@kensio/yulin 0.36.0 → 0.38.0

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.js

@@ -1,12 +1,14 @@
-import { validateS3BucketName } from "../bucket/validate/validate-s3-bucket-name.js";
-import { assertDefined } from "../../../util/type-guard/defined.js";
+import { SimCfnS3BucketCreator } from "./bucket/sim-cfn-s3-bucket-creator.js";
+import { SimCfnS3BucketPolicyCreator } from "./bucket-policy/sim-cfn-s3-bucket-policy-creator.js";
 /**
  * CloudFormation Resource factory for simulated S3 resources.
  */
 export class SimS3CloudFormationResourceFactory {
-    simS3;
+    bucketCreator;
+    bucketPolicyCreator;
     constructor(simS3) {
-        this.simS3 = simS3;
+        this.bucketCreator = new SimCfnS3BucketCreator({ simS3 });
+        this.bucketPolicyCreator = new SimCfnS3BucketPolicyCreator({ simS3 });
     }
     /**
      * Create a simulated S3 resource from a CloudFormation Resource.
@@ -14,68 +16,15 @@ export class SimS3CloudFormationResourceFactory {
     async create(resourceTypeName, resource, context) {
         switch (resourceTypeName) {
             case "Bucket": {
-                return await this.createBucket(resource, context);
+                return await this.bucketCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            case "BucketPolicy": {
+                return await this.bucketPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
             }
             default: {
                 throw new Error(`Unsupported sim S3 CloudFormation Resource ${resourceTypeName}`);
             }
         }
     }
-    async createBucket(resource, context) {
-        const bucketName = this.bucketNameForResource(resource, context);
-        validateS3BucketName(bucketName);
-        await this.simS3.createBucket({
-            input: {
-                Bucket: bucketName,
-            },
-        });
-        const bucket = this.simS3.getSimBucketByName(bucketName);
-        assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation creation`);
-        const websiteConfig = this.websiteConfigurationForResource(resource, context);
-        if (websiteConfig !== undefined) {
-            await this.simS3.putBucketWebsite({
-                input: {
-                    Bucket: bucketName,
-                    WebsiteConfiguration: websiteConfig,
-                },
-            });
-        }
-        return bucket;
-    }
-    bucketNameForResource(resource, context) {
-        const properties = context.resolvedProperties ?? resource.properties;
-        const bucketName = properties["BucketName"];
-        if (typeof bucketName === "string") {
-            return bucketName;
-        }
-        return resource.logicalId.toLowerCase();
-    }
-    websiteConfigurationForResource(resource, context) {
-        const properties = context.resolvedProperties ?? resource.properties;
-        const websiteConfig = properties["WebsiteConfiguration"];
-        if (websiteConfig === undefined ||
-            websiteConfig === null ||
-            typeof websiteConfig !== "object" ||
-            Array.isArray(websiteConfig)) {
-            return undefined;
-        }
-        if ("RoutingRules" in websiteConfig &&
-            !Array.isArray(websiteConfig["RoutingRules"])) {
-            return undefined;
-        }
-        return {
-            ...websiteConfig,
-            IndexDocument: typeof websiteConfig["IndexDocument"] === "string"
-                ? {
-                    Suffix: websiteConfig["IndexDocument"],
-                }
-                : websiteConfig["IndexDocument"],
-            ErrorDocument: typeof websiteConfig["ErrorDocument"] === "string"
-                ? {
-                    Key: websiteConfig["ErrorDocument"],
-                }
-                : websiteConfig["ErrorDocument"],
-        };
-    }
 }
 //# sourceMappingURL=sim-cfn-s3-resource-factory.js.map

