@kensio/yulin 0.36.0 → 0.38.0

package/dist/service/kms/command/crypto/sim-kms-ciphertext-key.js

@@ -0,0 +1,58 @@
+import { SimKmsIncorrectKeyException, SimKmsInvalidCiphertextException, SimKmsInvalidKeyUsageException, } from "../../error/sim-kms.error.js";
+/**
+ * The only encryption algorithm a symmetric KMS key supports.
+ */
+export const simKmsSymmetricAlgorithm = "SYMMETRIC_DEFAULT";
+/**
+ * Resolves the key behind a ciphertext, and checks the caller's expectations.
+ *
+ * Decrypt is the one KMS operation whose target key comes from the ciphertext
+ * rather than the request, so working out which key that is, and what to say
+ * when it is not the one the caller expected, is its own small job.
+ */
+export class SimKmsCiphertextKey {
+    keys;
+    constructor(keys) {
+        this.keys = keys;
+    }
+    /**
+     * Find the key a ciphertext was produced under.
+     *
+     * A blob naming a key this scope does not have is an unreadable ciphertext
+     * rather than a missing key, because the caller never named the key and so
+     * cannot be told which one is missing.
+     */
+    behind(keyArn) {
+        const key = this.keys.find(keyArn);
+        if (key === undefined) {
+            throw new SimKmsInvalidCiphertextException();
+        }
+        return key;
+    }
+    /**
+     * Check a supplied KeyId against the key the ciphertext actually names.
+     *
+     * A KeyId naming no key at all is a missing key rather than the wrong one,
+     * so it is resolved the same way every other operation resolves its target.
+     */
+    requireExpected(keyId, key) {
+        if (keyId === undefined) {
+            return;
+        }
+        if (this.keys.require(keyId).keyId !== key.keyId) {
+            throw new SimKmsIncorrectKeyException(`The ciphertext was not encrypted under the key '${keyId}'`);
+        }
+    }
+    /**
+     * Refuse an encryption algorithm this simulation does not model.
+     *
+     * Only symmetric keys are simulated, so an asymmetric algorithm is refused
+     * rather than quietly treated as the symmetric one.
+     */
+    requireSymmetricAlgorithm(algorithm) {
+        if (algorithm !== undefined && algorithm !== simKmsSymmetricAlgorithm) {
+            throw new SimKmsInvalidKeyUsageException(`Encryption algorithm '${algorithm}' is not supported: simulated KMS keys are symmetric, which supports only ${simKmsSymmetricAlgorithm}`);
+        }
+    }
+}
+//# sourceMappingURL=sim-kms-ciphertext-key.js.map

package/dist/service/kms/command/crypto/sim-kms-ciphertext-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-ciphertext-key.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-ciphertext-key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AAItC;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,IAAI,CAAiB;IAEtC,YAAY,IAAoB;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,MAAc;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,gCAAgC,EAAE,CAAC;QAC/C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,KAAyB,EAAE,GAAc;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YACjD,MAAM,IAAI,2BAA2B,CACnC,mDAAmD,KAAK,GAAG,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,yBAAyB,CAAC,SAA6B;QACrD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,wBAAwB,EAAE,CAAC;YACtE,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,SAAS,6EAA6E,wBAAwB,EAAE,CAC1I,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/kms/command/crypto/sim-kms-crypto-commands.d.ts

@@ -0,0 +1,38 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimKmsKeyStore } from "../../key/sim-kms-key-store.js";
+import type { SimKmsAuthorizer } from "../authorize/sim-kms-authorizer.js";
+import type { SimDecryptCommand, SimDecryptCommandOutput, SimEncryptCommand, SimEncryptCommandOutput } from "./crypto.command.js";
+interface SimKmsCryptoCommandsProperties {
+    readonly keys: SimKmsKeyStore;
+    readonly authorizer: SimKmsAuthorizer;
+}
+interface SimKmsCryptoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The Encrypt and Decrypt commands of one simulated KMS scope.
+ *
+ * They share the key store, the authorizer and the ciphertext blob format, so
+ * they are grouped rather than wired separately on the facade.
+ */
+export declare class SimKmsCryptoCommands {
+    private readonly keys;
+    private readonly authorizer;
+    private readonly blob;
+    private readonly ciphertextKey;
+    constructor(properties: SimKmsCryptoCommandsProperties);
+    /**
+     * Encrypt plaintext under a key.
+     */
+    encrypt(command: SimEncryptCommand, options?: SimKmsCryptoCommandOptions): SimEncryptCommandOutput;
+    /**
+     * Decrypt a ciphertext produced by this simulation.
+     *
+     * The key comes from the ciphertext rather than the request, which is why
+     * KeyId is optional for a symmetric key. Authorization therefore happens
+     * against the key the blob names, once it is known.
+     */
+    decrypt(command: SimDecryptCommand, options?: SimKmsCryptoCommandOptions): SimDecryptCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-kms-crypto-commands.d.ts.map

