@kensio/yulin 0.35.0 → 0.36.0

package/dist/serve/http/sim-aws-http.d.ts

@@ -8,6 +8,9 @@ interface SimAwsHttpProperties {
 export declare class SimAwsHttp {
     private readonly simAws;
     private readonly controllers;
+    private readonly authenticator;
+    private readonly authFailureResponse;
+    private readonly hints;
     constructor(properties?: SimAwsHttpProperties);
     /**
      * Send a Fetch API request to simulated AWS.
@@ -15,8 +18,22 @@ export declare class SimAwsHttp {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
     /**
      * Handle a simulated AWS HTTP request.
+     *
+     * Every response is stamped with simulated time, as real AWS stamps every API
+     * response with server time. That is the one mechanism an outside client has
+     * for discovering what this simulation thinks the time is, without needing to
+     * know it is talking to a simulator at all.
      */
     handleRequest(request: Request): Promise<Response>;
+    private routeRequest;
+    /**
+     * Authenticate a request and hand it to the service it is routed to.
+     *
+     * Every served request passes through the same authentication boundary,
+     * whichever service answers it, and every response says who the simulator
+     * decided the caller was.
+     */
+    private serveTarget;
     private hostnameFromRequest;
 }
 export {};

package/dist/serve/http/sim-aws-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-http.d.ts","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAEtD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAE/D,YAAY,UAAU,GAAE,oBAAyB,EAIhD;IAED;;OAEG;IACG,KAAK,CACT,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAEnB;IAED;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BvD;IAED,OAAO,CAAC,mBAAmB;CAU5B"}
+{"version":3,"file":"sim-aws-http.d.ts","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAOtD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAmC;IACvE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,YAAY,UAAU,GAAE,oBAAyB,EAKhD;IAED;;OAEG;IACG,KAAK,CACT,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAEnB;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAMvD;YAEa,YAAY;IAiC1B;;;;;;OAMG;YACW,WAAW;IAgBzB,OAAO,CAAC,mBAAmB;CAU5B"}

package/dist/serve/http/sim-aws-http.js

@@ -1,15 +1,23 @@
 import { SimAwsServiceControllerContainer } from "../controller/container/sim-aws-service-controller-container.js";
 import { SimAws } from "../../service/aws/sim-aws.js";
+import { isSimAwsRequestAuthFailure } from "../../service/iam/request/error/sim-aws-request-auth.error.js";
+import { SimAwsRequestAuthenticator } from "./request/sim-aws-request-authenticator.js";
+import { SimAwsAuthFailureResponse } from "./response/sim-aws-auth-failure-response.js";
+import { SimAwsResponseHints } from "./response/sim-aws-response-hints.js";
 /**
  * HTTP interface for sending requests into a simulated AWS environment.
  */
 export class SimAwsHttp {
     simAws;
     controllers;
+    authenticator;
+    authFailureResponse = new SimAwsAuthFailureResponse();
+    hints = new SimAwsResponseHints();
     constructor(properties = {}) {
         const { simAws = new SimAws() } = properties;
         this.simAws = simAws;
         this.controllers = new SimAwsServiceControllerContainer({ simAws });
+        this.authenticator = new SimAwsRequestAuthenticator({ simAws });
     }
     /**
      * Send a Fetch API request to simulated AWS.
@@ -19,8 +27,18 @@ export class SimAwsHttp {
     }
     /**
      * Handle a simulated AWS HTTP request.
+     *
+     * Every response is stamped with simulated time, as real AWS stamps every API
+     * response with server time. That is the one mechanism an outside client has
+     * for discovering what this simulation thinks the time is, without needing to
+     * know it is talking to a simulator at all.
      */
     async handleRequest(request) {
+        const response = await this.routeRequest(request);
+        response.headers.set("date", this.simAws.now().toUTCString());
+        return response;
+    }
+    async routeRequest(request) {
         try {
             const hostname = this.hostnameFromRequest(request);
             if (hostname === undefined) {
@@ -35,16 +53,30 @@ export class SimAwsHttp {
                     },
                 });
             }
-            const controller = this.controllers.controllerForService(target.service);
-            return await controller.handleRequest(target, request);
+            return await this.serveTarget(target, request);
         }
         catch (error) {
+            if (isSimAwsRequestAuthFailure(error)) {
+                return this.authFailureResponse.build(error);
+            }
             /* v8 ignore next */
             return new Response(error instanceof Error
                 ? `${error.message}\n`
                 : "Internal server error\n", { status: 500 });
         }
     }
+    /**
+     * Authenticate a request and hand it to the service it is routed to.
+     *
+     * Every served request passes through the same authentication boundary,
+     * whichever service answers it, and every response says who the simulator
+     * decided the caller was.
+     */
+    async serveTarget(target, request) {
+        const serviceRequest = await this.authenticator.authenticate(target, request);
+        const controller = this.controllers.controllerForService(target.service);
+        return this.hints.stampCaller(await controller.handleRequest(serviceRequest), serviceRequest.caller);
+    }
     hostnameFromRequest(request) {
         const url = new URL(request.url);
         const hostname = url.hostname.toLowerCase();