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAChB,KAAK;IAAlC,YAA6B,KAAY;qBAAZ,KAAK;IAAU,CAAC;IAE7C;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,8CAA8C,gBAAgB,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5B,KAAK,EAAE;gBACL,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,gCAAgC,CAC5D,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,+BAA+B,CACxD,QAAQ,EACR,OAAO,CACR,CAAC;QAEF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAChC,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU;oBAClB,oBAAoB,EAAE,aAAa;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAC3B,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAEO,+BAA+B,CACrC,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,aAAa,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAEzD,IACE,aAAa,KAAK,SAAS;YAC3B,aAAa,KAAK,IAAI;YACtB,OAAO,aAAa,KAAK,QAAQ;YACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,cAAc,IAAI,aAAa;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAC7C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC;iBACvC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;YACpC,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,GAAG,EAAE,aAAa,CAAC,eAAe,CAAC;iBACpC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;SACf,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-s3-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAElG;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAC5B,aAAa,CAAwB;IACrC,mBAAmB,CAA8B;IAElE,YAAY,KAAY;QACtB,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,IAAI,2BAA2B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CACpC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAC1C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,8CAA8C,gBAAgB,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.d.ts

@@ -0,0 +1,11 @@
+import type { SimIamResourcePolicyInput } from "../../../iam/authorize/context/sim-iam-auth-z-context-builder.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+/**
+ * The resource policies sim IAM should evaluate for a request against a Bucket.
+ *
+ * A Bucket policy can grant Bucket-level administration actions in real S3, so
+ * the policy administration commands consult it the same way the Object
+ * commands do. A Bucket without a policy contributes nothing.
+ */
+export declare function simS3BucketResourcePolicies(bucket: SimS3Bucket): readonly SimIamResourcePolicyInput[];
+//# sourceMappingURL=sim-s3-bucket-resource-policies.d.ts.map

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-resource-policies.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/authorize/sim-s3-bucket-resource-policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,GAClB,SAAS,yBAAyB,EAAE,CActC"}

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.js

@@ -0,0 +1,22 @@
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+/**
+ * The resource policies sim IAM should evaluate for a request against a Bucket.
+ *
+ * A Bucket policy can grant Bucket-level administration actions in real S3, so
+ * the policy administration commands consult it the same way the Object
+ * commands do. A Bucket without a policy contributes nothing.
+ */
+export function simS3BucketResourcePolicies(bucket) {
+    const policy = bucket.getPolicy();
+    if (policy === undefined) {
+        return [];
+    }
+    return [
+        {
+            document: policy,
+            policyName: "BucketPolicy",
+            resourceArn: simS3BucketArn(bucket.bucketName),
+        },
+    ];
+}
+//# sourceMappingURL=sim-s3-bucket-resource-policies.js.map

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-resource-policies.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/authorize/sim-s3-bucket-resource-policies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAElC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.d.ts

@@ -0,0 +1,23 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+interface DeleteBucketPolicyAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to an S3 DeleteBucketPolicy request.
+ *
+ * Real S3 governs removing a Bucket policy with s3:DeleteBucketPolicy, which is
+ * a distinct action from the s3:PutBucketPolicy that replaces one.
+ */
+export declare class DeleteBucketPolicyAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: DeleteBucketPolicyAuthorizerProperties);
+    /**
+     * Ensure the caller may remove the Bucket policy.
+     */
+    authorize(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=delete-bucket-policy-authorizer.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAEzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAgB1D;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+/**
+ * Applies IAM authorization to an S3 DeleteBucketPolicy request.
+ *
+ * Real S3 governs removing a Bucket policy with s3:DeleteBucketPolicy, which is
+ * a distinct action from the s3:PutBucketPolicy that replaces one.
+ */
+export class DeleteBucketPolicyAuthorizer {
+    static action = "s3:DeleteBucketPolicy";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may remove the Bucket policy.
+     */
+    authorize(bucket, caller) {
+        const resource = simS3BucketArn(bucket.bucketName);
+        const decision = this.iam.authorize({
+            action: DeleteBucketPolicyAuthorizer.action,
+            resource,
+            caller,
+            resourcePolicies: simS3BucketResourcePolicies(bucket),
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: DeleteBucketPolicyAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=delete-bucket-policy-authorizer.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;;;;GAKG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,uBAAuB,CAAC;IAExC,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.d.ts

@@ -0,0 +1,20 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy command.
+ */
+export interface SimDeleteBucketPolicyCommand {
+    readonly input: SimDeleteBucketPolicyCommandInput;
+}
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy input.
+ */
+export interface SimDeleteBucketPolicyCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy output.
+ */
+export interface SimDeleteBucketPolicyCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-bucket-policy.command.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-bucket-policy.command.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.d.ts

