAAQ,EACR,kBAAkB,EAClB,KAAK,CACN,CAAC;QACF,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,gBAAgB,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC/B,KAAK,EAAE,+BAA+B,CAAC,kBAAkB,EAAE,IAAI,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAChD,QAAQ,EACR,kBAAkB,EAClB,KAAK,CACN,CAAC;YACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAClD,kBAAkB,CAAC,YAAY,CAChC,CAAC;QACF,aAAa,CACX,WAAW,EACX,uBAAuB,kBAAkB,CAAC,YAAY,gCAAgC,CACvF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.d.ts

@@ -1,6 +1,6 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
-import type { SimCreateFunctionCommandInput, SimLambdaFunctionCode } from "../../command/create-function/create-function.cmd.js";
+import type { SimCreateFunctionCommandInput, SimLambdaFunctionCode, SimLambdaFunctionEnvironment } from "../../command/create-function/create-function.command.js";
 export interface SimCfnLambdaFunctionProperties {
     readonly functionName: string;
     readonly roleArn: string;
@@ -10,6 +10,7 @@ export interface SimCfnLambdaFunctionProperties {
     readonly description: string | undefined;
     readonly timeoutSeconds: number | undefined;
     readonly memorySizeMb: number | undefined;
+    readonly environment: SimLambdaFunctionEnvironment | undefined;
 }
 /**
  * Map parsed AWS::Lambda::Function properties onto the sim Lambda
@@ -27,6 +28,7 @@ export declare function simCfnLambdaCreateFunctionInput(functionProperties: SimC
 export declare class SimCfnLambdaFunctionPropertiesParser {
     private readonly propertyParser;
     private readonly codeParser;
+    private readonly environmentParser;
     /**
      * Parse the resolved CloudFormation properties for an AWS::Lambda::Function.
      */

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-function-properties-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,sDAAsD,CAAC;AAI9D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,kBAAkB,EAAE,8BAA8B,EAClD,IAAI,EAAE,qBAAqB,GAAG,SAAS,GACtC,6BAA6B,CAW/B;AAED;;;;;;GAMG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,8BAA8B,CA+BhC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAqBf;;;OAGG;IACH,OAAO,CAAC,YAAY;CAYrB"}
+{"version":3,"file":"sim-cfn-lambda-function-properties-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,4BAA4B,EAC7B,MAAM,0DAA0D,CAAC;AAKlE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,kBAAkB,EAAE,8BAA8B,EAClD,IAAI,EAAE,qBAAqB,GAAG,SAAS,GACtC,6BAA6B,CAY/B;AAED;;;;;;GAMG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IACnE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IAEzE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,8BAA8B,CAmChC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAqBf;;;OAGG;IACH,OAAO,CAAC,YAAY;CAYrB"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.js

@@ -1,4 +1,5 @@
 import { makeSimRoleArn } from "../../../iam/role/arn/sim-iam-role-arn.js";
+import { SimCfnLambdaEnvironmentParser } from "./sim-cfn-lambda-environment-parser.js";
 import { SimCfnLambdaFunctionCodeParser } from "./sim-cfn-lambda-function-code-parser.js";
 import { SimCfnLambdaPropertyParser } from "./sim-cfn-lambda-property-parser.js";
 /**
@@ -16,6 +17,7 @@ export function simCfnLambdaCreateFunctionInput(functionProperties, code) {
         Description: functionProperties.description,
         Timeout: functionProperties.timeoutSeconds,
         MemorySize: functionProperties.memorySizeMb,
+        Environment: functionProperties.environment,
     };
 }
 /**
@@ -28,6 +30,7 @@ export function simCfnLambdaCreateFunctionInput(functionProperties, code) {
 export class SimCfnLambdaFunctionPropertiesParser {
     propertyParser = new SimCfnLambdaPropertyParser();
     codeParser = new SimCfnLambdaFunctionCodeParser();
+    environmentParser = new SimCfnLambdaEnvironmentParser();
     /**
      * Parse the resolved CloudFormation properties for an AWS::Lambda::Function.
      */
@@ -41,6 +44,7 @@ export class SimCfnLambdaFunctionPropertiesParser {
             description: this.propertyParser.optionalString(resource, properties["Description"], "Description"),
             timeoutSeconds: this.propertyParser.optionalNumber(resource, properties["Timeout"], "Timeout"),
             memorySizeMb: this.propertyParser.optionalNumber(resource, properties["MemorySize"], "MemorySize"),
+            environment: this.environmentParser.parse(resource, properties["Environment"]),
         };
     }
     /**