package/dist/serve/http/sim-aws-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-http.js","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AACnH,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAMtD;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,MAAM,CAAS;IACf,WAAW,CAAmC;IAE/D,YAAY,UAAU,GAAyB,EAAE;QAC/C,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,KAA6B,EAC7B,IAAkB;QAElB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,IAAI,QAAQ,CAAC,8BAA8B,QAAQ,KAAK,EAAE;oBAC/D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzE,OAAO,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oBAAoB;YACpB,OAAO,IAAI,QAAQ,CACjB,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI;gBACtB,CAAC,CAAC,yBAAyB,EAC7B,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,OAAgB;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"sim-aws-http.js","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AACnH,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAEtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAM3E;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,MAAM,CAAS;IACf,WAAW,CAAmC;IAC9C,aAAa,CAA6B;IAC1C,mBAAmB,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACtD,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEnD,YAAY,UAAU,GAAyB,EAAE;QAC/C,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,KAA6B,EAC7B,IAAkB;QAElB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAElD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAE9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAgB;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,IAAI,QAAQ,CAAC,8BAA8B,QAAQ,KAAK,EAAE;oBAC/D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,2BAA2B;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;YAED,oBAAoB;YACpB,OAAO,IAAI,QAAQ,CACjB,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI;gBACtB,CAAC,CAAC,yBAAyB,EAC7B,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CACvB,MAA2B,EAC3B,OAAgB;QAEhB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAC1D,MAAM,EACN,OAAO,CACR,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEzE,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAC3B,MAAM,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,EAC9C,cAAc,CAAC,MAAM,CACtB,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,OAAgB;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/serve/http/url/sim-aws-local-url.d.ts

@@ -22,6 +22,14 @@ export declare class SimAwsLocalUrl {
      */
     withoutLocalhostSuffix(): URL;
     private localHostname;
+    /**
+     * Get the part of a real AWS service hostname that identifies the resource,
+     * dropping the AWS domain the local suffix replaces.
+     *
+     * Returns undefined for hostnames that are not AWS service endpoints, such
+     * as a CloudFront alternate domain name, which are used as they are.
+     */
+    private awsHostnamePrefix;
 }
 export {};
 //# sourceMappingURL=sim-aws-local-url.d.ts.map

package/dist/serve/http/url/sim-aws-local-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-url.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAEA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,gBAAuB,eAAe,SAAoC;IAE1E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAE1B,YAAY,UAAU,EAAE,wBAAwB,EAO/C;IAED;;OAEG;IACH,KAAK,IAAI,GAAG,CAEX;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,sBAAsB,IAAI,GAAG,CAI5B;IAED,OAAO,CAAC,aAAa;CAgBtB"}
+{"version":3,"file":"sim-aws-local-url.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAEA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,gBAAuB,eAAe,SAAoC;IAE1E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAE1B,YAAY,UAAU,EAAE,wBAAwB,EAO/C;IAED;;OAEG;IACH,KAAK,IAAI,GAAG,CAEX;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,sBAAsB,IAAI,GAAG,CAI5B;IAED,OAAO,CAAC,aAAa;IAcrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;CAQ1B"}

