@kensio/yulin 0.35.0 → 0.37.0

package/dist/service/iam/authorize/sim-iam-decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-decision.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-decision.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAG3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAqB;IAC5B,oBAAoB,CAA6B;IACjD,gBAAgB,CAA+B;IAC/C,4BAA4B,GAC3C,EAAE,CAAC;IACY,qBAAqB,GAAoC,EAAE,CAAC;IAC5D,0BAA0B,GACzC,EAAE,CAAC;IAEL,YACE,OAA2B,EAC3B,oBAAoB,GAA+B,IAAI,0BAA0B,EAAE;QAEnF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,yBAAyB,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,OAAO,yBAAyB,CAAC,YAAY,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,4BAA4B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,0BAA0B,CAAC;IACzC,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,MAAM,IAAI;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAChC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtE,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-iam-decision.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-decision.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAqB;IAC5B,oBAAoB,CAA6B;IACjD,gBAAgB,CAA+B;IAC/C,4BAA4B,GAC3C,EAAE,CAAC;IACY,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEtD,YACE,OAA2B,EAC3B,oBAAoB,GAA+B,IAAI,0BAA0B,EAAE;QAEnF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,yBAAyB,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,OAAO,yBAAyB,CAAC,YAAY,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,4BAA4B,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IAC3B,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,MAAM,IAAI;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAChC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtE,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy-record-factory.d.ts

@@ -6,6 +6,7 @@ interface CreatePolicyRecordFactoryProperties {
     readonly path: string;
     readonly policyName: SimIamPolicyName;
     readonly cmd: SimCreatePolicyCommand;
+    readonly now: Date;
 }
 /**
  * Builds IAM Policy records and CreatePolicy responses.

package/dist/service/iam/command/policy/create-policy/create-policy-record-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-policy-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,mBAAmB,EAEnB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAGpC,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CACR,UAAU,EAAE,mCAAmC,GAC9C,mBAAmB,CAmBrB;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,4BAA4B,CAgBpE;CACF"}
+{"version":3,"file":"create-policy-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,mBAAmB,EAEnB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAGpC,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CACR,UAAU,EAAE,mCAAmC,GAC9C,mBAAmB,CAkBrB;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,4BAA4B,CAgBpE;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy-record-factory.js

@@ -16,8 +16,7 @@ export class CreatePolicyRecordFactory {
      * starts at v1, matching IAM's managed policy version model.
      */
     makePolicy(properties) {
-        const { arn, path, policyName, cmd } = properties;
-        const now = new Date();
+        const { arn, path, policyName, cmd, now } = properties;
         return {
             arn,
             policyId: makeSimPolicyId(),

package/dist/service/iam/command/policy/create-policy/create-policy-record-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-policy-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAcxE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CACR,UAA+C;QAE/C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,eAAe,EAAE;YAC3B,UAAU;YACV,IAAI;YACJ,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,CAAC;YAClB,6BAA6B,EAAE,CAAC;YAChC,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YAClC,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cACoB;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAA2B;QACpC,OAAO;YACL,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,YAAY;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-policy-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAexE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CACR,UAA+C;QAE/C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;QAEvD,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,eAAe,EAAE;YAC3B,UAAU;YACV,IAAI;YACJ,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,CAAC;YAClB,6BAA6B,EAAE,CAAC;YAChC,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YAClC,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cACoB;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAA2B;QACpC,OAAO;YACL,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,YAAY;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAK7E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,EAAE,oCAAoC,EAS3D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,4BAA4B,CAAC,CAsBvC;CACF"}
+{"version":3,"file":"create-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAK7E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,EAAE,oCAAoC,EAS3D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,4BAA4B,CAAC,CAuBvC;CACF"}

package/dist/service/iam/command/policy/create-policy/create-policy.handler.js

@@ -33,6 +33,7 @@ export class CreatePolicyCommandHandler {
             path,
             policyName,
             cmd: command,
+            now: this.background.now(),
         });
         this.policies.set(arn, policy);
         return this.policyFactory.makeOutput(policy);

package/dist/service/iam/command/policy/create-policy/create-policy.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAQ5E;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAChC,aAAa,CAA4B;IACzC,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAgD;QAC1D,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA+B;QAE/B,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,GAAG,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAC3C,GAAG;YACH,IAAI;YACJ,UAAU;YACV,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;CACF"}
+{"version":3,"file":"create-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAQ5E;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAChC,aAAa,CAA4B;IACzC,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAgD;QAC1D,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA+B;QAE/B,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,GAAG,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAC3C,GAAG;YACH,IAAI;YACJ,UAAU;YACV,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/service/iam/command/role/create-role/create-role-record-factory.d.ts

