@kensio/yulin 0.37.0 → 0.38.0

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.js

@@ -0,0 +1,92 @@
+import { validateS3BucketName } from "../../bucket/validate/validate-s3-bucket-name.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Creates simulated S3 Buckets from AWS::S3::Bucket CloudFormation Resources.
+ */
+export class SimCfnS3BucketCreator {
+    simS3;
+    constructor(properties) {
+        this.simS3 = properties.simS3;
+    }
+    /**
+     * Create a simulated Bucket, with its website configuration when declared.
+     */
+    async create(resource, properties) {
+        const bucketName = this.bucketNameForResource(resource, properties);
+        validateS3BucketName(bucketName);
+        await this.simS3.createBucket({
+            input: {
+                Bucket: bucketName,
+            },
+        });
+        const bucket = this.simS3.getSimBucketByName(bucketName);
+        assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation creation`);
+        const websiteConfig = this.websiteConfigurationForResource(properties);
+        if (websiteConfig !== undefined) {
+            await this.simS3.putBucketWebsite({
+                input: {
+                    Bucket: bucketName,
+                    WebsiteConfiguration: websiteConfig,
+                },
+            });
+        }
+        const publicAccessConfig = this.publicAccessConfigurationForResource(properties);
+        if (publicAccessConfig !== undefined) {
+            await this.simS3.putPublicAccessBlock({
+                input: {
+                    Bucket: bucketName,
+                    PublicAccessBlockConfiguration: publicAccessConfig,
+                },
+            });
+        }
+        return bucket;
+    }
+    /**
+     * Read PublicAccessBlockConfiguration, which a template uses to open a
+     * Bucket up from the all-blocked state a new Bucket starts in.
+     */
+    publicAccessConfigurationForResource(properties) {
+        const publicAccessConfig = properties["PublicAccessBlockConfiguration"];
+        if (publicAccessConfig === undefined ||
+            publicAccessConfig === null ||
+            typeof publicAccessConfig !== "object" ||
+            Array.isArray(publicAccessConfig)) {
+            return undefined;
+        }
+        return publicAccessConfig;
+    }
+    bucketNameForResource(resource, properties) {
+        const bucketName = properties["BucketName"];
+        if (typeof bucketName === "string") {
+            return bucketName;
+        }
+        return resource.logicalId.toLowerCase();
+    }
+    websiteConfigurationForResource(properties) {
+        const websiteConfig = properties["WebsiteConfiguration"];
+        if (websiteConfig === undefined ||
+            websiteConfig === null ||
+            typeof websiteConfig !== "object" ||
+            Array.isArray(websiteConfig)) {
+            return undefined;
+        }
+        if ("RoutingRules" in websiteConfig &&
+            !Array.isArray(websiteConfig["RoutingRules"])) {
+            return undefined;
+        }
+        return {
+            ...websiteConfig,
+            IndexDocument: typeof websiteConfig["IndexDocument"] === "string"
+                ? {
+                    Suffix: websiteConfig["IndexDocument"],
+                }
+                : websiteConfig["IndexDocument"],
+            ErrorDocument: typeof websiteConfig["ErrorDocument"] === "string"
+                ? {
+                    Key: websiteConfig["ErrorDocument"],
+                }
+                : websiteConfig["ErrorDocument"],
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-s3-bucket-creator.js.map

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-s3-bucket-creator.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAQ;IAE9B,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5B,KAAK,EAAE;gBACL,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,gCAAgC,CAC5D,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAC;QAEvE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAChC,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU;oBAClB,oBAAoB,EAAE,aAAa;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,kBAAkB,GACtB,IAAI,CAAC,oCAAoC,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;gBACpC,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU;oBAClB,8BAA8B,EAAE,kBAAkB;iBACnD;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,oCAAoC,CAC1C,UAAqC;QAErC,MAAM,kBAAkB,GAAG,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAExE,IACE,kBAAkB,KAAK,SAAS;YAChC,kBAAkB,KAAK,IAAI;YAC3B,OAAO,kBAAkB,KAAK,QAAQ;YACtC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EACjC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,qBAAqB,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAEO,+BAA+B,CACrC,UAAqC;QAErC,MAAM,aAAa,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAEzD,IACE,aAAa,KAAK,SAAS;YAC3B,aAAa,KAAK,IAAI;YACtB,OAAO,aAAa,KAAK,QAAQ;YACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,cAAc,IAAI,aAAa;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAC7C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC;iBACvC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;YACpC,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,GAAG,EAAE,aAAa,CAAC,eAAe,CAAC;iBACpC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;SACf,CAAC;IAC1B,CAAC;CACF"}