package/dist/serve/http/url/sim-aws-local-url.js

@@ -37,11 +37,22 @@ export class SimAwsLocalUrl {
         if (hostname.endsWith(SimAwsLocalUrl.localhostSuffix)) {
             return hostname;
         }
-        const s3AwsHostname = /^(?<prefix>.+\.(?:s3|s3-website)\.[^.]+)\.amazonaws\.com$/.exec(hostname);
-        if (s3AwsHostname?.groups?.["prefix"] !== undefined) {
-            return `${s3AwsHostname.groups["prefix"]}${SimAwsLocalUrl.localhostSuffix}`;
+        const awsHostnamePrefix = this.awsHostnamePrefix(hostname);
+        if (awsHostnamePrefix !== undefined) {
+            return `${awsHostnamePrefix}${SimAwsLocalUrl.localhostSuffix}`;
         }
         return `${hostname}${SimAwsLocalUrl.localhostSuffix}`;
     }
+    /**
+     * Get the part of a real AWS service hostname that identifies the resource,
+     * dropping the AWS domain the local suffix replaces.
+     *
+     * Returns undefined for hostnames that are not AWS service endpoints, such
+     * as a CloudFront alternate domain name, which are used as they are.
+     */
+    awsHostnamePrefix(hostname) {
+        const awsHostname = /^(?<prefix>.+\.(?:s3|s3-website)\.[^.]+)\.amazonaws\.com$/.exec(hostname) ?? /^(?<prefix>.+\.lambda-url\.[^.]+)\.on\.aws$/.exec(hostname);
+        return awsHostname?.groups?.["prefix"];
+    }
 }
 //# sourceMappingURL=sim-aws-local-url.js.map

package/dist/serve/http/url/sim-aws-local-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-url.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAO5E;;GAEG;AACH,MAAM,OAAO,cAAc;IAClB,MAAM,CAAU,eAAe,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAEzD,GAAG,CAAM;IAE1B,YAAY,UAAoC;QAC9C,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,aAAa,GACjB,2DAA2D,CAAC,IAAI,CAC9D,QAAQ,CACT,CAAC;QAEJ,IAAI,aAAa,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;QAC9E,CAAC;QAED,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;CACF"}
+{"version":3,"file":"sim-aws-local-url.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-local-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAO5E;;GAEG;AACH,MAAM,OAAO,cAAc;IAClB,MAAM,CAAU,eAAe,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IAEzD,GAAG,CAAM;IAE1B,YAAY,UAAoC;QAC9C,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE3D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,GAAG,iBAAiB,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,WAAW,GACf,2DAA2D,CAAC,IAAI,CAC9D,QAAQ,CACT,IAAI,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,OAAO,WAAW,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/serve/index.d.ts

@@ -2,4 +2,6 @@ export { SimAwsHttp } from "./http/sim-aws-http.js";
 export { SimAwsDns } from "./dns/sim-aws-dns.js";
 export { SimAwsDnsServer } from "./dns/sim-aws-dns-server.js";
 export { serveSimAws, SimAwsLocalServer, } from "./http/local-server/sim-aws-local-server.js";
+export { type SimAwsServiceController, SimAwsServiceRequest, type SimAwsServiceTarget, } from "./controller/sim-service-controller.js";
+export { simAwsAuthHeaderName, simAwsErrorDetailHeaderName, simAwsErrorHeaderName, } from "./http/response/sim-aws-response-hints.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/serve/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,iBAAiB,GAClB,MAAM,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,iBAAiB,GAClB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,KAAK,mBAAmB,GACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,2CAA2C,CAAC"}

package/dist/serve/index.js

@@ -2,4 +2,6 @@ export { SimAwsHttp } from "./http/sim-aws-http.js";
 export { SimAwsDns } from "./dns/sim-aws-dns.js";
 export { SimAwsDnsServer } from "./dns/sim-aws-dns-server.js";
 export { serveSimAws, SimAwsLocalServer, } from "./http/local-server/sim-aws-local-server.js";
+export { SimAwsServiceRequest, } from "./controller/sim-service-controller.js";
+export { simAwsAuthHeaderName, simAwsErrorDetailHeaderName, simAwsErrorHeaderName, } from "./http/response/sim-aws-response-hints.js";
 //# sourceMappingURL=index.js.map

package/dist/serve/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,iBAAiB,GAClB,MAAM,6CAA6C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/serve/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,iBAAiB,GAClB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAEL,oBAAoB,GAErB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,2CAA2C,CAAC"}

package/dist/service/acm/certificate/sim-acm-certificate.d.ts

@@ -1,5 +1,6 @@
 import type { SimArn } from "../../aws/arn.js";
 import type { SimAcmDomainValidation, SimAcmValidationMethod } from "./sim-acm-domain-validation.js";
+import { type SimClock } from "../../../util/clock/sim-clock.js";
 export type SimAcmCertificateStatus = "EXPIRED" | "FAILED" | "INACTIVE" | "ISSUED" | "PENDING_VALIDATION" | "REVOKED" | "VALIDATION_TIMED_OUT";
 export interface SimAcmTag {
     readonly Key?: string | undefined;
@@ -15,6 +16,11 @@ interface SimAcmCertificateProperties {
     readonly createdAt?: Date | undefined;
     readonly issuedAt?: Date | undefined;
     readonly tags?: readonly SimAcmTag[] | undefined;
+    /**
+     * Clock stamping this Certificate's created and issued times. A Certificate
+     * built standalone, outside a SimAws instance, falls back to the real clock.
+     */
+    readonly clock?: SimClock | undefined;
 }
 /**
  * Simulated ACM Certificate.
@@ -28,6 +34,7 @@ export declare class SimAcmCertificate {
     readonly domainValidationOptions: readonly SimAcmDomainValidation[];
     readonly createdAt: Date;
     readonly tags?: readonly SimAcmTag[] | undefined;
+    private readonly clock;
     constructor(properties: SimAcmCertificateProperties);
     /**
      * Get the current Status of this sim Certificate.