@@ -0,0 +1,32 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput } from "./delete-bucket-policy.command.js";
+interface DeleteBucketPolicyCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeleteBucketPolicyCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 DeleteBucketPolicyCommand handler.
+ */
+export declare class DeleteBucketPolicyCommandHandler implements CommandHandler<SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeleteBucketPolicyCommandHandlerProperties);
+    /**
+     * Authorize and remove a Bucket's resource policy.
+     *
+     * Real S3 answers the same way whether or not there was a policy to remove,
+     * so a Bucket without one is not an error here.
+     */
+    handle(command: SimDeleteBucketPolicyCommand, options?: DeleteBucketPolicyCommandHandlerOptions): Promise<SimDeleteBucketPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-bucket-policy.handler.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAUjE;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAkB7C;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.js

@@ -0,0 +1,37 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+import { DeleteBucketPolicyAuthorizer } from "./delete-bucket-policy-authorizer.js";
+/**
+ * Simulated S3 DeleteBucketPolicyCommand handler.
+ */
+export class DeleteBucketPolicyCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new DeleteBucketPolicyAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and remove a Bucket's resource policy.
+     *
+     * Real S3 answers the same way whether or not there was a policy to remove,
+     * so a Bucket without one is not an error here.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "DeleteBucketPolicyCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorize(bucket, options?.caller);
+        bucket.deletePolicy();
+        return {
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=delete-bucket-policy.handler.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAK5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAgBpF;;GAEG;AACH,MAAM,OAAO,gCAAgC;IAI1B,OAAO,CAAoC;IAC3C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,wCAAwC,CACzC,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,MAAM,CAAC,YAAY,EAAE,CAAC;QAEtB,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.d.ts

@@ -0,0 +1,20 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock command.
+ */
+export interface SimDeletePublicAccessBlockCommand {
+    readonly input: SimDeletePublicAccessBlockCommandInput;
+}
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock input.
+ */
+export interface SimDeletePublicAccessBlockCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock output.
+ */
+export interface SimDeletePublicAccessBlockCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-public-access-block.command.d.ts.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,sCAAsC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-public-access-block.command.js.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.d.ts

@@ -0,0 +1,30 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput } from "./delete-public-access-block.command.js";
+interface DeletePublicAccessBlockCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeletePublicAccessBlockCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 DeletePublicAccessBlockCommand handler.
+ */
+export declare class DeletePublicAccessBlockCommandHandler implements CommandHandler<SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeletePublicAccessBlockCommandHandlerProperties);
+    /**
+     * Authorize and remove a Bucket's Block Public Access settings, returning
+     * the Bucket to the all-enabled state a new Bucket starts in.
+     */
+    handle(command: SimDeletePublicAccessBlockCommand, options?: DeletePublicAccessBlockCommandHandlerOptions): Promise<SimDeletePublicAccessBlockCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-public-access-block.handler.d.ts.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,iCAAiC,EACjC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AAEjD,UAAU,+CAA+C;IACvD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,4CAA4C;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,qCAAsC,YAAW,cAAc,CAC1E,iCAAiC,EACjC,uCAAuC,CACxC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,+CAA+C,EAUtE;IAED;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,4CAA4C,GACrD,OAAO,CAAC,uCAAuC,CAAC,CAkBlD;CACF"}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.js

@@ -0,0 +1,35 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3PublicAccessBlockAuthorizer } from "../public-access-block/sim-s3-public-access-block-authorizer.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 DeletePublicAccessBlockCommand handler.
+ */
+export class DeletePublicAccessBlockCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3PublicAccessBlockAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and remove a Bucket's Block Public Access settings, returning
+     * the Bucket to the all-enabled state a new Bucket starts in.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "DeletePublicAccessBlockCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorizeWrite(bucket, options?.caller);
+        bucket.deletePublicAccessBlock();
+        return {
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=delete-public-access-block.handler.js.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAK5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AACnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgBjE;;GAEG;AACH,MAAM,OAAO,qCAAqC;IAI/B,OAAO,CAAoC;IAC3C,UAAU,CAAmC;IAC7C,UAAU,CAAsB;IAEjD,YAAY,UAA2D;QACrE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAsD;QAEtD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,6CAA6C,CAC9C,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAEjC,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.d.ts

