@kensio/yulin 0.36.0 → 0.37.0

package/dist/service/iam/command/sim-iam-command-handlers.js

@@ -0,0 +1,42 @@
+import { SimIamActionAuthorizer } from "../authorize/sim-iam-action-authorizer.js";
+import { SimIamPolicyCommandHandlers } from "./policy/sim-iam-policy-command-handlers.js";
+import { SimIamRoleCommandHandlers } from "./role/sim-iam-role-command-handlers.js";
+import { SimIamUserCommandHandlers } from "./user/sim-iam-user-command-handlers.js";
+/**
+ * The command handlers of one simulated IAM Account, grouped by resource.
+ *
+ * Every group authorizes against the same IAM and mutates the same Account
+ * state, so they are wired together here rather than one at a time in the
+ * service facade. That keeps SimIam what it should be: state maps plus
+ * delegation.
+ */
+export class SimIamCommandHandlers {
+    roles;
+    users;
+    policies;
+    constructor(properties) {
+        const authorizer = new SimIamActionAuthorizer({ iam: properties.iam });
+        this.roles = new SimIamRoleCommandHandlers({
+            accountId: properties.accountId,
+            roles: properties.roles,
+            background: properties.background,
+            authorizer,
+        });
+        this.users = new SimIamUserCommandHandlers({
+            accountId: properties.accountId,
+            users: properties.users,
+            credentialRegistry: properties.credentialRegistry,
+            credentialGenerator: properties.userCredentialGenerator,
+            background: properties.background,
+            authorizer,
+        });
+        this.policies = new SimIamPolicyCommandHandlers({
+            accountId: properties.accountId,
+            policies: properties.policies,
+            users: properties.users,
+            background: properties.background,
+            authorizer,
+        });
+    }
+}
+//# sourceMappingURL=sim-iam-command-handlers.js.map

package/dist/service/iam/command/sim-iam-command-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-command-handlers.js","sourceRoot":"","sources":["../../../../src/service/iam/command/sim-iam-command-handlers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAOnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAiBpF;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAA4B;IACjC,KAAK,CAA4B;IACjC,QAAQ,CAA8B;IAE/C,YAAY,UAA2C;QACrD,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC;YACzC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC;YACzC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,mBAAmB,EAAE,UAAU,CAAC,uBAAuB;YACvD,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC;YAC9C,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/iam/registry/sim-iam-account-resolver.d.ts

@@ -12,5 +12,13 @@ export interface SimIamAccountResolver {
      * registered for the requested Account.
      */
     iamForAccount(accountId: SimAwsAccountId): SimIam;
+    /**
+     * Find simulated IAM for an Account, without requiring it to exist.
+     *
+     * An Account with no IAM registered is a legitimate answer rather than a
+     * fault: a request can name a principal in an Account the simulation was
+     * never told about, and that Account grants it nothing.
+     */
+    findIamForAccount(accountId: SimAwsAccountId): SimIam | undefined;
 }
 //# sourceMappingURL=sim-iam-account-resolver.d.ts.map

package/dist/service/iam/registry/sim-iam-account-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-account-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC;CACnD"}
+{"version":3,"file":"sim-iam-account-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC;IAElD;;;;;;OAMG;IACH,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAAC;CACnE"}

package/dist/service/iam/registry/sim-iam-registry.d.ts

@@ -26,5 +26,9 @@ export declare class SimIamRegistry implements SimIamAccountResolver {
      * rely on receiving a usable account-scoped service.
      */
     iamForAccount(accountId: SimAwsAccountId): SimIam;
+    /**
+     * Find the registered IAM facade belonging to an Account, if there is one.
+     */
+    findIamForAccount(accountId: SimAwsAccountId): SimIam | undefined;
 }
 //# sourceMappingURL=sim-iam-registry.d.ts.map

package/dist/service/iam/registry/sim-iam-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,qBAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CActD;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAQhD;CACF"}
+{"version":3,"file":"sim-iam-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,qBAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CActD;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAQhD;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAEhE;CACF"}

package/dist/service/iam/registry/sim-iam-registry.js

@@ -32,11 +32,17 @@ export class SimIamRegistry {
      * rely on receiving a usable account-scoped service.
      */
     iamForAccount(accountId) {
-        const iam = this.iamByAccountId.get(accountId);
+        const iam = this.findIamForAccount(accountId);
         if (iam === undefined) {
             throw new Error(`Sim IAM is not registered for Account ${accountId}`);
         }
         return iam;
     }
+    /**
+     * Find the registered IAM facade belonging to an Account, if there is one.
+     */
+    findIamForAccount(accountId) {
+        return this.iamByAccountId.get(accountId);
+    }
 }
 //# sourceMappingURL=sim-iam-registry.js.map

package/dist/service/iam/registry/sim-iam-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACR,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAA0B,EAAE,GAAW;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}
+{"version":3,"file":"sim-iam-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACR,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAA0B,EAAE,GAAW;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAA0B;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/iam/sim-iam-account-parts.d.ts