@@ -8,6 +8,7 @@ interface MakeRoleProperties {
     readonly path: string;
     readonly roleName: SimIamRoleName;
     readonly cmd: SimCreateRoleCommand;
+    readonly creationDate: Date;
 }
 /**
  * Creates simulated IAM Role records and command outputs.

package/dist/service/iam/command/role/create-role/create-role-record-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-role-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGhF,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAmBnD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAYvD;CACF"}
+{"version":3,"file":"create-role-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGhF,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAkBnD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAYvD;CACF"}

package/dist/service/iam/command/role/create-role/create-role-record-factory.js

@@ -7,8 +7,7 @@ export class CreateRoleRecordFactory {
      * Make a sim IAM Role object from input properties.
      */
     makeRole(properties) {
-        const { accountId, arn, path, roleName, cmd } = properties;
-        const creationDate = new Date();
+        const { accountId, arn, path, roleName, cmd, creationDate } = properties;
         return {
             arn,
             accountId,

package/dist/service/iam/command/role/create-role/create-role-record-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-role-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role-record-factory.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAUpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAEhC,OAAO;YACL,GAAG;YACH,SAAS;YACT,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ;YACR,IAAI;YACJ,wBAAwB,EAAE,GAAG,CAAC,KAAK,CAAC,wBACU;YAC9C,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YAClC,YAAY;YACZ,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-role-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role-record-factory.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAWpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC;QAEzE,OAAO;YACL,GAAG;YACH,SAAS;YACT,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ;YACR,IAAI;YACJ,wBAAwB,EAAE,GAAG,CAAC,KAAK,CAAC,wBACU;YAC9C,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YAClC,YAAY;YACZ,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/role/create-role/create-role.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-role.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAGtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAKhF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqC;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,kCAAkC,EAOzD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAsCrC;CACF"}
+{"version":3,"file":"create-role.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAGtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAKhF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqC;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,kCAAkC,EAOzD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAuCrC;CACF"}

package/dist/service/iam/command/role/create-role/create-role.handler.js

@@ -52,6 +52,7 @@ export class CreateRoleCommandHandler {
             path,
             roleName,
             cmd: command,
+            creationDate: this.background.now(),
         });
         this.roles.set(roleName, role);
         return this.roleFactory.makeOutput(role);

package/dist/service/iam/command/role/create-role/create-role.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-role.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AAQxH;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC5C,oBAAoB,CAAqC;IACzD,UAAU,CAAsB;IAEjD,YAAY,UAA8C;QACxD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAE5E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,oBAAoB,GAAG,IAAI,kCAAkC,EAAE,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CACxC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CACvC,CAAC;QAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ;YACR,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"create-role.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AAQxH;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC5C,oBAAoB,CAAqC;IACzD,UAAU,CAAsB;IAEjD,YAAY,UAA8C;QACxD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAE5E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,oBAAoB,GAAG,IAAI,kCAAkC,EAAE,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CACxC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CACvC,CAAC;QAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ;YACR,GAAG,EAAE,OAAO;YACZ,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/command/sim-iam-command-handlers.d.ts