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.d.ts

@@ -0,0 +1,32 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3 } from "../../sim-s3.js";
+interface SimCfnS3BucketPolicyCreatorProperties {
+    readonly simS3: SimS3;
+}
+/**
+ * Creates simulated S3 Bucket policies from AWS::S3::BucketPolicy Resources.
+ *
+ * This is what CDK emits for every `grantRead`, `grantPut` and
+ * `addToResourcePolicy`, so a synthesized template reaches it whether or not
+ * the app mentions a Bucket policy itself. Creation goes through the normal
+ * PutBucketPolicy command path, so a policy declared in a template is validated
+ * and enforced exactly as one applied through the SDK.
+ */
+export declare class SimCfnS3BucketPolicyCreator {
+    private readonly simS3;
+    constructor(properties: SimCfnS3BucketPolicyCreatorProperties);
+    /**
+     * Attach a policy to the Bucket named by the Resource.
+     *
+     * The simulated Bucket is returned as the Resource's simulated object,
+     * because a Bucket policy has no existence of its own in S3: it is state on
+     * the Bucket it is attached to.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimS3Bucket>;
+    private bucketNameForResource;
+    private policyDocumentForResource;
+}
+export {};
+//# sourceMappingURL=sim-cfn-s3-bucket-policy-creator.d.ts.map

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-s3-bucket-policy-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAG7C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAE9B,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;OAMG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,WAAW,CAAC,CAkBtB;IAED,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,yBAAyB;CAmBlC"}

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.js

@@ -0,0 +1,55 @@
+import { jsonStringify } from "../../../../util/type-guard/json.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Creates simulated S3 Bucket policies from AWS::S3::BucketPolicy Resources.
+ *
+ * This is what CDK emits for every `grantRead`, `grantPut` and
+ * `addToResourcePolicy`, so a synthesized template reaches it whether or not
+ * the app mentions a Bucket policy itself. Creation goes through the normal
+ * PutBucketPolicy command path, so a policy declared in a template is validated
+ * and enforced exactly as one applied through the SDK.
+ */
+export class SimCfnS3BucketPolicyCreator {
+    simS3;
+    constructor(properties) {
+        this.simS3 = properties.simS3;
+    }
+    /**
+     * Attach a policy to the Bucket named by the Resource.
+     *
+     * The simulated Bucket is returned as the Resource's simulated object,
+     * because a Bucket policy has no existence of its own in S3: it is state on
+     * the Bucket it is attached to.
+     */
+    async create(resource, properties) {
+        const bucketName = this.bucketNameForResource(resource, properties);
+        const policyDocument = this.policyDocumentForResource(resource, properties);
+        await this.simS3.putBucketPolicy({
+            input: {
+                Bucket: bucketName,
+                Policy: jsonStringify(policyDocument),
+            },
+        });
+        const bucket = this.simS3.getSimBucketByName(bucketName);
+        assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation Bucket policy creation`);
+        return bucket;
+    }
+    bucketNameForResource(resource, properties) {
+        const bucketName = properties["Bucket"];
+        if (typeof bucketName !== "string") {
+            throw new TypeError(`AWS::S3::BucketPolicy ${resource.logicalId} requires a Bucket name string, got ${typeof bucketName}`);
+        }
+        return bucketName;
+    }
+    policyDocumentForResource(resource, properties) {
+        const policyDocument = properties["PolicyDocument"];
+        if (policyDocument === undefined ||
+            policyDocument === null ||
+            typeof policyDocument !== "object" ||
+            Array.isArray(policyDocument)) {
+            throw new TypeError(`AWS::S3::BucketPolicy ${resource.logicalId} requires a PolicyDocument object`);
+        }
+        return policyDocument;
+    }
+}
+//# sourceMappingURL=sim-cfn-s3-bucket-policy-creator.js.map

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-s3-bucket-policy-creator.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAKpE,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACrB,KAAK,CAAQ;IAE9B,YAAY,UAAiD;QAC3D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,cAAc,GAAG,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YAC/B,KAAK,EAAE;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC;aACtC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,8CAA8C,CAC1E,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,yBAAyB,QAAQ,CAAC,SAAS,uCAAuC,OAAO,UAAU,EAAE,CACtG,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,yBAAyB,CAC/B,QAAwB,EACxB,UAAqC;QAErC,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,cAAc,KAAK,IAAI;YACvB,OAAO,cAAc,KAAK,QAAQ;YAClC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,yBAAyB,QAAQ,CAAC,SAAS,mCAAmC,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;CACF"}