@@ -0,0 +1,58 @@
+import { type BackgroundScheduler } from "../../util/background/background.js";
+import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
+import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
+import { SimIamAccountAuthZ } from "./authorize/sim-iam-account-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "./authorize/sim-iam-inter-service-auth-z.js";
+import { SimIamCommandHandlers } from "./command/sim-iam-command-handlers.js";
+import { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
+import { type SimIamSessionCredentialGenerator } from "./credential/session/sim-iam-session-cred-gen.js";
+import { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
+import { type SimIamUserCredentialGenerator } from "./credential/user/sim-iam-user-credential-generator.js";
+import type { SimIamManagedPolicy } from "./policy/sim-iam-policy.js";
+import type { SimIamAccountResolver } from "./registry/sim-iam-account-resolver.js";
+import type { SimIamRole, SimIamRoleName } from "./role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "./user/sim-iam-user.js";
+export interface SimIamProperties {
+    readonly accountRegionScope?: SimAwsAccountRegionScope;
+    readonly background?: BackgroundScheduler;
+    readonly credentialRegistry?: SimIamCredentialRegistry;
+    readonly sessionCredentialGenerator?: SimIamSessionCredentialGenerator;
+    readonly userCredentialGenerator?: SimIamUserCredentialGenerator;
+    /**
+     * Resolves the IAM of other Accounts in the same simulation.
+     *
+     * A cross-Account request is decided in both Accounts, so deciding one needs
+     * a way to reach the caller's own Account. A standalone SimIam has no
+     * simulation around it and so leaves this out.
+     */
+    readonly iamResolver?: SimIamAccountResolver;
+}
+/**
+ * The state and collaborators of one simulated IAM Account.
+ *
+ * SimIam is the SDK-facing facade. This class is what it is a facade over: the
+ * Account's stored Roles, Users and Policies, the credential registry and
+ * session manager, and the authorization and command-handling collaborators
+ * that work on them. Keeping the construction and defaulting rules here leaves
+ * the facade as state plus delegation.
+ */
+export declare class SimIamAccountParts {
+    readonly accountId: SimAwsAccountId;
+    readonly background: BackgroundScheduler;
+    readonly credentials: SimIamCredentialRegistry;
+    readonly sessionManager: SimIamSessionManager;
+    readonly accountAuthZ: SimIamAccountAuthZ;
+    readonly policies: Map<`arn:aws:${string}:${string}:${string}:${string}/${string}`, SimIamManagedPolicy>;
+    readonly roles: Map<SimIamRoleName, SimIamRole>;
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    private readonly userCredentialGenerator;
+    constructor(properties: SimIamProperties);
+    /**
+     * Make the command handlers for this Account.
+     *
+     * IAM authorizes its own control-plane commands, so the handlers need the
+     * service facade the commands arrive at and cannot be built before it.
+     */
+    commandHandlers(iam: SimIamInterServiceAuthZ): SimIamCommandHandlers;
+}
+//# sourceMappingURL=sim-iam-account-parts.d.ts.map

package/dist/service/iam/sim-iam-account-parts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-parts.d.ts","sourceRoot":"","sources":["../../../src/service/iam/sim-iam-account-parts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,gCAAgC,CAAC;IACvE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,6BAA6B,CAAC;IAEjE;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAE1C,QAAQ,CAAC,QAAQ,wFAA0C;IAC3D,QAAQ,CAAC,KAAK,kCAAyC;IACvD,QAAQ,CAAC,KAAK,kCAAyC;IAEvD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAgC;IAExE,YAAY,UAAU,EAAE,gBAAgB,EAgCvC;IAED;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,uBAAuB,GAAG,qBAAqB,CAWnE;CACF"}