@@ -0,0 +1,41 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamInterServiceAuthZ } from "../authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamCredentialRegistry } from "../credential/sim-iam-credential-registry.js";
+import type { SimIamUserCredentialGenerator } from "../credential/user/sim-iam-user-credential-generator.js";
+import type { SimIamManagedPolicy } from "../policy/sim-iam-policy.js";
+import type { SimIamRole, SimIamRoleName } from "../role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "../user/sim-iam-user.js";
+import { SimIamPolicyCommandHandlers } from "./policy/sim-iam-policy-command-handlers.js";
+import { SimIamRoleCommandHandlers } from "./role/sim-iam-role-command-handlers.js";
+import { SimIamUserCommandHandlers } from "./user/sim-iam-user-command-handlers.js";
+interface SimIamCommandHandlersProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly roles: Map<SimIamRoleName, SimIamRole>;
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly credentialRegistry: SimIamCredentialRegistry;
+    readonly userCredentialGenerator: SimIamUserCredentialGenerator;
+    readonly background: BackgroundScheduler;
+    /**
+     * IAM itself, which authorizes its own control-plane commands.
+     */
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * The command handlers of one simulated IAM Account, grouped by resource.
+ *
+ * Every group authorizes against the same IAM and mutates the same Account
+ * state, so they are wired together here rather than one at a time in the
+ * service facade. That keeps SimIam what it should be: state maps plus
+ * delegation.
+ */
+export declare class SimIamCommandHandlers {
+    readonly roles: SimIamRoleCommandHandlers;
+    readonly users: SimIamUserCommandHandlers;
+    readonly policies: SimIamPolicyCommandHandlers;
+    constructor(properties: SimIamCommandHandlersProperties);
+}
+export {};
+//# sourceMappingURL=sim-iam-command-handlers.d.ts.map

package/dist/service/iam/command/sim-iam-command-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-command-handlers.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/command/sim-iam-command-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,yDAAyD,CAAC;AAC7G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,UAAU,+BAA+B;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IAEzC;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAE/C,YAAY,UAAU,EAAE,+BAA+B,EAwBtD;CACF"}

package/dist/service/iam/command/sim-iam-command-handlers.js

@@ -0,0 +1,42 @@
+import { SimIamActionAuthorizer } from "../authorize/sim-iam-action-authorizer.js";
+import { SimIamPolicyCommandHandlers } from "./policy/sim-iam-policy-command-handlers.js";
+import { SimIamRoleCommandHandlers } from "./role/sim-iam-role-command-handlers.js";
+import { SimIamUserCommandHandlers } from "./user/sim-iam-user-command-handlers.js";
+/**
+ * The command handlers of one simulated IAM Account, grouped by resource.
+ *
+ * Every group authorizes against the same IAM and mutates the same Account
+ * state, so they are wired together here rather than one at a time in the
+ * service facade. That keeps SimIam what it should be: state maps plus
+ * delegation.
+ */
+export class SimIamCommandHandlers {
+    roles;
+    users;
+    policies;
+    constructor(properties) {
+        const authorizer = new SimIamActionAuthorizer({ iam: properties.iam });
+        this.roles = new SimIamRoleCommandHandlers({
+            accountId: properties.accountId,
+            roles: properties.roles,
+            background: properties.background,
+            authorizer,
+        });
+        this.users = new SimIamUserCommandHandlers({
+            accountId: properties.accountId,
+            users: properties.users,
+            credentialRegistry: properties.credentialRegistry,
+            credentialGenerator: properties.userCredentialGenerator,
+            background: properties.background,
+            authorizer,
+        });
+        this.policies = new SimIamPolicyCommandHandlers({
+            accountId: properties.accountId,
+            policies: properties.policies,
+            users: properties.users,
+            background: properties.background,
+            authorizer,
+        });
+    }
+}
+//# sourceMappingURL=sim-iam-command-handlers.js.map

package/dist/service/iam/command/sim-iam-command-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-command-handlers.js","sourceRoot":"","sources":["../../../../src/service/iam/command/sim-iam-command-handlers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAOnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAiBpF;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAA4B;IACjC,KAAK,CAA4B;IACjC,QAAQ,CAA8B;IAE/C,YAAY,UAA2C;QACrD,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC;YACzC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC;YACzC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,mBAAmB,EAAE,UAAU,CAAC,uBAAuB;YACvD,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC;YAC9C,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-access-key.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAEnH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,gCAAgC,CAAC;AAExC,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,+BAA+B,CAAC,CA4C1C;CACF"}
+{"version":3,"file":"create-access-key.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAEnH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,gCAAgC,CAAC;AAExC,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,+BAA+B,CAAC,CA6C1C;CACF"}