package/dist/service/kms/command/crypto/sim-kms-crypto-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-crypto-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-crypto-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAKrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAW7B,UAAU,8BAA8B;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED,UAAU,0BAA0B;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;GAKG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA8B;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IAEpD,YAAY,UAAU,EAAE,8BAA8B,EAIrD;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,0BAA0B,GACnC,uBAAuB,CA0BzB;IAED;;;;;;OAMG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,0BAA0B,GACnC,uBAAuB,CAuBzB;CACF"}

package/dist/service/kms/command/crypto/sim-kms-crypto-commands.js

@@ -0,0 +1,74 @@
+import { SimKmsValidationException } from "../../error/sim-kms.error.js";
+import { SimKmsCiphertextBlob } from "../../key/sim-kms-ciphertext-blob.js";
+import { SimKmsCiphertextKey, simKmsSymmetricAlgorithm, } from "./sim-kms-ciphertext-key.js";
+/**
+ * The largest plaintext Encrypt accepts for a symmetric key.
+ *
+ * This limit is the whole reason envelope encryption exists, so enforcing it
+ * is what makes a test that outgrows Encrypt fail here rather than in
+ * production.
+ */
+const maxPlaintextBytes = 4096;
+/**
+ * The Encrypt and Decrypt commands of one simulated KMS scope.
+ *
+ * They share the key store, the authorizer and the ciphertext blob format, so
+ * they are grouped rather than wired separately on the facade.
+ */
+export class SimKmsCryptoCommands {
+    keys;
+    authorizer;
+    blob = new SimKmsCiphertextBlob();
+    ciphertextKey;
+    constructor(properties) {
+        this.keys = properties.keys;
+        this.authorizer = properties.authorizer;
+        this.ciphertextKey = new SimKmsCiphertextKey(properties.keys);
+    }
+    /**
+     * Encrypt plaintext under a key.
+     */
+    encrypt(command, options) {
+        const plaintext = command.input.Plaintext;
+        this.ciphertextKey.requireSymmetricAlgorithm(command.input.EncryptionAlgorithm);
+        if (plaintext === undefined || plaintext.length === 0) {
+            throw new SimKmsValidationException("Plaintext is required");
+        }
+        if (plaintext.length > maxPlaintextBytes) {
+            throw new SimKmsValidationException(`Plaintext of ${String(plaintext.length)} bytes exceeds the ${String(maxPlaintextBytes)} byte limit for a symmetric key; encrypt a data key from GenerateDataKey instead`);
+        }
+        const key = this.keys.require(command.input.KeyId);
+        this.authorizer.authorizeKey("kms:Encrypt", key, options?.caller);
+        return {
+            $metadata: {},
+            CiphertextBlob: key.encrypt(plaintext, command.input.EncryptionContext),
+            KeyId: key.arn,
+            EncryptionAlgorithm: simKmsSymmetricAlgorithm,
+        };
+    }
+    /**
+     * Decrypt a ciphertext produced by this simulation.
+     *
+     * The key comes from the ciphertext rather than the request, which is why
+     * KeyId is optional for a symmetric key. Authorization therefore happens
+     * against the key the blob names, once it is known.
+     */
+    decrypt(command, options) {
+        const ciphertextBlob = command.input.CiphertextBlob;
+        this.ciphertextKey.requireSymmetricAlgorithm(command.input.EncryptionAlgorithm);
+        if (ciphertextBlob === undefined) {
+            throw new SimKmsValidationException("CiphertextBlob is required");
+        }
+        const parts = this.blob.decode(ciphertextBlob);
+        const key = this.ciphertextKey.behind(parts.keyArn);
+        this.authorizer.authorizeKey("kms:Decrypt", key, options?.caller);
+        this.ciphertextKey.requireExpected(command.input.KeyId, key);
+        return {
+            $metadata: {},
+            Plaintext: key.decrypt(parts, command.input.EncryptionContext),
+            KeyId: key.arn,
+            EncryptionAlgorithm: simKmsSymmetricAlgorithm,
+        };
+    }
+}
+//# sourceMappingURL=sim-kms-crypto-commands.js.map