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-function-properties-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAM3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAajF;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,kBAAkD,EAClD,IAAuC;IAEvC,OAAO;QACL,YAAY,EAAE,kBAAkB,CAAC,YAAY;QAC7C,IAAI,EAAE,kBAAkB,CAAC,OAAO;QAChC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,kBAAkB,CAAC,WAAW;QACvC,OAAO,EAAE,kBAAkB,CAAC,WAAW;QACvC,WAAW,EAAE,kBAAkB,CAAC,WAAW;QAC3C,OAAO,EAAE,kBAAkB,CAAC,cAAc;QAC1C,UAAU,EAAE,kBAAkB,CAAC,YAAY;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oCAAoC;IAC9B,cAAc,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAClD,UAAU,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,UAAqC;QAErC,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACzD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,aAAa,CAAC,EACzB,aAAa,CACd;YACD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAChD,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC9C,QAAQ,EACR,UAAU,CAAC,YAAY,CAAC,EACxB,YAAY,CACb;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,OAAO,CACb,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,MAAM,CAAC,EAClB,MAAM,CACP,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,cAAc,CAAC;YACpB,SAAS,EAAE,QAAQ,CAAC,kBAAkB,CAAC,SAAS;YAChD,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,YAAY,CAClB,QAAwB,EACxB,UAAqC;QAErC,OAAO,CACL,IAAI,CAAC,cAAc,CAAC,cAAc,CAChC,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,cAAc,CACf,IAAI,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-function-properties-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-properties-parser.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAO3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAcjF;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,kBAAkD,EAClD,IAAuC;IAEvC,OAAO;QACL,YAAY,EAAE,kBAAkB,CAAC,YAAY;QAC7C,IAAI,EAAE,kBAAkB,CAAC,OAAO;QAChC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,kBAAkB,CAAC,WAAW;QACvC,OAAO,EAAE,kBAAkB,CAAC,WAAW;QACvC,WAAW,EAAE,kBAAkB,CAAC,WAAW;QAC3C,OAAO,EAAE,kBAAkB,CAAC,cAAc;QAC1C,UAAU,EAAE,kBAAkB,CAAC,YAAY;QAC3C,WAAW,EAAE,kBAAkB,CAAC,WAAW;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oCAAoC;IAC9B,cAAc,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAClD,UAAU,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAClD,iBAAiB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAEzE;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,UAAqC;QAErC,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACzD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,aAAa,CAAC,EACzB,aAAa,CACd;YACD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAChD,QAAQ,EACR,UAAU,CAAC,SAAS,CAAC,EACrB,SAAS,CACV;YACD,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC9C,QAAQ,EACR,UAAU,CAAC,YAAY,CAAC,EACxB,YAAY,CACb;YACD,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CACvC,QAAQ,EACR,UAAU,CAAC,aAAa,CAAC,CAC1B;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,OAAO,CACb,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,MAAM,CAAC,EAClB,MAAM,CACP,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,cAAc,CAAC;YACpB,SAAS,EAAE,QAAQ,CAAC,kBAAkB,CAAC,SAAS;YAChD,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,YAAY,CAClB,QAAwB,EACxB,UAAqC;QAErC,OAAO,CACL,IAAI,CAAC,cAAc,CAAC,cAAc,CAChC,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,cAAc,CACf,IAAI,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-property-parser.d.ts

@@ -1,8 +1,8 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 /**
- * Validates individual AWS::Lambda::Function CloudFormation property values,
- * failing with a diagnostic naming the property and the logical ID.
+ * Validates individual AWS::Lambda::* CloudFormation property values, failing
+ * with a diagnostic naming the Resource type, the property and the logical ID.
  */
 export declare class SimCfnLambdaPropertyParser {
     /**
@@ -17,6 +17,18 @@ export declare class SimCfnLambdaPropertyParser {
      * Parse a property value that must be a number when present.
      */
     optionalNumber(resource: SimCfnResource, value: SimCfnTemplateValue | undefined, label: string): number | undefined;
+    /**
+     * Parse a property value that must be a boolean when present.
+     */
+    optionalBoolean(resource: SimCfnResource, value: SimCfnTemplateValue | undefined, label: string): boolean | undefined;
+    /**
+     * Parse a property value that must be a record of strings when present.
+     *
+     * CloudFormation has no typed map, so every value has to be checked: a
+     * template that puts a number or a nested object where a string belongs
+     * should fail here rather than reach the function as a non-string.
+     */
+    optionalStringRecord(resource: SimCfnResource, value: SimCfnTemplateValue | undefined, label: string): Record<string, string> | undefined;
     /**
      * Build the diagnostic error for a malformed property value.
      */

package/dist/service/lambda/cfn/function/sim-cfn-lambda-property-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-property-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-property-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAE5G;;;GAGG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;IAED;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAMpB;IAED;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAUpB;IAED;;OAEG;IACH,oBAAoB,CAClB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,SAAS,CAIX;CACF"}
+{"version":3,"file":"sim-cfn-lambda-property-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-property-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAE5G;;;GAGG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;IAED;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAMpB;IAED;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAUpB;IAED;;OAEG;IACH,eAAe,CACb,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,OAAO,GAAG,SAAS,CAUrB;IAED;;;;;;OAMG;IACH,oBAAoB,CAClB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAiBpC;IAED;;OAEG;IACH,oBAAoB,CAClB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,SAAS,CAKX;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-property-parser.js