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.js

@@ -38,6 +38,7 @@ export class CreateAccessKeyCommandHandler {
             secretAccessKey: credentials.secretAccessKey,
             principal,
             identityPolicyPrincipal: principal,
+            creationDate: this.background.now(),
         });
         /*
          * Register first. If a generated ID collides, neither the user nor the

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-access-key.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAcrE;;GAEG;AACH,MAAM,OAAO,6BAA6B;IAIvB,KAAK,CAAkC;IACvC,kBAAkB,CAA2B;IAC7C,mBAAmB,CAAgC;IACnD,UAAU,CAAsB;IAEjD,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAkC;QAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,KAAc;YACpB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,SAAS;YACT,uBAAuB,EAAE,SAAS;SACnC,CAAC,CAAC;QAEH;;;WAGG;QACH,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,UAAU,EAAE,SAAS,CAAC,YAAY;aACnC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-access-key.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAcrE;;GAEG;AACH,MAAM,OAAO,6BAA6B;IAIvB,KAAK,CAAkC;IACvC,kBAAkB,CAA2B;IAC7C,mBAAmB,CAAgC;IACnD,UAAU,CAAsB;IAEjD,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAkC;QAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,KAAc;YACpB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,SAAS;YACT,uBAAuB,EAAE,SAAS;YAClC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;SACpC,CAAC,CAAC;QAEH;;;WAGG;QACH,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,UAAU,EAAE,SAAS,CAAC,YAAY;aACnC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.d.ts

@@ -7,6 +7,7 @@ interface MakeUserProperties {
     readonly arn: SimArn;
     readonly path: string;
     readonly userName: SimIamUsername;
+    readonly creationDate: Date;
 }
 /**
  * Creates simulated IAM user records and command outputs.

package/dist/service/iam/command/user/create-user/create-user-record-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-user-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAcnD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAUvD;CACF"}
+{"version":3,"file":"create-user-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAcnD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAUvD;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.js

@@ -15,7 +15,7 @@ export class CreateUserRecordFactory {
             userId: makeSimIamUserId(),
             userName: properties.userName,
             path: properties.path,
-            creationDate: new Date(),
+            creationDate: properties.creationDate,
             accessKeys: new Map(),
             inlinePolicies: new Map(),
             attachedPolicyArns: new Set(),

package/dist/service/iam/command/user/create-user/create-user-record-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-user-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAUpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,UAAU,CAAC,QAAQ;YACzB,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-user-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAWpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,UAAU,CAAC,QAAQ;YACzB,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/create-user/create-user.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-user.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAGlC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;CACF"}
+{"version":3,"file":"create-user.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAGlC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAiCrC;CACF"}

package/dist/service/iam/command/user/create-user/create-user.handler.js

@@ -39,6 +39,7 @@ export class CreateUserCommandHandler {
             arn,
             path,
             userName: username,
+            creationDate: this.background.now(),
         });
         this.users.set(username, user);
         return this.userFactory.makeOutput(user);

package/dist/service/iam/command/user/create-user/create-user.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAE/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAKvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAQ1E;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE7D,YAAY,UAA8C;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAE/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAKvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAQ1E;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE7D,YAAY,UAA8C;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/credential/sim-iam-access-key-checks.d.ts

@@ -0,0 +1,30 @@
+import type { SimIamAccessKey } from "./sim-iam-access-key.js";
+/**
+ * The rules deciding whether an access key may be used right now.
+ *
+ * These are separate from the registry that stores keys: the registry answers
+ * which key an id names, and this answers whether that key is usable. Both the
+ * secret-carrying and the signature-carrying paths into IAM apply the same
+ * rules, in the same order, from here.
+ */
+export declare class SimIamAccessKeyChecks {
+    /**
+     * Resolve a looked-up access key, failing when it is unknown or deactivated.
+     */
+    activeAccessKey(accessKey: SimIamAccessKey | undefined, context: {
+        readonly accessKeyId: string;
+    }): SimIamAccessKey;
+    /**
+     * Check a presented session token belongs to the access key.
+     *
+     * A temporary key without its token, and a long-lived key with one, are both
+     * refused: the two kinds of credential are not interchangeable.
+     */
+    checkSessionToken(accessKey: SimIamAccessKey, sessionToken: string | undefined): void;
+    /**
+     * Check a temporary key's session has not expired, in simulated time.
+     */
+    checkNotExpired(accessKey: SimIamAccessKey, now: Date): void;
+    private invalid;
+}
+//# sourceMappingURL=sim-iam-access-key-checks.d.ts.map