@@ -0,0 +1,20 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+interface GetBucketPolicyAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to an S3 GetBucketPolicy request.
+ */
+export declare class GetBucketPolicyAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: GetBucketPolicyAuthorizerProperties);
+    /**
+     * Ensure the caller may read the Bucket policy.
+     */
+    authorize(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=get-bucket-policy-authorizer.d.ts.map

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-bucket-policy-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAEtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAgB1D;CACF"}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.js

@@ -0,0 +1,33 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+/**
+ * Applies IAM authorization to an S3 GetBucketPolicy request.
+ */
+export class GetBucketPolicyAuthorizer {
+    static action = "s3:GetBucketPolicy";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may read the Bucket policy.
+     */
+    authorize(bucket, caller) {
+        const resource = simS3BucketArn(bucket.bucketName);
+        const decision = this.iam.authorize({
+            action: GetBucketPolicyAuthorizer.action,
+            resource,
+            caller,
+            resourcePolicies: simS3BucketResourcePolicies(bucket),
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: GetBucketPolicyAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=get-bucket-policy-authorizer.js.map

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-bucket-policy-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,MAAM,CAAU,MAAM,GAAG,oBAAoB,CAAC;IAErC,GAAG,CAA0B;IAE9C,YAAY,UAA+C;QACzD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,yBAAyB,CAAC,MAAM;YACxC,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,yBAAyB,CAAC,MAAM;gBACxC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.command.d.ts

@@ -0,0 +1,24 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 GetBucketPolicy command.
+ */
+export interface SimGetBucketPolicyCommand {
+    readonly input: SimGetBucketPolicyCommandInput;
+}
+/**
+ * Minimal structural sim S3 GetBucketPolicy input.
+ */
+export interface SimGetBucketPolicyCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 GetBucketPolicy output.
+ *
+ * Real S3 answers with the policy document as a JSON string, so the simulator
+ * serializes its stored document rather than returning the parsed shape.
+ */
+export interface SimGetBucketPolicyCommandOutput {
+    readonly Policy: string;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=get-bucket-policy.command.d.ts.map

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-bucket-policy.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-bucket-policy/get-bucket-policy.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-bucket-policy.command.js.map

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-bucket-policy.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-bucket-policy/get-bucket-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.handler.d.ts

@@ -0,0 +1,29 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimGetBucketPolicyCommand, SimGetBucketPolicyCommandOutput } from "./get-bucket-policy.command.js";
+interface GetBucketPolicyCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface GetBucketPolicyCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 GetBucketPolicyCommand handler.
+ */
+export declare class GetBucketPolicyCommandHandler implements CommandHandler<SimGetBucketPolicyCommand, SimGetBucketPolicyCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: GetBucketPolicyCommandHandlerProperties);
+    /**
+     * Authorize and return a Bucket's resource policy.
+     */
+    handle(command: SimGetBucketPolicyCommand, options?: GetBucketPolicyCommandHandlerOptions): Promise<SimGetBucketPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=get-bucket-policy.handler.d.ts.map

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-bucket-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-bucket-policy/get-bucket-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAGnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,gCAAgC,CAAC;AAExC,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAU9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oCAAoC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CAqB1C;CACF"}

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy.handler.js

@@ -0,0 +1,40 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { jsonStringify } from "../../../../util/type-guard/json.js";
+import { SimIamAllowAllAuth } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3NoSuchBucketPolicy } from "../../error/sim-s3.error.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+import { GetBucketPolicyAuthorizer } from "./get-bucket-policy-authorizer.js";
+/**
+ * Simulated S3 GetBucketPolicyCommand handler.
+ */
+export class GetBucketPolicyCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new GetBucketPolicyAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and return a Bucket's resource policy.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "GetBucketPolicyCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorize(bucket, options?.caller);
+        const policy = bucket.getPolicy();
+        if (policy === undefined) {
+            throw new SimS3NoSuchBucketPolicy(`No Bucket policy on S3 Bucket ${bucketName}`);
+        }
+        return {
+            Policy: jsonStringify(policy),
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=get-bucket-policy.handler.js.map