package/dist/service/iam/sim-iam-account-parts.js

@@ -0,0 +1,72 @@
+import { BackgroundTasks, } from "../../util/background/background.js";
+import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
+import { SimIamAccountAuthZ } from "./authorize/sim-iam-account-auth-z.js";
+import { SimIamCommandHandlers } from "./command/sim-iam-command-handlers.js";
+import { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
+import { SimIamRandomSessionCredentialGenerator, } from "./credential/session/sim-iam-session-cred-gen.js";
+import { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
+import { SimIamRandomUserCredentialGenerator, } from "./credential/user/sim-iam-user-credential-generator.js";
+/**
+ * The state and collaborators of one simulated IAM Account.
+ *
+ * SimIam is the SDK-facing facade. This class is what it is a facade over: the
+ * Account's stored Roles, Users and Policies, the credential registry and
+ * session manager, and the authorization and command-handling collaborators
+ * that work on them. Keeping the construction and defaulting rules here leaves
+ * the facade as state plus delegation.
+ */
+export class SimIamAccountParts {
+    accountId;
+    background;
+    credentials;
+    sessionManager;
+    accountAuthZ;
+    policies = new Map();
+    roles = new Map();
+    users = new Map();
+    userCredentialGenerator;
+    constructor(properties) {
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), sessionCredentialGenerator = new SimIamRandomSessionCredentialGenerator(), userCredentialGenerator = new SimIamRandomUserCredentialGenerator(), } = properties;
+        // The scheduler is this simulation's clock, so session expiry is judged in
+        // the same time as every other simulated timestamp.
+        const credentialRegistry = properties.credentialRegistry ??
+            new SimIamCredentialRegistry({ clock: background });
+        this.accountId = accountRegionScope.accountId;
+        this.background = background;
+        this.credentials = credentialRegistry;
+        this.userCredentialGenerator = userCredentialGenerator;
+        this.sessionManager = new SimIamSessionManager({
+            accountId: this.accountId,
+            roles: this.roles,
+            credentialRegistry,
+            credentialGenerator: sessionCredentialGenerator,
+        });
+        this.accountAuthZ = new SimIamAccountAuthZ({
+            accountId: this.accountId,
+            policies: this.policies,
+            roles: this.roles,
+            users: this.users,
+            credentialIdentityResolver: credentialRegistry,
+            iamResolver: properties.iamResolver,
+        });
+    }
+    /**
+     * Make the command handlers for this Account.
+     *
+     * IAM authorizes its own control-plane commands, so the handlers need the
+     * service facade the commands arrive at and cannot be built before it.
+     */
+    commandHandlers(iam) {
+        return new SimIamCommandHandlers({
+            accountId: this.accountId,
+            policies: this.policies,
+            roles: this.roles,
+            users: this.users,
+            credentialRegistry: this.credentials,
+            userCredentialGenerator: this.userCredentialGenerator,
+            background: this.background,
+            iam,
+        });
+    }
+}
+//# sourceMappingURL=sim-iam-account-parts.js.map

package/dist/service/iam/sim-iam-account-parts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-parts.js","sourceRoot":"","sources":["../../../src/service/iam/sim-iam-account-parts.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,sCAAsC,GAEvC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EACL,mCAAmC,GAEpC,MAAM,wDAAwD,CAAC;AAuBhE;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IACpB,SAAS,CAAkB;IAC3B,UAAU,CAAsB;IAChC,WAAW,CAA2B;IACtC,cAAc,CAAuB;IACrC,YAAY,CAAqB;IAEjC,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAClD,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9C,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEtC,uBAAuB,CAAgC;IAExE,YAAY,UAA4B;QACtC,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,0BAA0B,GAAG,IAAI,sCAAsC,EAAE,EACzE,uBAAuB,GAAG,IAAI,mCAAmC,EAAE,GACpE,GAAG,UAAU,CAAC;QAEf,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,kBAAkB,GACtB,UAAU,CAAC,kBAAkB;YAC7B,IAAI,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACtC,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB;YAClB,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,0BAA0B,EAAE,kBAAkB;YAC9C,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,GAA4B;QAC1C,OAAO,IAAI,qBAAqB,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB,EAAE,IAAI,CAAC,WAAW;YACpC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/iam/sim-iam.d.ts