package/dist/service/acm/certificate/sim-acm-certificate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm-certificate.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/certificate/sim-acm-certificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,gCAAgC,CAAC;AAExC,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,oBAAoB,GACpB,SAAS,GACT,sBAAsB,CAAC;AAE3B,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,CAAC,EAC/B,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;CAClD;AAED;;GAEG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3D,SAAgB,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACtE,SAAgB,uBAAuB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC3E,SAAgB,SAAS,EAAE,IAAI,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAKxD,YAAY,UAAU,EAAE,2BAA2B,EAsBlD;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,uBAAuB,CAEpC;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,IAAI,GAAG,SAAS,CAE/B;IAED;;;;;OAKG;IACH,IAAI,WAAW,IAAI,OAAO,CAIzB;IAED;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CASrB;CACF"}
+{"version":3,"file":"sim-acm-certificate.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/certificate/sim-acm-certificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAE/E,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,oBAAoB,GACpB,SAAS,GACT,sBAAsB,CAAC;AAE3B,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,CAAC,EAC/B,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3D,SAAgB,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACtE,SAAgB,uBAAuB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC3E,SAAgB,SAAS,EAAE,IAAI,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAIxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,2BAA2B,EAyBlD;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,uBAAuB,CAEpC;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,IAAI,GAAG,SAAS,CAE/B;IAED;;;;;OAKG;IACH,IAAI,WAAW,IAAI,OAAO,CAIzB;IAED;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CASrB;CACF"}

package/dist/service/acm/certificate/sim-acm-certificate.js

@@ -1,3 +1,4 @@
+import { SimRealClock } from "../../../util/clock/sim-clock.js";
 /**
  * Simulated ACM Certificate.
  */
@@ -11,8 +12,10 @@ export class SimAcmCertificate {
     tags;
     #issuedAt;
     #status;
+    clock;
     constructor(properties) {
-        const { certificateArn, domainName, subjectAlternativeNames = [], status = "PENDING_VALIDATION", validationMethod, domainValidationOptions = [], createdAt = new Date(), issuedAt, tags, } = properties;
+        const { certificateArn, domainName, subjectAlternativeNames = [], status = "PENDING_VALIDATION", validationMethod, domainValidationOptions = [], clock = new SimRealClock(), createdAt = clock.now(), issuedAt, tags, } = properties;
+        this.clock = clock;
         this.certificateArn = certificateArn;
         this.domainName = domainName;
         this.subjectAlternativeNames = subjectAlternativeNames;
@@ -54,7 +57,7 @@ export class SimAcmCertificate {
      */
     issue() {
         this.#status = "ISSUED";
-        this.#issuedAt = new Date();
+        this.#issuedAt = this.clock.now();
         for (const domainValidation of this.domainValidationOptions) {
             domainValidation.succeed();
         }