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.d.ts

@@ -5,14 +5,12 @@ import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource
  * CloudFormation Resource factory for simulated S3 resources.
  */
 export declare class SimS3CloudFormationResourceFactory implements SimCfnServiceResourceFactory {
-    private readonly simS3;
+    private readonly bucketCreator;
+    private readonly bucketPolicyCreator;
     constructor(simS3: SimS3);
     /**
      * Create a simulated S3 resource from a CloudFormation Resource.
      */
     create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
-    private createBucket;
-    private bucketNameForResource;
-    private websiteConfigurationForResource;
 }
 //# sourceMappingURL=sim-cfn-s3-resource-factory.d.ts.map

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAM3H;;GAEG;AACH,qBAAa,kCAAmC,YAAW,4BAA4B;IACzE,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,KAAK,EAAI;IAE7C;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B;YAEa,YAAY;IAoC1B,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,+BAA+B;CAuCxC"}
+{"version":3,"file":"sim-cfn-s3-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAI3H;;GAEG;AACH,qBAAa,kCAAmC,YAAW,4BAA4B;IACrF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA8B;IAElE,YAAY,KAAK,EAAE,KAAK,EAGvB;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoB7B;CACF"}

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.js

@@ -1,12 +1,14 @@
-import { validateS3BucketName } from "../bucket/validate/validate-s3-bucket-name.js";
-import { assertDefined } from "../../../util/type-guard/defined.js";
+import { SimCfnS3BucketCreator } from "./bucket/sim-cfn-s3-bucket-creator.js";
+import { SimCfnS3BucketPolicyCreator } from "./bucket-policy/sim-cfn-s3-bucket-policy-creator.js";
 /**
  * CloudFormation Resource factory for simulated S3 resources.
  */
 export class SimS3CloudFormationResourceFactory {
-    simS3;
+    bucketCreator;
+    bucketPolicyCreator;
     constructor(simS3) {
-        this.simS3 = simS3;
+        this.bucketCreator = new SimCfnS3BucketCreator({ simS3 });
+        this.bucketPolicyCreator = new SimCfnS3BucketPolicyCreator({ simS3 });
     }
     /**
      * Create a simulated S3 resource from a CloudFormation Resource.
@@ -14,68 +16,15 @@ export class SimS3CloudFormationResourceFactory {
     async create(resourceTypeName, resource, context) {
         switch (resourceTypeName) {
             case "Bucket": {
-                return await this.createBucket(resource, context);
+                return await this.bucketCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            case "BucketPolicy": {
+                return await this.bucketPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
             }
             default: {
                 throw new Error(`Unsupported sim S3 CloudFormation Resource ${resourceTypeName}`);
             }
         }
     }
-    async createBucket(resource, context) {
-        const bucketName = this.bucketNameForResource(resource, context);
-        validateS3BucketName(bucketName);
-        await this.simS3.createBucket({
-            input: {
-                Bucket: bucketName,
-            },
-        });
-        const bucket = this.simS3.getSimBucketByName(bucketName);
-        assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation creation`);
-        const websiteConfig = this.websiteConfigurationForResource(resource, context);
-        if (websiteConfig !== undefined) {
-            await this.simS3.putBucketWebsite({
-                input: {
-                    Bucket: bucketName,
-                    WebsiteConfiguration: websiteConfig,
-                },
-            });
-        }
-        return bucket;
-    }
-    bucketNameForResource(resource, context) {
-        const properties = context.resolvedProperties ?? resource.properties;
-        const bucketName = properties["BucketName"];
-        if (typeof bucketName === "string") {
-            return bucketName;
-        }
-        return resource.logicalId.toLowerCase();
-    }
-    websiteConfigurationForResource(resource, context) {
-        const properties = context.resolvedProperties ?? resource.properties;
-        const websiteConfig = properties["WebsiteConfiguration"];
-        if (websiteConfig === undefined ||
-            websiteConfig === null ||
-            typeof websiteConfig !== "object" ||
-            Array.isArray(websiteConfig)) {
-            return undefined;
-        }
-        if ("RoutingRules" in websiteConfig &&
-            !Array.isArray(websiteConfig["RoutingRules"])) {
-            return undefined;
-        }
-        return {
-            ...websiteConfig,
-            IndexDocument: typeof websiteConfig["IndexDocument"] === "string"
-                ? {
-                    Suffix: websiteConfig["IndexDocument"],
-                }
-                : websiteConfig["IndexDocument"],
-            ErrorDocument: typeof websiteConfig["ErrorDocument"] === "string"
-                ? {
-                    Key: websiteConfig["ErrorDocument"],
-                }
-                : websiteConfig["ErrorDocument"],
-        };
-    }
 }
 //# sourceMappingURL=sim-cfn-s3-resource-factory.js.map