@@ -1,9 +1,9 @@
-import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
+import type { SimArn } from "../aws/arn.js";
+import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
 import type { SimCreatePolicyCommand, SimCreatePolicyCommandOutput } from "./command/policy/create-policy/create-policy.command.js";
 import type { SimIamManagedPolicy } from "./policy/sim-iam-policy.js";
 import type { SimGetPolicyCommand, SimGetPolicyCommandOutput } from "./command/policy/get-policy/get-policy.command.js";
 import type { SimListPoliciesCommand, SimListPoliciesCommandOutput } from "./command/policy/list-policies/list-policies.command.js";
-import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimCreateRoleCommand, SimCreateRoleCommandOutput } from "./command/role/create-role/create-role.command.js";
 import type { SimGetRoleCommand, SimGetRoleCommandOutput } from "./command/role/get-role/get-role.command.js";
 import type { SimIamRole, SimIamRoleName } from "./role/sim-iam-role.js";
@@ -12,24 +12,19 @@ import type { SimIamAuthorizationInput } from "./authorize/context/sim-iam-auth-
 import type { SimIamPolicyDecision } from "./authorize/sim-iam-decision.js";
 import type { SimPutRolePolicyCommand, SimPutRolePolicyCommandOutput } from "./command/policy/put-role-policy/put-role-policy.command.js";
 import type { SimAttachRolePolicyCommand, SimAttachRolePolicyCommandOutput } from "./command/role/attach-role-policy/attach-role-policy.command.js";
-import { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
-import { type SimIamSessionCredentialGenerator } from "./credential/session/sim-iam-session-cred-gen.js";
-import { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
-import { type SimIamUserCredentialGenerator } from "./credential/user/sim-iam-user-credential-generator.js";
 import type { SimCreateUserCommand, SimCreateUserCommandOutput } from "./command/user/create-user/create-user.command.js";
 import type { SimCreateAccessKeyCommand, SimCreateAccessKeyCommandOutput } from "./command/user/create-access-key/create-access-key.command.js";
 import type { SimIamRequestOptions } from "./command/sim-iam-request-options.js";
 import type { SimPutUserPolicyCommand, SimPutUserPolicyCommandOutput } from "./command/policy/put-user-policy/put-user-policy.command.js";
 import type { SimCfnServiceResourceFactory } from "../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimIamInterServiceAuthZ } from "./authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamAccountIdentityPolicies } from "./authorize/identity/sim-iam-account-identity-policies.js";
+import type { SimIamAuthZPolicySource } from "./authorize/context/sim-iam-auth-z-context.js";
+import type { SimAwsPrincipal } from "../aws/caller/sim-aws-caller.js";
 import type { SimSdkCommandRouter } from "../../sdk/index.js";
-interface SimIamProperties {
-    readonly accountRegionScope?: SimAwsAccountRegionScope;
-    readonly background?: BackgroundScheduler;
-    readonly credentialRegistry?: SimIamCredentialRegistry;
-    readonly sessionCredentialGenerator?: SimIamSessionCredentialGenerator;
-    readonly userCredentialGenerator?: SimIamUserCredentialGenerator;
-}
+import type { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
+import type { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
+import { type SimIamProperties } from "./sim-iam-account-parts.js";
 /**
  * Simulated IAM service facade. Handles SDK commands. Emulates AWS behaviour
  * and state.
@@ -38,20 +33,23 @@ interface SimIamProperties {
  * scope for consistency with the other service factories, but memoises one
  * service facade per Account.
  */
-export declare class SimIam implements SimIamInterServiceAuthZ {
+export declare class SimIam implements SimIamInterServiceAuthZ, SimIamAccountIdentityPolicies {
+    /**
+     * The simulated AWS Account this IAM belongs to.
+     *
+     * A standalone SimIam generates one, so this is how a test naming its own
+     * principals finds out which Account they should belong to.
+     */
+    readonly accountId: SimAwsAccountId;
     /**
      * Manage temporary sessions belonging to this simulated IAM Account.
      */
     readonly sessionManager: SimIamSessionManager;
     readonly credentials: SimIamCredentialRegistry;
-    readonly policies: Map<`arn:aws:${string}:${string}:${string}:${string}/${string}`, SimIamManagedPolicy>;
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
     readonly roles: Map<SimIamRoleName, SimIamRole>;
-    private readonly users;
-    private readonly background;
     private readonly cfnFactory;
-    private readonly roleCommands;
-    private readonly userCommands;
-    private readonly policyCommands;
+    private readonly commands;
     private readonly accountAuthZ;
     private readonly sdkRouter;
     constructor(properties?: SimIamProperties);
@@ -60,6 +58,16 @@ export declare class SimIam implements SimIamInterServiceAuthZ {
      * request caller. An omitted caller defaults to the Account root principal.
      */
     authorize(input: SimIamAuthorizationInput): SimIamPolicyDecision;
+    /**
+     * Identity-based policies this Account applies to one of its own principals.
+     *
+     * This is how another Account's IAM asks this Account what it grants a
+     * principal of its own, which is the caller's side of a cross-Account
+     * request. Real AWS requires that side to allow the action as well as the
+     * resource's own resource-based policy.
+     * @internal
+     */
+    identityPolicySourcesFor(principal: SimAwsPrincipal): readonly SimIamAuthZPolicySource[];
     /**
      * Handle a Create Policy Command from the SDK.
      */
@@ -113,5 +121,4 @@ export declare class SimIam implements SimIamInterServiceAuthZ {
      */
     sdkCommandRouter(): SimSdkCommandRouter;
 }
-export {};
 //# sourceMappingURL=sim-iam.d.ts.map