package/dist/service/iam/credential/sim-iam-access-key-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-access-key-checks.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key-checks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACH,eAAe,CACb,SAAS,EAAE,eAAe,GAAG,SAAS,EACtC,OAAO,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GACxC,eAAe,CAiBjB;IAED;;;;;OAKG;IACH,iBAAiB,CACf,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,IAAI,CAeN;IAED;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAQ3D;IAED,OAAO,CAAC,OAAO;CAYhB"}

package/dist/service/iam/credential/sim-iam-access-key-checks.js

@@ -0,0 +1,67 @@
+import { SimIamInvalidCredentials } from "./error/sim-iam-credential.error.js";
+/**
+ * The rules deciding whether an access key may be used right now.
+ *
+ * These are separate from the registry that stores keys: the registry answers
+ * which key an id names, and this answers whether that key is usable. Both the
+ * secret-carrying and the signature-carrying paths into IAM apply the same
+ * rules, in the same order, from here.
+ */
+export class SimIamAccessKeyChecks {
+    /**
+     * Resolve a looked-up access key, failing when it is unknown or deactivated.
+     */
+    activeAccessKey(accessKey, context) {
+        if (accessKey === undefined) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: context.accessKeyId,
+                reason: "unknown-access-key",
+            });
+        }
+        if (accessKey.status !== "Active") {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: context.accessKeyId,
+                reason: "inactive-access-key",
+                accessKeyStatus: accessKey.status,
+            });
+        }
+        return accessKey;
+    }
+    /**
+     * Check a presented session token belongs to the access key.
+     *
+     * A temporary key without its token, and a long-lived key with one, are both
+     * refused: the two kinds of credential are not interchangeable.
+     */
+    checkSessionToken(accessKey, sessionToken) {
+        if (accessKey.session !== undefined && sessionToken === undefined) {
+            throw this.invalid(accessKey, "session-token-missing");
+        }
+        if (accessKey.session === undefined && sessionToken !== undefined) {
+            throw this.invalid(accessKey, "session-token-unexpected");
+        }
+        if (accessKey.session !== undefined &&
+            !accessKey.matchesSessionToken(sessionToken)) {
+            throw this.invalid(accessKey, "session-token-mismatch");
+        }
+    }
+    /**
+     * Check a temporary key's session has not expired, in simulated time.
+     */
+    checkNotExpired(accessKey, now) {
+        if (accessKey.session?.isExpired(now) === true) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: accessKey.accessKeyId,
+                reason: "expired-session",
+                expiration: accessKey.session.expiration,
+            });
+        }
+    }
+    invalid(accessKey, reason) {
+        return new SimIamInvalidCredentials({
+            accessKeyId: accessKey.accessKeyId,
+            reason,
+        });
+    }
+}
+//# sourceMappingURL=sim-iam-access-key-checks.js.map

package/dist/service/iam/credential/sim-iam-access-key-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-access-key-checks.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAG/E;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,eAAe,CACb,SAAsC,EACtC,OAAyC;QAEzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,qBAAqB;gBAC7B,eAAe,EAAE,SAAS,CAAC,MAAM;aAClC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,SAA0B,EAC1B,YAAgC;QAEhC,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,SAAS,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAA0B,EAAE,GAAS;QACnD,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,OAAO,CACb,SAA0B,EAC1B,MAG8B;QAE9B,OAAO,IAAI,wBAAwB,CAAC;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/iam/credential/sim-iam-access-key.d.ts