package/dist/service/kms/command/crypto/sim-kms-crypto-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-crypto-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-crypto-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AASrC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAW/B;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAClC,aAAa,CAAsB;IAEpD,YAAY,UAA0C;QACpD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAA0B,EAC1B,OAAoC;QAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAE1C,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAC1C,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAClC,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CACjC,gBAAgB,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,MAAM,CAAC,iBAAiB,CAAC,kFAAkF,CAC1K,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAElE,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACvE,KAAK,EAAE,GAAG,CAAC,GAAG;YACd,mBAAmB,EAAE,wBAAwB;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CACL,OAA0B,EAC1B,OAAoC;QAEpC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QAEpD,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAC1C,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAClC,CAAC;QAEF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE7D,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC9D,KAAK,EAAE,GAAG,CAAC,GAAG;YACd,mBAAmB,EAAE,wBAAwB;SAC9C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/crypto/sim-kms-data-key-spec.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Works out how many bytes of data key GenerateDataKey should produce.
+ *
+ * Real KMS insists on exactly one of KeySpec and NumberOfBytes, and refuses
+ * the request otherwise rather than picking a default. Following that keeps a
+ * request that AWS would reject from quietly succeeding here.
+ */
+export declare class SimKmsDataKeySpec {
+    /**
+     * The data key length a request asks for.
+     */
+    lengthFor(keySpec: string | undefined, numberOfBytes: number | undefined): number;
+    private specLength;
+    private byteCount;
+}
+//# sourceMappingURL=sim-kms-data-key-spec.d.ts.map

package/dist/service/kms/command/crypto/sim-kms-data-key-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-data-key-spec.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-data-key-spec.ts"],"names":[],"mappings":"AAaA;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,CAkBR;IAED,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,SAAS;CAalB"}

package/dist/service/kms/command/crypto/sim-kms-data-key-spec.js

@@ -0,0 +1,50 @@
+import { SimKmsValidationException } from "../../error/sim-kms.error.js";
+/**
+ * The data key lengths the named KeySpec values stand for.
+ */
+const specLengths = new Map([
+    ["AES_256", 32],
+    ["AES_128", 16],
+]);
+const minBytes = 1;
+const maxBytes = 1024;
+/**
+ * Works out how many bytes of data key GenerateDataKey should produce.
+ *
+ * Real KMS insists on exactly one of KeySpec and NumberOfBytes, and refuses
+ * the request otherwise rather than picking a default. Following that keeps a
+ * request that AWS would reject from quietly succeeding here.
+ */
+export class SimKmsDataKeySpec {
+    /**
+     * The data key length a request asks for.
+     */
+    lengthFor(keySpec, numberOfBytes) {
+        if (keySpec !== undefined && numberOfBytes !== undefined) {
+            throw new SimKmsValidationException("Specify either KeySpec or NumberOfBytes, but not both");
+        }
+        if (keySpec !== undefined) {
+            return this.specLength(keySpec);
+        }
+        if (numberOfBytes !== undefined) {
+            return this.byteCount(numberOfBytes);
+        }
+        throw new SimKmsValidationException("Specify either KeySpec or NumberOfBytes");
+    }
+    specLength(keySpec) {
+        const length = specLengths.get(keySpec);
+        if (length === undefined) {
+            throw new SimKmsValidationException(`Unsupported KeySpec '${keySpec}': simulated KMS supports ${specLengths.keys().toArray().join(" and ")}`);
+        }
+        return length;
+    }
+    byteCount(numberOfBytes) {
+        if (!Number.isSafeInteger(numberOfBytes) ||
+            numberOfBytes < minBytes ||
+            numberOfBytes > maxBytes) {
+            throw new SimKmsValidationException(`NumberOfBytes must be a whole number between ${String(minBytes)} and ${String(maxBytes)}`);
+        }
+        return numberOfBytes;
+    }
+}
+//# sourceMappingURL=sim-kms-data-key-spec.js.map