package/dist/service/acm/certificate/sim-acm-certificate.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm-certificate.js","sourceRoot":"","sources":["../../../../src/service/acm/certificate/sim-acm-certificate.ts"],"names":[],"mappings":"AAiCA;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACZ,cAAc,CAAS;IACvB,UAAU,CAAS;IACnB,uBAAuB,CAAoB;IAC3C,gBAAgB,CAAsC;IACtD,uBAAuB,CAAoC;IAC3D,SAAS,CAAO;IAChB,IAAI,CAAoC;IAExD,SAAS,CAAmB;IAC5B,OAAO,CAA0B;IAEjC,YAAY,UAAuC;QACjD,MAAM,EACJ,cAAc,EACd,UAAU,EACV,uBAAuB,GAAG,EAAE,EAC5B,MAAM,GAAG,oBAAoB,EAC7B,gBAAgB,EAChB,uBAAuB,GAAG,EAAE,EAC5B,SAAS,GAAG,IAAI,IAAI,EAAE,EACtB,QAAQ,EACR,IAAI,GACL,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CACvC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,CACpD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE5B,KAAK,MAAM,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC5D,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-acm-certificate.js","sourceRoot":"","sources":["../../../../src/service/acm/certificate/sim-acm-certificate.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAkC/E;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACZ,cAAc,CAAS;IACvB,UAAU,CAAS;IACnB,uBAAuB,CAAoB;IAC3C,gBAAgB,CAAsC;IACtD,uBAAuB,CAAoC;IAC3D,SAAS,CAAO;IAChB,IAAI,CAAoC;IAExD,SAAS,CAAmB;IAC5B,OAAO,CAA0B;IAChB,KAAK,CAAW;IAEjC,YAAY,UAAuC;QACjD,MAAM,EACJ,cAAc,EACd,UAAU,EACV,uBAAuB,GAAG,EAAE,EAC5B,MAAM,GAAG,oBAAoB,EAC7B,gBAAgB,EAChB,uBAAuB,GAAG,EAAE,EAC5B,KAAK,GAAG,IAAI,YAAY,EAAE,EAC1B,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,EACvB,QAAQ,EACR,IAAI,GACL,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CACvC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,CACpD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAElC,KAAK,MAAM,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC5D,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/request-cert-factory.d.ts

@@ -1,8 +1,10 @@
 import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
 import { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
 import type { SimRequestCertificateCommand } from "./request-certificate.command.js";
+import { type SimClock } from "../../../../util/clock/sim-clock.js";
 interface RequestCertificateFactoryProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly clock?: SimClock;
 }
 /**
  * Builds simulated ACM certificates for RequestCertificateCommand.
@@ -14,6 +16,7 @@ interface RequestCertificateFactoryProperties {
  */
 export declare class RequestCertificateFactory {
     private readonly accountRegionScope;
+    private readonly clock;
     constructor(properties: RequestCertificateFactoryProperties);
     /**
      * Create the certificate entity that will be stored by the handler.

package/dist/service/acm/command/request-certificate/request-cert-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-cert-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EACL,iBAAiB,EAElB,MAAM,0CAA0C,CAAC;AAMlD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAGrF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAO,EAAE,4BAA4B,EACrC,gBAAgB,EAAE,MAAM,GACvB,iBAAiB,CA+BnB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;CAkB7B"}
+{"version":3,"file":"request-cert-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EACL,iBAAiB,EAElB,MAAM,0CAA0C,CAAC;AAMlD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAErF,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,qCAAqC,CAAC;AAE7C,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAO,EAAE,4BAA4B,EACrC,gBAAgB,EAAE,MAAM,GACvB,iBAAiB,CA+BnB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;CAkB7B"}

package/dist/service/acm/command/request-certificate/request-cert-factory.js

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { SimAcmCertificate, } from "../../certificate/sim-acm-certificate.js";
 import { SimAcmDomainValidation, } from "../../certificate/sim-acm-domain-validation.js";
 import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimRealClock, } from "../../../../util/clock/sim-clock.js";
 /**
  * Builds simulated ACM certificates for RequestCertificateCommand.
  *
@@ -12,8 +13,10 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
  */
 export class RequestCertificateFactory {
     accountRegionScope;
+    clock;
     constructor(properties) {
         this.accountRegionScope = properties.accountRegionScope;
+        this.clock = properties.clock ?? new SimRealClock();
     }
     /**
      * Create the certificate entity that will be stored by the handler.
@@ -41,7 +44,7 @@ export class RequestCertificateFactory {
                 assertDefined(domainName, "SimRequestCertificateCommand input DomainName / SubjectAlternativeNames required");
                 return this.makeDomainValidationOption(domainName, validationMethod);
             }),
-            createdAt: new Date(),
+            clock: this.clock,
             tags: command.input.Tags?.map((tag) => ({
                 Key: tag.Key,
                 Value: tag.Value,