package/dist/service/iam/sim-iam.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam.d.ts","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6DAA6D,CAAC;AACrE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,wDAAwD,CAAC;AAEhE,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,+DAA+D,CAAC;AAKvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6DAA6D,CAAC;AAErE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AACxH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,gCAAgC,CAAC;IACvE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,6BAA6B,CAAC;CAClE;AAED;;;;;;;GAOG;AACH,qBAAa,MAAO,YAAW,uBAAuB;IACpD;;OAEG;IACH,SAAgB,cAAc,EAAE,oBAAoB,CAAC;IAErD,SAAgB,WAAW,EAAE,wBAAwB,CAAC;IAEtD,SAAgB,QAAQ,wFAA0C;IAClE,SAAgB,KAAK,kCAAyC;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAE/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAoD5C;IAED;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAE/D;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,4BAA4B,CAAC,CAEvC;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,yBAAyB,CAAC,CAEpC;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,4BAA4B,CAAC,CAEvC;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAExC;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAExC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAErC;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gCAAgC,CAAC,CAE3C;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,uBAAuB,CAAC,CAElC;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,yBAAyB,CAAC,CAEpC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAErC;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,+BAA+B,CAAC,CAE1C;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-iam.d.ts","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6DAA6D,CAAC;AACrE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iEAAiE,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,+DAA+D,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6DAA6D,CAAC;AAErE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AACxH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAG5F,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,qBAAa,MACX,YAAW,uBAAuB,EAAE,6BAA6B;IAEjE;;;;;OAKG;IACH,SAAgB,SAAS,EAAE,eAAe,CAAC;IAE3C;;OAEG;IACH,SAAgB,cAAc,EAAE,oBAAoB,CAAC;IAErD,SAAgB,WAAW,EAAE,wBAAwB,CAAC;IAEtD,SAAgB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC3D,SAAgB,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAEvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAW5C;IAED;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAE/D;IAED;;;;;;;;OAQG;IACH,wBAAwB,CACtB,SAAS,EAAE,eAAe,GACzB,SAAS,uBAAuB,EAAE,CAEpC;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,4BAA4B,CAAC,CAEvC;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,yBAAyB,CAAC,CAEpC;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,4BAA4B,CAAC,CAEvC;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAExC;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAExC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAErC;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gCAAgC,CAAC,CAE3C;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,uBAAuB,CAAC,CAElC;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,yBAAyB,CAAC,CAEpC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAErC;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,+BAA+B,CAAC,CAE1C;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/iam/sim-iam.js