package/dist/service/kms/command/crypto/sim-kms-data-key-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-data-key-spec.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-data-key-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAiB;IAC1C,CAAC,SAAS,EAAE,EAAE,CAAC;IACf,CAAC,SAAS,EAAE,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;OAEG;IACH,SAAS,CACP,OAA2B,EAC3B,aAAiC;QAEjC,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,yBAAyB,CACjC,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,OAAe;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,yBAAyB,CACjC,wBAAwB,OAAO,6BAA6B,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,aAAqB;QACrC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;YACpC,aAAa,GAAG,QAAQ;YACxB,aAAa,GAAG,QAAQ,EACxB,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,gDAAgD,MAAM,CAAC,QAAQ,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/dist/service/kms/command/crypto/sim-kms-generate-data-key.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimKmsKeyStore } from "../../key/sim-kms-key-store.js";
+import type { SimKmsAuthorizer } from "../authorize/sim-kms-authorizer.js";
+import type { SimGenerateDataKeyCommand, SimGenerateDataKeyCommandOutput } from "./crypto.command.js";
+interface SimKmsGenerateDataKeyProperties {
+    readonly keys: SimKmsKeyStore;
+    readonly authorizer: SimKmsAuthorizer;
+}
+interface SimKmsGenerateDataKeyOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The GenerateDataKey command of one simulated KMS scope.
+ *
+ * This is the envelope encryption primitive, and the answer to Encrypt's
+ * 4096 byte limit: the plaintext copy of the data key encrypts the data and is
+ * then discarded, while the encrypted copy is stored alongside it so the data
+ * key can be recovered through Decrypt later.
+ */
+export declare class SimKmsGenerateDataKey {
+    private readonly keys;
+    private readonly authorizer;
+    private readonly dataKeySpec;
+    constructor(properties: SimKmsGenerateDataKeyProperties);
+    /**
+     * Generate a data key, returned both in the clear and encrypted.
+     */
+    handle(command: SimGenerateDataKeyCommand, options?: SimKmsGenerateDataKeyOptions): SimGenerateDataKeyCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-kms-generate-data-key.d.ts.map

package/dist/service/kms/command/crypto/sim-kms-generate-data-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-generate-data-key.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-generate-data-key.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,qBAAqB,CAAC;AAG7B,UAAU,+BAA+B;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IAEvD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,4BAA4B,GACrC,+BAA+B,CAiBjC;CACF"}

package/dist/service/kms/command/crypto/sim-kms-generate-data-key.js

@@ -0,0 +1,35 @@
+import { randomBytes } from "node:crypto";
+import { SimKmsDataKeySpec } from "./sim-kms-data-key-spec.js";
+/**
+ * The GenerateDataKey command of one simulated KMS scope.
+ *
+ * This is the envelope encryption primitive, and the answer to Encrypt's
+ * 4096 byte limit: the plaintext copy of the data key encrypts the data and is
+ * then discarded, while the encrypted copy is stored alongside it so the data
+ * key can be recovered through Decrypt later.
+ */
+export class SimKmsGenerateDataKey {
+    keys;
+    authorizer;
+    dataKeySpec = new SimKmsDataKeySpec();
+    constructor(properties) {
+        this.keys = properties.keys;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * Generate a data key, returned both in the clear and encrypted.
+     */
+    handle(command, options) {
+        const length = this.dataKeySpec.lengthFor(command.input.KeySpec, command.input.NumberOfBytes);
+        const key = this.keys.require(command.input.KeyId);
+        this.authorizer.authorizeKey("kms:GenerateDataKey", key, options?.caller);
+        const dataKey = Uint8Array.from(randomBytes(length));
+        return {
+            $metadata: {},
+            Plaintext: dataKey,
+            CiphertextBlob: key.encrypt(dataKey, command.input.EncryptionContext),
+            KeyId: key.arn,
+        };
+    }
+}
+//# sourceMappingURL=sim-kms-generate-data-key.js.map

package/dist/service/kms/command/crypto/sim-kms-generate-data-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-generate-data-key.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/crypto/sim-kms-generate-data-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAW/D;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACf,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,WAAW,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAEvD,YAAY,UAA2C;QACrD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAkC,EAClC,OAAsC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CACvC,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,qBAAqB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAErD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACrE,KAAK,EAAE,GAAG,CAAC,GAAG;SACf,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/key/key.command.d.ts