package/dist/service/acm/command/request-certificate/request-cert-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-cert-factory.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,iBAAiB,GAElB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,sBAAsB,GAGvB,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAE9D,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAqC,EACrC,gBAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACjE,MAAM,WAAW,GAAG;YAClB,OAAO,CAAC,KAAK,CAAC,UAAU;YACxB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC;SACjD,CAAC;QACF,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,UAAU,EACxB,wDAAwD,CACzD,CAAC;QAEF,OAAO,IAAI,iBAAiB,CAAC;YAC3B,cAAc;YACd,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;YACpE,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB;YAChB,uBAAuB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACtD,aAAa,CACX,UAAU,EACV,kFAAkF,CACnF,CAAC;gBACF,OAAO,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,EAAa,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,gBAAwB;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO,eAAe,IAAI,CAAC,kBAAkB,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,gBAAgB,aAAa,EAAE,CAAC;IAC/H,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,UAAkB,EAClB,gBAAwC;QAExC,OAAO,IAAI,sBAAsB,CAAC;YAChC,UAAU;YACV,gBAAgB;YAChB,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAkB,EAClB,gBAAwC;QAExC,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,UAAkB;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL;YACE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YACjC,IAAI,CAAC,kBAAkB,CAAC,UAAU;YAClC,UAAU;SACX,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,IAAI,EAAE,cAAc,IAAI,IAAI,UAAU,GAAG;YACzC,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,cAAc,IAAI,uBAAuB;SACjD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"request-cert-factory.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,iBAAiB,GAElB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,sBAAsB,GAGvB,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,YAAY,GACb,MAAM,qCAAqC,CAAC;AAO7C;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAqC,EACrC,gBAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACjE,MAAM,WAAW,GAAG;YAClB,OAAO,CAAC,KAAK,CAAC,UAAU;YACxB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC;SACjD,CAAC;QACF,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,UAAU,EACxB,wDAAwD,CACzD,CAAC;QAEF,OAAO,IAAI,iBAAiB,CAAC;YAC3B,cAAc;YACd,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;YACpE,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB;YAChB,uBAAuB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACtD,aAAa,CACX,UAAU,EACV,kFAAkF,CACnF,CAAC;gBACF,OAAO,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,EAAa,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,gBAAwB;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO,eAAe,IAAI,CAAC,kBAAkB,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,gBAAgB,aAAa,EAAE,CAAC;IAC/H,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,UAAkB,EAClB,gBAAwC;QAExC,OAAO,IAAI,sBAAsB,CAAC;YAChC,UAAU;YACV,gBAAgB;YAChB,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAkB,EAClB,gBAAwC;QAExC,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,UAAkB;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL;YACE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YACjC,IAAI,CAAC,kBAAkB,CAAC,UAAU;YAClC,UAAU;SACX,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,IAAI,EAAE,cAAc,IAAI,IAAI,UAAU,GAAG;YACzC,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,cAAc,IAAI,uBAAuB;SACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAEjG,UAAU,0CAA0C;IAClD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;CACnD;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAE/D,YAAY,UAAU,EAAE,0CAA0C,EAmBjE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}
+{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAEjG,UAAU,0CAA0C;IAClD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;CACnD;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAE/D,YAAY,UAAU,EAAE,0CAA0C,EAoBjE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate.handler.js

@@ -27,6 +27,7 @@ export class RequestCertificateCommandHandler {
         this.background = background;
         this.certificateFactory = new RequestCertificateFactory({
             accountRegionScope,
+            clock: background,
         });
     }
     /**

package/dist/service/acm/command/request-certificate/request-certificate.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAcjG;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAC9C,UAAU,CAA8B;IACxC,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE/D,YAAY,UAAsD;QAChE,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,UAAU,EAAE,CAAC,GAC7D,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG;YACH,QAAQ,EAAE,eAAe,kBAAkB,CAAC,UAAU,IAAI,kBAAkB,CAAC,SAAS,gBAAgB;SACvG,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,wEAAwE;QACxE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEnC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAcjG;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAC9C,UAAU,CAA8B;IACxC,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE/D,YAAY,UAAsD;QAChE,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,UAAU,EAAE,CAAC,GAC7D,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG;YACH,QAAQ,EAAE,eAAe,kBAAkB,CAAC,UAAU,IAAI,kBAAkB,CAAC,SAAS,gBAAgB;SACvG,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;YAClB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,wEAAwE;QACxE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEnC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/aws/caller/sim-aws-caller-resolver.d.ts

@@ -22,7 +22,8 @@ export interface SimAwsResolvedCaller {
  *
  * An omitted caller resolves to the supplied operation default. Explicit
  * anonymity is preserved. Credential callers are authenticated before a
- * resolved caller is returned.
+ * resolved caller is returned, and a caller already resolved elsewhere is
+ * taken as it stands.
  */
 export declare class SimAwsCallerResolver {
     private readonly credentialIdentityResolver?;