@@ -8,7 +8,12 @@ interface SimIamAccessKeyProperties {
     readonly principal: SimAwsPrincipal;
     readonly identityPolicyPrincipal?: SimAwsPrincipal | undefined;
     readonly session?: SimIamSession | undefined;
-    readonly creationDate?: Date | undefined;
+    /**
+     * When this access key was created, in simulated time. Required so that no
+     * part of IAM invents a timestamp of its own: the caller already knows what
+     * "now" means in its simulation.
+     */
+    readonly creationDate: Date;
     readonly status?: SimIamAccessKeyStatus | undefined;
 }
 /**

package/dist/service/iam/credential/sim-iam-access-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-access-key.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE1D,UAAU,yBAAyB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACrD;AAED;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,uBAAuB,EAAE,eAAe,CAAC;IACzD,SAAgB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAC5B,MAAM,EAAE,qBAAqB,CAAC;IAErC,YAAY,UAAU,EAAE,yBAAyB,EAShD;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAEvD;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM7D;IAED;;OAEG;IACH,QAAQ,IAAI,wBAAwB,CAOnC;IAED,OAAO,CAAC,YAAY;CAMrB"}
+{"version":3,"file":"sim-iam-access-key.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE1D,UAAU,yBAAyB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACrD;AAED;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,uBAAuB,EAAE,eAAe,CAAC;IACzD,SAAgB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAC5B,MAAM,EAAE,qBAAqB,CAAC;IAErC,YAAY,UAAU,EAAE,yBAAyB,EAShD;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAEvD;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM7D;IAED;;OAEG;IACH,QAAQ,IAAI,wBAAwB,CAOnC;IAED,OAAO,CAAC,YAAY;CAMrB"}

package/dist/service/iam/credential/sim-iam-access-key.js

@@ -20,7 +20,7 @@ export class SimIamAccessKey {
         this.identityPolicyPrincipal =
             properties.identityPolicyPrincipal ?? properties.principal;
         this.session = properties.session;
-        this.creationDate = new Date(properties.creationDate ?? Date.now());
+        this.creationDate = new Date(properties.creationDate);
         this.status = properties.status ?? "Active";
     }
     /**

package/dist/service/iam/credential/sim-iam-access-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-access-key.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkB1D;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACV,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,SAAS,CAAkB;IAC3B,uBAAuB,CAAkB;IACzC,OAAO,CAA6B;IACpC,YAAY,CAAO;IAC5B,MAAM,CAAwB;IAErC,YAAY,UAAqC;QAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,uBAAuB;YAC1B,UAAU,CAAC,uBAAuB,IAAI,UAAU,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAuB;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAgC;QAClD,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAEpE,OAAO,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;CACF"}
+{"version":3,"file":"sim-iam-access-key.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAuB1D;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACV,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,SAAS,CAAkB;IAC3B,uBAAuB,CAAkB;IACzC,OAAO,CAA6B;IACpC,YAAY,CAAO;IAC5B,MAAM,CAAwB;IAErC,YAAY,UAAqC;QAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,uBAAuB;YAC1B,UAAU,CAAC,uBAAuB,IAAI,UAAU,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAuB;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAgC;QAClD,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAEpE,OAAO,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/service/iam/credential/sim-iam-account-signing-credentials.d.ts

@@ -0,0 +1,21 @@
+import type { SimIamCredentialRegistry } from "./sim-iam-credential-registry.js";
+import type { SimIamSigningCredential, SimIamSigningCredentialInput, SimIamSigningCredentialResolver } from "./sim-iam-signing-credential.js";
+/**
+ * Derives signing keys for one Account's access keys.
+ *
+ * Storing and authenticating access keys belongs to the credential registry.
+ * Turning an authenticated key into something a signature can be checked
+ * against is a separate job, and it is this one.
+ *
+ * What leaves here is a key derived for a single date, Region and service, so
+ * it cannot be used to sign anything outside the scope it was asked for.
+ */
+export declare class SimIamAccountSigningCredentials implements SimIamSigningCredentialResolver {
+    private readonly credentials;
+    constructor(credentials: SimIamCredentialRegistry);
+    /**
+     * Authenticate an access key and derive its signing key for a scope.
+     */
+    signingCredentialFor(input: SimIamSigningCredentialInput): SimIamSigningCredential;
+}
+//# sourceMappingURL=sim-iam-account-signing-credentials.d.ts.map