@@ -0,0 +1,159 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimIamPolicyDocument } from "../../../iam/policy/sim-iam-policy.js";
+import type { SimKmsKeyMetadata } from "../../key/sim-kms-key-metadata.js";
+import type { SimKmsKeyState } from "../../key/sim-kms-key.js";
+/**
+ * Minimal structural sim KMS CreateKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/CreateKeyCommand/
+ */
+export interface SimCreateKeyCommand {
+    readonly input: SimCreateKeyCommandInput;
+}
+export interface SimCreateKeyCommandInput {
+    readonly Description?: string | undefined;
+    /**
+     * The key policy, as a JSON document string, exactly as the real API takes
+     * it. Omitting it gets the default policy KMS applies, which delegates to
+     * the Account's IAM.
+     */
+    readonly Policy?: string | undefined;
+    readonly KeyUsage?: string | undefined;
+    readonly KeySpec?: string | undefined;
+    readonly Origin?: string | undefined;
+}
+export interface SimCreateKeyCommandOutput {
+    readonly KeyMetadata?: SimKmsKeyMetadata | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS DescribeKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/DescribeKeyCommand/
+ */
+export interface SimDescribeKeyCommand {
+    readonly input: SimDescribeKeyCommandInput;
+}
+export interface SimDescribeKeyCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimDescribeKeyCommandOutput {
+    readonly KeyMetadata?: SimKmsKeyMetadata | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS ListKeys command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/ListKeysCommand/
+ */
+export interface SimListKeysCommand {
+    readonly input?: SimListKeysCommandInput | undefined;
+}
+export interface SimListKeysCommandInput {
+    readonly Limit?: number | undefined;
+}
+export interface SimListKeysCommandEntry {
+    readonly KeyId: string;
+    readonly KeyArn: string;
+}
+export interface SimListKeysCommandOutput {
+    readonly Keys?: readonly SimListKeysCommandEntry[] | undefined;
+    readonly Truncated?: boolean | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS GetKeyPolicy command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/GetKeyPolicyCommand/
+ */
+export interface SimGetKeyPolicyCommand {
+    readonly input: SimGetKeyPolicyCommandInput;
+}
+export interface SimGetKeyPolicyCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly PolicyName?: string | undefined;
+}
+export interface SimGetKeyPolicyCommandOutput {
+    readonly Policy?: string | undefined;
+    readonly PolicyName?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS PutKeyPolicy command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/PutKeyPolicyCommand/
+ */
+export interface SimPutKeyPolicyCommand {
+    readonly input: SimPutKeyPolicyCommandInput;
+}
+export interface SimPutKeyPolicyCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly Policy?: string | SimIamPolicyDocument | undefined;
+    readonly PolicyName?: string | undefined;
+}
+export interface SimPutKeyPolicyCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS EnableKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/EnableKeyCommand/
+ */
+export interface SimEnableKeyCommand {
+    readonly input: SimEnableKeyCommandInput;
+}
+export interface SimEnableKeyCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimEnableKeyCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS DisableKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/DisableKeyCommand/
+ */
+export interface SimDisableKeyCommand {
+    readonly input: SimDisableKeyCommandInput;
+}
+export interface SimDisableKeyCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimDisableKeyCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS ScheduleKeyDeletion command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/ScheduleKeyDeletionCommand/
+ */
+export interface SimScheduleKeyDeletionCommand {
+    readonly input: SimScheduleKeyDeletionCommandInput;
+}
+export interface SimScheduleKeyDeletionCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly PendingWindowInDays?: number | undefined;
+}
+export interface SimScheduleKeyDeletionCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly DeletionDate?: Date | undefined;
+    readonly KeyState?: SimKmsKeyState | undefined;
+    readonly PendingWindowInDays?: number | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS CancelKeyDeletion command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/CancelKeyDeletionCommand/
+ */
+export interface SimCancelKeyDeletionCommand {
+    readonly input: SimCancelKeyDeletionCommandInput;
+}
+export interface SimCancelKeyDeletionCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimCancelKeyDeletionCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=key.command.d.ts.map

package/dist/service/kms/command/key/key.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/key.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAErC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/kms/command/key/key.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=key.command.js.map