@@ -1,16 +1,6 @@
-import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { BackgroundTasks, } from "../../util/background/background.js";
-import { SimIamRoleCommandHandlers } from "./command/role/sim-iam-role-command-handlers.js";
-import { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
-import { SimIamRandomSessionCredentialGenerator, } from "./credential/session/sim-iam-session-cred-gen.js";
-import { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
-import { SimIamRandomUserCredentialGenerator, } from "./credential/user/sim-iam-user-credential-generator.js";
-import { SimIamUserCommandHandlers } from "./command/user/sim-iam-user-command-handlers.js";
-import { SimIamPolicyCommandHandlers } from "./command/policy/sim-iam-policy-command-handlers.js";
-import { SimIamActionAuthorizer } from "./authorize/sim-iam-action-authorizer.js";
-import { SimIamAccountAuthZ } from "./authorize/sim-iam-account-auth-z.js";
 import { SimIamCloudFormationResourceFactory } from "./cfn/sim-cfn-iam-resource-factory.js";
 import { SimIamSdkCommandRouter } from "./sdk/sim-iam-sdk-command-router.js";
+import { SimIamAccountParts, } from "./sim-iam-account-parts.js";
 /**
  * Simulated IAM service facade. Handles SDK commands. Emulates AWS behaviour
  * and state.
@@ -20,65 +10,34 @@ import { SimIamSdkCommandRouter } from "./sdk/sim-iam-sdk-command-router.js";
  * service facade per Account.
  */
 export class SimIam {
+    /**
+     * The simulated AWS Account this IAM belongs to.
+     *
+     * A standalone SimIam generates one, so this is how a test naming its own
+     * principals finds out which Account they should belong to.
+     */
+    accountId;
     /**
      * Manage temporary sessions belonging to this simulated IAM Account.
      */
     sessionManager;
     credentials;
-    policies = new Map();
-    roles = new Map();
-    users = new Map();
-    background;
+    policies;
+    roles;
     cfnFactory;
-    roleCommands;
-    userCommands;
-    policyCommands;
+    commands;
     accountAuthZ;
     sdkRouter = new SimIamSdkCommandRouter(this);
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), sessionCredentialGenerator = new SimIamRandomSessionCredentialGenerator(), userCredentialGenerator = new SimIamRandomUserCredentialGenerator(), } = properties;
-        // The scheduler is this simulation's clock, so session expiry is judged in
-        // the same time as every other simulated timestamp.
-        const credentialRegistry = properties.credentialRegistry ??
-            new SimIamCredentialRegistry({ clock: background });
-        this.background = background;
-        this.credentials = credentialRegistry;
-        this.sessionManager = new SimIamSessionManager({
-            accountId: accountRegionScope.accountId,
-            roles: this.roles,
-            credentialRegistry,
-            credentialGenerator: sessionCredentialGenerator,
-        });
+        const parts = new SimIamAccountParts(properties);
+        this.accountId = parts.accountId;
+        this.policies = parts.policies;
+        this.roles = parts.roles;
+        this.credentials = parts.credentials;
+        this.sessionManager = parts.sessionManager;
+        this.accountAuthZ = parts.accountAuthZ;
+        this.commands = parts.commandHandlers(this);
         this.cfnFactory = new SimIamCloudFormationResourceFactory(this);
-        this.accountAuthZ = new SimIamAccountAuthZ({
-            accountId: accountRegionScope.accountId,
-            policies: this.policies,
-            roles: this.roles,
-            users: this.users,
-            credentialIdentityResolver: credentialRegistry,
-        });
-        const authorizer = new SimIamActionAuthorizer({ iam: this });
-        this.roleCommands = new SimIamRoleCommandHandlers({
-            accountId: accountRegionScope.accountId,
-            roles: this.roles,
-            background: this.background,
-            authorizer,
-        });
-        this.userCommands = new SimIamUserCommandHandlers({
-            accountId: accountRegionScope.accountId,
-            users: this.users,
-            credentialRegistry,
-            credentialGenerator: userCredentialGenerator,
-            background: this.background,
-            authorizer,
-        });
-        this.policyCommands = new SimIamPolicyCommandHandlers({
-            accountId: accountRegionScope.accountId,
-            policies: this.policies,
-            users: this.users,
-            background: this.background,
-            authorizer,
-        });
     }
     /**
      * Evaluate an IAM authorization attempt against policies relevant to the
@@ -87,71 +46,83 @@ export class SimIam {
     authorize(input) {
         return this.accountAuthZ.authorize(input);
     }
+    /**
+     * Identity-based policies this Account applies to one of its own principals.
+     *
+     * This is how another Account's IAM asks this Account what it grants a
+     * principal of its own, which is the caller's side of a cross-Account
+     * request. Real AWS requires that side to allow the action as well as the
+     * resource's own resource-based policy.
+     * @internal
+     */
+    identityPolicySourcesFor(principal) {
+        return this.accountAuthZ.identityPolicySourcesFor(principal);
+    }
     /**
      * Handle a Create Policy Command from the SDK.
      */
     async createPolicy(command, options) {
-        return await this.policyCommands.createPolicy(command, options);
+        return await this.commands.policies.createPolicy(command, options);
     }
     /**
      * Handle a Get Policy Command from the SDK.
      */
     async getPolicy(command, options) {
-        return await this.policyCommands.getPolicy(command, options);
+        return await this.commands.policies.getPolicy(command, options);
     }
     /**
      * Handle a List Policies Command from the SDK.
      */
     async listPolicies(command, options) {
-        return await this.policyCommands.listPolicies(command, options);
+        return await this.commands.policies.listPolicies(command, options);
     }
     /**
      * Handle a Put Role Policy Command from the SDK.
      */
     async putRolePolicy(command, options) {
-        return await this.roleCommands.putRolePolicy(command, options);
+        return await this.commands.roles.putRolePolicy(command, options);
     }
     /**
      * Handle an IAM PutUserPolicy command.
      */
     async putUserPolicy(command, options) {
-        return await this.policyCommands.putUserPolicy(command, options);
+        return await this.commands.policies.putUserPolicy(command, options);
     }
     /**
      * Handle a Create Role Command from the SDK.
      */
     async createRole(command, options) {
-        return await this.roleCommands.createRole(command, options);
+        return await this.commands.roles.createRole(command, options);
     }
     /**
      * Handle an Attach Role Policy Command from the SDK.
      */
     async attachRolePolicy(command, options) {
-        return await this.roleCommands.attachRolePolicy(command, options);
+        return await this.commands.roles.attachRolePolicy(command, options);
     }
     /**
      * Handle a Get Role Command from the SDK.
      */
     async getRole(command, options) {
-        return await this.roleCommands.getRole(command, options);
+        return await this.commands.roles.getRole(command, options);
     }
     /**
      * Handle a List Roles Command from the SDK.
      */
     async listRoles(command, options) {
-        return await this.roleCommands.listRoles(command, options);
+        return await this.commands.roles.listRoles(command, options);
     }
     /**
      * Handle an IAM CreateUser command.
      */
     async createUser(command, options) {
-        return await this.userCommands.createUser(command, options);
+        return await this.commands.users.createUser(command, options);
     }
     /**
      * Handle an IAM CreateAccessKey command.
      */
     async createAccessKey(command, options) {
-        return await this.userCommands.createAccessKey(command, options);
+        return await this.commands.users.createAccessKey(command, options);
     }
     /**
      * Get this service's CloudFormation Resource factory.