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAChB,KAAK;IAAlC,YAA6B,KAAY;qBAAZ,KAAK;IAAU,CAAC;IAE7C;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,8CAA8C,gBAAgB,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5B,KAAK,EAAE;gBACL,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,gCAAgC,CAC5D,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,+BAA+B,CACxD,QAAQ,EACR,OAAO,CACR,CAAC;QAEF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAChC,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU;oBAClB,oBAAoB,EAAE,aAAa;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAC3B,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAEO,+BAA+B,CACrC,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,aAAa,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAEzD,IACE,aAAa,KAAK,SAAS;YAC3B,aAAa,KAAK,IAAI;YACtB,OAAO,aAAa,KAAK,QAAQ;YACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,cAAc,IAAI,aAAa;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAC7C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC;iBACvC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;YACpC,aAAa,EACX,OAAO,aAAa,CAAC,eAAe,CAAC,KAAK,QAAQ;gBAChD,CAAC,CAAC;oBACE,GAAG,EAAE,aAAa,CAAC,eAAe,CAAC;iBACpC;gBACH,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC;SACf,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-s3-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/s3/cfn/sim-cfn-s3-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAElG;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAC5B,aAAa,CAAwB;IACrC,mBAAmB,CAA8B;IAElE,YAAY,KAAY;QACtB,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,IAAI,2BAA2B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CACpC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAC1C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,8CAA8C,gBAAgB,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.d.ts

@@ -0,0 +1,11 @@
+import type { SimIamResourcePolicyInput } from "../../../iam/authorize/context/sim-iam-auth-z-context-builder.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+/**
+ * The resource policies sim IAM should evaluate for a request against a Bucket.
+ *
+ * A Bucket policy can grant Bucket-level administration actions in real S3, so
+ * the policy administration commands consult it the same way the Object
+ * commands do. A Bucket without a policy contributes nothing.
+ */
+export declare function simS3BucketResourcePolicies(bucket: SimS3Bucket): readonly SimIamResourcePolicyInput[];
+//# sourceMappingURL=sim-s3-bucket-resource-policies.d.ts.map

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-resource-policies.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/authorize/sim-s3-bucket-resource-policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,GAClB,SAAS,yBAAyB,EAAE,CActC"}

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.js

@@ -0,0 +1,22 @@
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+/**
+ * The resource policies sim IAM should evaluate for a request against a Bucket.
+ *
+ * A Bucket policy can grant Bucket-level administration actions in real S3, so
+ * the policy administration commands consult it the same way the Object
+ * commands do. A Bucket without a policy contributes nothing.
+ */
+export function simS3BucketResourcePolicies(bucket) {
+    const policy = bucket.getPolicy();
+    if (policy === undefined) {
+        return [];
+    }
+    return [
+        {
+            document: policy,
+            policyName: "BucketPolicy",
+            resourceArn: simS3BucketArn(bucket.bucketName),
+        },
+    ];
+}
+//# sourceMappingURL=sim-s3-bucket-resource-policies.js.map

package/dist/service/s3/command/authorize/sim-s3-bucket-resource-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-resource-policies.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/authorize/sim-s3-bucket-resource-policies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAElC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.d.ts

@@ -0,0 +1,23 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+interface DeleteBucketPolicyAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to an S3 DeleteBucketPolicy request.
+ *
+ * Real S3 governs removing a Bucket policy with s3:DeleteBucketPolicy, which is
+ * a distinct action from the s3:PutBucketPolicy that replaces one.
+ */
+export declare class DeleteBucketPolicyAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: DeleteBucketPolicyAuthorizerProperties);
+    /**
+     * Ensure the caller may remove the Bucket policy.
+     */
+    authorize(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=delete-bucket-policy-authorizer.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAEzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAgB1D;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+/**
+ * Applies IAM authorization to an S3 DeleteBucketPolicy request.
+ *
+ * Real S3 governs removing a Bucket policy with s3:DeleteBucketPolicy, which is
+ * a distinct action from the s3:PutBucketPolicy that replaces one.
+ */
+export class DeleteBucketPolicyAuthorizer {
+    static action = "s3:DeleteBucketPolicy";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may remove the Bucket policy.
+     */
+    authorize(bucket, caller) {
+        const resource = simS3BucketArn(bucket.bucketName);
+        const decision = this.iam.authorize({
+            action: DeleteBucketPolicyAuthorizer.action,
+            resource,
+            caller,
+            resourcePolicies: simS3BucketResourcePolicies(bucket),
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: DeleteBucketPolicyAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=delete-bucket-policy-authorizer.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;;;;GAKG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,uBAAuB,CAAC;IAExC,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.d.ts