package/dist/service/kms/command/key/key.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.command.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/key.command.ts"],"names":[],"mappings":""}

package/dist/service/kms/command/key/sim-kms-key-commands.d.ts

@@ -0,0 +1,41 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimKmsKeyFactory } from "../../key/sim-kms-key-factory.js";
+import type { SimKmsKeyMetadataView } from "../../key/sim-kms-key-metadata.js";
+import type { SimKmsKeyStore } from "../../key/sim-kms-key-store.js";
+import type { SimKmsAuthorizer } from "../authorize/sim-kms-authorizer.js";
+import type { SimCreateKeyCommand, SimCreateKeyCommandOutput, SimDescribeKeyCommand, SimDescribeKeyCommandOutput } from "./key.command.js";
+interface SimKmsKeyCommandsProperties {
+    readonly keys: SimKmsKeyStore;
+    readonly keyFactory: SimKmsKeyFactory;
+    readonly authorizer: SimKmsAuthorizer;
+    readonly metadata: SimKmsKeyMetadataView;
+}
+interface SimKmsKeyCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The key creation and description commands of one simulated KMS scope.
+ */
+export declare class SimKmsKeyCommands {
+    private readonly keys;
+    private readonly keyFactory;
+    private readonly authorizer;
+    private readonly metadata;
+    private readonly keyType;
+    private readonly policyDocument;
+    constructor(properties: SimKmsKeyCommandsProperties);
+    /**
+     * Create a key with fresh key material.
+     *
+     * There is no key to hold a policy yet, so this authorizes against the
+     * Region's keys rather than a key policy. Real KMS gives kms:CreateKey no
+     * resource-level permissions for the same reason.
+     */
+    create(command: SimCreateKeyCommand, options?: SimKmsKeyCommandOptions): SimCreateKeyCommandOutput;
+    /**
+     * Describe a key.
+     */
+    describe(command: SimDescribeKeyCommand, options?: SimKmsKeyCommandOptions): SimDescribeKeyCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-kms-key-commands.d.ts.map

package/dist/service/kms/command/key/sim-kms-key-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2BAA2B,EAKlD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,uBAAuB,GAChC,yBAAyB,CAgB3B;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB,GAChC,2BAA2B,CAK7B;CACF"}

package/dist/service/kms/command/key/sim-kms-key-commands.js

@@ -0,0 +1,45 @@
+import { SimKmsPolicyDocument } from "../../key/sim-kms-policy-document.js";
+import { SimKmsKeyType } from "./sim-kms-key-type.js";
+/**
+ * The key creation and description commands of one simulated KMS scope.
+ */
+export class SimKmsKeyCommands {
+    keys;
+    keyFactory;
+    authorizer;
+    metadata;
+    keyType = new SimKmsKeyType();
+    policyDocument = new SimKmsPolicyDocument();
+    constructor(properties) {
+        this.keys = properties.keys;
+        this.keyFactory = properties.keyFactory;
+        this.authorizer = properties.authorizer;
+        this.metadata = properties.metadata;
+    }
+    /**
+     * Create a key with fresh key material.
+     *
+     * There is no key to hold a policy yet, so this authorizes against the
+     * Region's keys rather than a key policy. Real KMS gives kms:CreateKey no
+     * resource-level permissions for the same reason.
+     */
+    create(command, options) {
+        this.keyType.require(command.input.KeyUsage, command.input.KeySpec, command.input.Origin);
+        this.authorizer.authorizeAccount("kms:CreateKey", options?.caller);
+        const key = this.keyFactory.make({
+            description: command.input.Description,
+            policy: this.policyDocument.parseOptional(command.input.Policy),
+        });
+        this.keys.add(key);
+        return { $metadata: {}, KeyMetadata: this.metadata.describe(key) };
+    }
+    /**
+     * Describe a key.
+     */
+    describe(command, options) {
+        const key = this.keys.require(command.input.KeyId);
+        this.authorizer.authorizeKey("kms:DescribeKey", key, options?.caller);
+        return { $metadata: {}, KeyMetadata: this.metadata.describe(key) };
+    }
+}
+//# sourceMappingURL=sim-kms-key-commands.js.map

package/dist/service/kms/command/key/sim-kms-key-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAsBtD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,QAAQ,CAAwB;IAChC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAAiC;QAEjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAClB,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA8B,EAC9B,OAAiC;QAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;CACF"}