@@ -1,6 +1,7 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
 /**
- * Validates individual AWS::Lambda::Function CloudFormation property values,
- * failing with a diagnostic naming the property and the logical ID.
+ * Validates individual AWS::Lambda::* CloudFormation property values, failing
+ * with a diagnostic naming the Resource type, the property and the logical ID.
  */
 export class SimCfnLambdaPropertyParser {
     /**
@@ -33,11 +34,44 @@ export class SimCfnLambdaPropertyParser {
         }
         return value;
     }
+    /**
+     * Parse a property value that must be a boolean when present.
+     */
+    optionalBoolean(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "boolean") {
+            throw this.invalidPropertyError(resource, label, "a boolean");
+        }
+        return value;
+    }
+    /**
+     * Parse a property value that must be a record of strings when present.
+     *
+     * CloudFormation has no typed map, so every value has to be checked: a
+     * template that puts a number or a nested object where a string belongs
+     * should fail here rather than reach the function as a non-string.
+     */
+    optionalStringRecord(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (!isRecord(value)) {
+            throw this.invalidPropertyError(resource, label, "an object");
+        }
+        const entries = Object.entries(value).map(([key, entryValue]) => [
+            key,
+            this.requiredString(resource, entryValue, `${label}.${key}`),
+        ]);
+        return Object.fromEntries(entries);
+    }
     /**
      * Build the diagnostic error for a malformed property value.
      */
     invalidPropertyError(resource, label, expected) {
-        return new TypeError(`Invalid AWS::Lambda::Function ${resource.logicalId}: ${label} must be ${expected}`);
+        return new TypeError(`Invalid ${resource.type ?? "AWS::Lambda::Function"} ` +
+            `${resource.logicalId}: ${label} must be ${expected}`);
     }
 }
 //# sourceMappingURL=sim-cfn-lambda-property-parser.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-property-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-property-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-property-parser.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,QAAwB,EACxB,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,SAAS,CAClB,iCAAiC,QAAQ,CAAC,SAAS,KAAK,KAAK,YAAY,QAAQ,EAAE,CACpF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-property-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-property-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAIjE;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe,CACb,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAClB,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,OAAO,GAAuB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAC3D,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACrB,GAAG;YACH,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;SAC7D,CACF,CAAC;QAEF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,QAAwB,EACxB,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,SAAS,CAClB,WAAW,QAAQ,CAAC,IAAI,IAAI,uBAAuB,GAAG;YACpD,GAAG,QAAQ,CAAC,SAAS,KAAK,KAAK,YAAY,QAAQ,EAAE,CACxD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-runtime-skip.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnLambdaFunctionProperties } from "./sim-cfn-lambda-function-properties-parser.js";
+/**
+ * Skips template functions declaring a runtime sim Lambda does not simulate.
+ *
+ * Yulin is a Node.js simulator: function code is evaluated as CommonJS modules
+ * in a vm, so a Python, Java, Go or container function cannot run whatever its
+ * code says. CDK synthesizes such functions into a user's stack without being
+ * asked to. The CDK BucketDeployment provider, for instance, is a Python
+ * function, and sim CloudFormation simulates that custom resource directly
+ * rather than running its provider.
+ *
+ * Declining those functions on their Runtime keeps the reason honest, and
+ * keeps their code from being loaded at all. A function with an executable
+ * binding is exempt, because the binding replaces the code with a real
+ * in-process handler, which is exactly how to simulate a function whose real
+ * runtime Yulin cannot run.
+ *
+ * The "Unsupported sim ... CloudFormation" wording marks the Resource as
+ * skipped rather than failing the stack.
+ */
+export declare class SimCfnLambdaRuntimeSkip {
+    /**
+     * A skip error when this function's runtime is not simulated, otherwise
+     * undefined.
+     */
+    findSkipError(resource: SimCfnResource, functionProperties: SimCfnLambdaFunctionProperties, bound: boolean): Error | undefined;
+}
+//# sourceMappingURL=sim-cfn-lambda-runtime-skip.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-runtime-skip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-runtime-skip.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-runtime-skip.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAQrG;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,uBAAuB;IAClC;;;OAGG;IACH,aAAa,CACX,QAAQ,EAAE,cAAc,EACxB,kBAAkB,EAAE,8BAA8B,EAClD,KAAK,EAAE,OAAO,GACb,KAAK,GAAG,SAAS,CAiBnB;CACF"}