@@ -0,0 +1,20 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy command.
+ */
+export interface SimDeleteBucketPolicyCommand {
+    readonly input: SimDeleteBucketPolicyCommandInput;
+}
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy input.
+ */
+export interface SimDeleteBucketPolicyCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 DeleteBucketPolicy output.
+ */
+export interface SimDeleteBucketPolicyCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-bucket-policy.command.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-bucket-policy.command.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.d.ts

@@ -0,0 +1,32 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput } from "./delete-bucket-policy.command.js";
+interface DeleteBucketPolicyCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeleteBucketPolicyCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 DeleteBucketPolicyCommand handler.
+ */
+export declare class DeleteBucketPolicyCommandHandler implements CommandHandler<SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeleteBucketPolicyCommandHandlerProperties);
+    /**
+     * Authorize and remove a Bucket's resource policy.
+     *
+     * Real S3 answers the same way whether or not there was a policy to remove,
+     * so a Bucket without one is not an error here.
+     */
+    handle(command: SimDeleteBucketPolicyCommand, options?: DeleteBucketPolicyCommandHandlerOptions): Promise<SimDeleteBucketPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-bucket-policy.handler.d.ts.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAUjE;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAkB7C;CACF"}

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.js

@@ -0,0 +1,37 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+import { DeleteBucketPolicyAuthorizer } from "./delete-bucket-policy-authorizer.js";
+/**
+ * Simulated S3 DeleteBucketPolicyCommand handler.
+ */
+export class DeleteBucketPolicyCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new DeleteBucketPolicyAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and remove a Bucket's resource policy.
+     *
+     * Real S3 answers the same way whether or not there was a policy to remove,
+     * so a Bucket without one is not an error here.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "DeleteBucketPolicyCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorize(bucket, options?.caller);
+        bucket.deletePolicy();
+        return {
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=delete-bucket-policy.handler.js.map

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-policy.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket-policy/delete-bucket-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAK5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAgBpF;;GAEG;AACH,MAAM,OAAO,gCAAgC;IAI1B,OAAO,CAAoC;IAC3C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,wCAAwC,CACzC,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnD,MAAM,CAAC,YAAY,EAAE,CAAC;QAEtB,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.d.ts

@@ -0,0 +1,20 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock command.
+ */
+export interface SimDeletePublicAccessBlockCommand {
+    readonly input: SimDeletePublicAccessBlockCommandInput;
+}
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock input.
+ */
+export interface SimDeletePublicAccessBlockCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 DeletePublicAccessBlock output.
+ */
+export interface SimDeletePublicAccessBlockCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-public-access-block.command.d.ts.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,sCAAsC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-public-access-block.command.js.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.d.ts

@@ -0,0 +1,30 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput } from "./delete-public-access-block.command.js";
+interface DeletePublicAccessBlockCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeletePublicAccessBlockCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 DeletePublicAccessBlockCommand handler.
+ */
+export declare class DeletePublicAccessBlockCommandHandler implements CommandHandler<SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeletePublicAccessBlockCommandHandlerProperties);
+    /**
+     * Authorize and remove a Bucket's Block Public Access settings, returning
+     * the Bucket to the all-enabled state a new Bucket starts in.
+     */
+    handle(command: SimDeletePublicAccessBlockCommand, options?: DeletePublicAccessBlockCommandHandlerOptions): Promise<SimDeletePublicAccessBlockCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-public-access-block.handler.d.ts.map

package/dist/service/s3/command/delete-public-access-block/delete-public-access-block.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-public-access-block.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-public-access-block/delete-public-access-block.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,iCAAiC,EACjC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AAEjD,UAAU,+CAA+C;IACvD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,4CAA4C;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,qCAAsC,YAAW,cAAc,CAC1E,iCAAiC,EACjC,uCAAuC,CACxC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,+CAA+C,EAUtE;IAED;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,4CAA4C,GACrD,OAAO,CAAC,uCAAuC,CAAC,CAkBlD;CACF"}