package/dist/service/iam/sim-iam.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam.js","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAcjG,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAc7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAW5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,sCAAsC,GAEvC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EACL,mCAAmC,GAEpC,MAAM,wDAAwD,CAAC;AAUhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAM3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAG5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAW7E;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IACjB;;OAEG;IACa,cAAc,CAAuB;IAErC,WAAW,CAA2B;IAEtC,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAClD,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7C,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE9C,UAAU,CAAsB;IAChC,UAAU,CAA+B;IACzC,YAAY,CAA4B;IACxC,YAAY,CAA4B;IACxC,cAAc,CAA8B;IAC5C,YAAY,CAAqB;IACjC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,0BAA0B,GAAG,IAAI,sCAAsC,EAAE,EACzE,uBAAuB,GAAG,IAAI,mCAAmC,EAAE,GACpE,GAAG,UAAU,CAAC;QAEf,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,kBAAkB,GACtB,UAAU,CAAC,kBAAkB;YAC7B,IAAI,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC7C,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB;YAClB,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC;YACzC,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,0BAA0B,EAAE,kBAAkB;SAC/C,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,GAAG,IAAI,yBAAyB,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,yBAAyB,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB;YAClB,mBAAmB,EAAE,uBAAuB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,IAAI,2BAA2B,CAAC;YACpD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,OAA0B,EAC1B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAkC,EAClC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-iam.js","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAM5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAM7E,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IAGjB;;;;;OAKG;IACa,SAAS,CAAkB;IAE3C;;OAEG;IACa,cAAc,CAAuB;IAErC,WAAW,CAA2B;IAEtC,QAAQ,CAAmC;IAC3C,KAAK,CAAkC;IAEtC,UAAU,CAA+B;IACzC,QAAQ,CAAwB;IAChC,YAAY,CAAqB;IACjC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAEjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;OAQG;IACH,wBAAwB,CACtB,SAA0B;QAE1B,OAAO,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,OAA0B,EAC1B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAkC,EAClC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "0.36.0",
+  "version": "0.37.0",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": {
     "type": "git",