package/dist/service/aws/caller/sim-aws-caller-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-caller-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAE5F,MAAM,WAAW,gCAAgC;IAC/C,kBAAkB,CAChB,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,EAC/C,GAAG,CAAC,EAAE,IAAI,GACT,wBAAwB,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CACG;IAE/C,YAAY,0BAA0B,CAAC,EAAE,gCAAgC,EAExE;IAED;;OAEG;IACH,OAAO,CACL,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,gBAAgB,EAAE,eAAe,GAChC,oBAAoB,CAoBtB;IAED,OAAO,CAAC,UAAU;IAiClB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"sim-aws-caller-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAE5F,MAAM,WAAW,gCAAgC;IAC/C,kBAAkB,CAChB,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,EAC/C,GAAG,CAAC,EAAE,IAAI,GACT,wBAAwB,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CACG;IAE/C,YAAY,0BAA0B,CAAC,EAAE,gCAAgC,EAExE;IAED;;OAEG;IACH,OAAO,CACL,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,gBAAgB,EAAE,eAAe,GAChC,oBAAoB,CAwBtB;IAED,OAAO,CAAC,UAAU;IAiClB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}

package/dist/service/aws/caller/sim-aws-caller-resolver.js

@@ -3,7 +3,8 @@
  *
  * An omitted caller resolves to the supplied operation default. Explicit
  * anonymity is preserved. Credential callers are authenticated before a
- * resolved caller is returned.
+ * resolved caller is returned, and a caller already resolved elsewhere is
+ * taken as it stands.
  */
 export class SimAwsCallerResolver {
     credentialIdentityResolver;
@@ -14,6 +15,9 @@ export class SimAwsCallerResolver {
      * Resolve and normalize a simulated AWS caller.
      */
     resolve(caller, defaultPrincipal) {
+        if (caller?.kind === "resolved") {
+            return this.normalized(caller.principal, caller.identityPolicyPrincipal);
+        }
         if (caller?.kind === "credentials") {
             if (this.credentialIdentityResolver === undefined) {
                 throw new Error("Simulated credential callers require an IAM credential resolver");

package/dist/service/aws/caller/sim-aws-caller-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-caller-resolver.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AA6BA;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,0BAA0B,CACI;IAE/C,YAAY,0BAA6D;QACvE,IAAI,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,OAAO,CACL,MAAgC,EAChC,gBAAiC;QAEjC,IAAI,MAAM,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,CACjE,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,OAAO,IAAI,CAAC,UAAU,CACpB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,uBAAuB,CACjC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,gBAAgB,CAAC;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU,CAChB,SAA0B,EAC1B,uBAAwC;QAExC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,iBAAiB,GACrB,uBAAuB,CAAC,IAAI,KAAK,KAAK;gBACpC,CAAC,CAAC,uBAAuB,CAAC,GAAG;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,iBAAiB;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS;YACT,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"sim-aws-caller-resolver.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AA6BA;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,0BAA0B,CACI;IAE/C,YAAY,0BAA6D;QACvE,IAAI,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,OAAO,CACL,MAAgC,EAChC,gBAAiC;QAEjC,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,MAAM,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,CACjE,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,OAAO,IAAI,CAAC,UAAU,CACpB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,uBAAuB,CACjC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,gBAAgB,CAAC;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU,CAChB,SAA0B,EAC1B,uBAAwC;QAExC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,iBAAiB,GACrB,uBAAuB,CAAC,IAAI,KAAK,KAAK;gBACpC,CAAC,CAAC,uBAAuB,CAAC,GAAG;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,iBAAiB;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS;YACT,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF"}

package/dist/service/aws/caller/sim-aws-caller.d.ts

@@ -33,8 +33,23 @@ export interface SimCredentialCaller {
  * Resolved simulated AWS identity.
  */
 export type SimAwsPrincipal = SimArnPrincipal | SimServicePrincipal | SimAnonymousPrincipal;
+/**
+ * A caller already authenticated somewhere else, carrying both the principal
+ * the request is attributed to and the identity whose policies apply to it.
+ *
+ * A bare principal cannot express that split. It matters for an assumed-role
+ * session, where the request is made by the session while the permissions come
+ * from the Role behind it, and where the credentials that would otherwise carry
+ * both are not available to pass on: an HTTP request proves its identity by
+ * signature rather than by presenting a secret.
+ */
+export interface SimResolvedCaller {
+    readonly kind: "resolved";
+    readonly principal: SimAwsPrincipal;
+    readonly identityPolicyPrincipal: SimAwsPrincipal;
+}
 /**
  * Caller accepted by simulated AWS service operations.
  */
-export type SimAwsCaller = SimAwsPrincipal | SimCredentialCaller;
+export type SimAwsCaller = SimAwsPrincipal | SimCredentialCaller | SimResolvedCaller;
 //# sourceMappingURL=sim-aws-caller.d.ts.map

package/dist/service/aws/caller/sim-aws-caller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-caller.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACzB,eAAe,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,mBAAmB,CAAC"}
+{"version":3,"file":"sim-aws-caller.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACzB,eAAe,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,EAAE,eAAe,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACtB,eAAe,GAAG,mBAAmB,GAAG,iBAAiB,CAAC"}