package/dist/service/iam/credential/sim-iam-account-signing-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-signing-credentials.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-account-signing-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EACV,uBAAuB,EACvB,4BAA4B,EAC5B,+BAA+B,EAChC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;GASG;AACH,qBAAa,+BAAgC,YAAW,+BAA+B;IACrF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IAEvD,YAAY,WAAW,EAAE,wBAAwB,EAEhD;IAED;;OAEG;IACH,oBAAoB,CAClB,KAAK,EAAE,4BAA4B,GAClC,uBAAuB,CAWzB;CACF"}

package/dist/service/iam/credential/sim-iam-account-signing-credentials.js

@@ -0,0 +1,28 @@
+import { simIamSigV4SigningKey } from "../sigv4/sim-iam-sigv4-signing-key.js";
+/**
+ * Derives signing keys for one Account's access keys.
+ *
+ * Storing and authenticating access keys belongs to the credential registry.
+ * Turning an authenticated key into something a signature can be checked
+ * against is a separate job, and it is this one.
+ *
+ * What leaves here is a key derived for a single date, Region and service, so
+ * it cannot be used to sign anything outside the scope it was asked for.
+ */
+export class SimIamAccountSigningCredentials {
+    credentials;
+    constructor(credentials) {
+        this.credentials = credentials;
+    }
+    /**
+     * Authenticate an access key and derive its signing key for a scope.
+     */
+    signingCredentialFor(input) {
+        const accessKey = this.credentials.authenticateAccessKey(input.accessKeyId, input.sessionToken, input.now);
+        return {
+            signingKey: simIamSigV4SigningKey(accessKey.secretAccessKey, input.scope),
+            identity: accessKey.identity(),
+        };
+    }
+}
+//# sourceMappingURL=sim-iam-account-signing-credentials.js.map

package/dist/service/iam/credential/sim-iam-account-signing-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-signing-credentials.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-account-signing-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAQ9E;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IACzB,WAAW,CAA2B;IAEvD,YAAY,WAAqC;QAC/C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,KAAmC;QAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACtD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,GAAG,CACV,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,qBAAqB,CAAC,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC;YACzE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/credential/sim-iam-credential-registry.d.ts

@@ -1,5 +1,19 @@
 import type { SimAwsCredentials, SimIamCredentialIdentity } from "./sim-aws-credentials.js";
 import type { SimIamAccessKey } from "./sim-iam-access-key.js";
+import { type SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimIamAccessKeyIndex } from "./sim-iam-signing-credential.js";
+interface SimIamCredentialRegistryProperties {
+    /**
+     * Clock deciding whether a temporary session has expired. Session expiry is
+     * simulated state, so it is judged in simulated time rather than host time.
+     */
+    readonly clock?: SimClock;
+    /**
+     * Simulation-wide index told about every key registered here, so a signed
+     * request naming only an access key id can be traced back to this Account.
+     */
+    readonly accessKeyIndex?: SimIamAccessKeyIndex | undefined;
+}
 /**
  * Stores and authenticates simulated IAM access keys.
  *
@@ -9,6 +23,10 @@ import type { SimIamAccessKey } from "./sim-iam-access-key.js";
  */
 export declare class SimIamCredentialRegistry {
     private readonly accessKeys;
+    private readonly clock;
+    private readonly accessKeyIndex?;
+    private readonly checks;
+    constructor(properties?: SimIamCredentialRegistryProperties);
     /**
      * Register a new simulated access key.
      */
@@ -17,5 +35,15 @@ export declare class SimIamCredentialRegistry {
      * Authenticate credentials and resolve their simulated AWS identity.
      */
     resolveCredentials(credentials: SimAwsCredentials, now?: Date): SimIamCredentialIdentity;
+    /**
+     * Authenticate an access key without a secret to compare.
+     *
+     * A signed request proves possession of the secret by its signature rather
+     * than by presenting it, so everything except the secret is checked here and
+     * the signature settles the rest.
+     */
+    authenticateAccessKey(accessKeyId: string, sessionToken: string | undefined, now?: Date): SimIamAccessKey;
+    private activeAccessKey;
 }
+export {};
 //# sourceMappingURL=sim-iam-credential-registry.d.ts.map