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts

@@ -8,6 +8,7 @@ import { SimRoute53 } from "../../route53/index.js";
 import type { SimRoute53Registry } from "../../route53/registry/sim-route53-registry.js";
 import { SimIam } from "../../iam/index.js";
 import type { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { type SimIamAccessKeyRegistry } from "../../iam/registry/sim-iam-access-key-registry.js";
 interface SimAwsAccountServiceCacheProperties {
     readonly simAws: SimAws;
     readonly background: BackgroundScheduler & BackgroundCompleter;
@@ -15,6 +16,7 @@ interface SimAwsAccountServiceCacheProperties {
     readonly cloudFrontRegistry: SimCloudFrontRegistry;
     readonly route53Registry: SimRoute53Registry;
     readonly iamRegistry: SimIamRegistry;
+    readonly accessKeyRegistry: SimIamAccessKeyRegistry;
 }
 /**
  * Account-level cache for simulated AWS service instances.
@@ -42,6 +44,7 @@ export declare class SimAwsAccountServiceCache {
     private readonly acmRegistry;
     private readonly cloudFrontRegistry;
     private readonly iamRegistry;
+    private readonly accessKeyRegistry;
     private readonly route53Registry;
     /**
      * Shared memo for account-scoped service instances.

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAI7E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,UAAU,EAAE,mCAAmC,EAO1D;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAenE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAcrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAY7D;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mDAAmD,CAAC;AAK3D,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,UAAU,EAAE,mCAAmC,EAQ1D;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAenE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAuBrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAY7D;CACF"}

package/dist/service/aws/factory/sim-aws-account-service-cache.js

@@ -2,6 +2,8 @@ import { makeSimCfS3OriginResolver } from "../../cloudfront/origin/s3/sim-cf-s3-
 import { SimCloudFront } from "../../cloudfront/sim-cloudfront.js";
 import { SimRoute53 } from "../../route53/index.js";
 import { SimIam } from "../../iam/index.js";
+import { SimIamAccountAccessKeyIndex, } from "../../iam/registry/sim-iam-access-key-registry.js";
+import { SimIamCredentialRegistry } from "../../iam/credential/sim-iam-credential-registry.js";
 import { Memo } from "../../../util/memo/memo.js";
 import { accountServiceCacheKey } from "./account-service-cache-key.js";
 /**
@@ -30,6 +32,7 @@ export class SimAwsAccountServiceCache {
     acmRegistry;
     cloudFrontRegistry;
     iamRegistry;
+    accessKeyRegistry;
     route53Registry;
     /**
      * Shared memo for account-scoped service instances.
@@ -45,6 +48,7 @@ export class SimAwsAccountServiceCache {
         this.acmRegistry = properties.acmRegistry;
         this.cloudFrontRegistry = properties.cloudFrontRegistry;
         this.iamRegistry = properties.iamRegistry;
+        this.accessKeyRegistry = properties.accessKeyRegistry;
         this.route53Registry = properties.route53Registry;
     }
     /**
@@ -69,6 +73,12 @@ export class SimAwsAccountServiceCache {
             const iam = new SimIam({
                 accountRegionScope: scope.accountRegionScope,
                 background: this.background,
+                // Access keys are indexed simulation-wide as they are issued, so a
+                // signed request naming only a key id can be traced to this Account.
+                credentialRegistry: new SimIamCredentialRegistry({
+                    clock: this.background,
+                    accessKeyIndex: new SimIamAccountAccessKeyIndex(this.accessKeyRegistry, scope.accountRegionScope.accountId),
+                }),
             });
             this.iamRegistry.register(scope.accountRegionScope.accountId, iam);
             return iam;

package/dist/service/aws/factory/sim-aws-account-service-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAWxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,WAAW,CAAiB;IAC5B,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,WAAW,CAAiB;IAC5B,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,iBAAiB,CAA0B;IAC3C,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,mEAAmE;gBACnE,qEAAqE;gBACrE,kBAAkB,EAAE,IAAI,wBAAwB,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,UAAU;oBACtB,cAAc,EAAE,IAAI,2BAA2B,CAC7C,IAAI,CAAC,iBAAiB,EACtB,KAAK,CAAC,kBAAkB,CAAC,SAAS,CACnC;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}