@kensio/yulin 0.41.0 → 0.42.0

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-properties.js

@@ -0,0 +1,125 @@
+/**
+ * Reads AWS::SSM::Parameter CloudFormation properties into the shape
+ * PutParameter takes.
+ *
+ * Everything this reads is handed to PutParameter rather than applied here,
+ * so the options Parameter Store refuses are refused in one place. The one
+ * rule that belongs here is the type: real CloudFormation refuses
+ * `SecureString` for this Resource type whatever Parameter Store itself
+ * supports, so the refusal is a property of the Resource rather than of the
+ * simulation.
+ */
+export class SimCfnSsmParameterProperties {
+    resource;
+    properties;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * The parameter name.
+     *
+     * An unnamed parameter is named after its logical ID, as sim CloudFormation
+     * names other unnamed resources. Real CloudFormation generates a name from
+     * the stack name and its own random characters, which a template could not
+     * predict anyway.
+     */
+    name() {
+        return (this.string(this.properties["Name"], "Name") ?? this.resource.logicalId);
+    }
+    /**
+     * The parameter type.
+     *
+     * Required, as it is on real CloudFormation, and never `SecureString`.
+     */
+    type() {
+        const type = this.string(this.properties["Type"], "Type");
+        if (type === undefined) {
+            throw this.propertyError("Type is required");
+        }
+        if (type === "SecureString") {
+            throw this.propertyError("Type SecureString is not supported. Real CloudFormation refuses to " +
+                "create a SecureString parameter from a template, because the " +
+                "plaintext value would sit in the template, so a stack has to " +
+                "reference a parameter created another way");
+        }
+        return type;
+    }
+    /**
+     * The value the parameter's first version holds.
+     */
+    value() {
+        const value = this.string(this.properties["Value"], "Value");
+        if (value === undefined) {
+            throw this.propertyError("Value is required");
+        }
+        return value;
+    }
+    /**
+     * The parameter Description.
+     */
+    description() {
+        return this.string(this.properties["Description"], "Description");
+    }
+    /**
+     * The parameter Tier.
+     *
+     * Handed to PutParameter, which refuses any tier but Standard.
+     */
+    tier() {
+        return this.string(this.properties["Tier"], "Tier");
+    }
+    /**
+     * The parameter AllowedPattern, which PutParameter refuses.
+     */
+    allowedPattern() {
+        return this.string(this.properties["AllowedPattern"], "AllowedPattern");
+    }
+    /**
+     * The parameter DataType, which PutParameter refuses beyond plain text.
+     */
+    dataType() {
+        return this.string(this.properties["DataType"], "DataType");
+    }
+    /**
+     * The parameter Policies, which PutParameter refuses.
+     */
+    policies() {
+        return this.string(this.properties["Policies"], "Policies");
+    }
+    /**
+     * The parameter Tags, which PutParameter refuses.
+     *
+     * CloudFormation carries these as a map of names to values for this
+     * Resource type, rather than the list of Key/Value pairs most Resource
+     * types use, so they are turned into the list shape PutParameter takes.
+     */
+    tags() {
+        const tags = this.properties["Tags"];
+        if (tags === undefined) {
+            return undefined;
+        }
+        if (typeof tags !== "object" || tags === null || Array.isArray(tags)) {
+            throw this.propertyError("Tags must be an object");
+        }
+        return Object.entries(tags).map(([key, value]) => {
+            return { Key: key, Value: this.stringValue(value, `Tags.${key}`) };
+        });
+    }
+    string(value, name) {
+        if (value === undefined) {
+            return undefined;
+        }
+        return this.stringValue(value, name);
+    }
+    stringValue(value, name) {
+        if (typeof value !== "string") {
+            throw this.propertyError(`${name} must be a string`);
+        }
+        return value;
+    }
+    propertyError(reason) {
+        return new Error(`Invalid AWS::SSM::Parameter Resource ${this.resource.logicalId}: ${reason}`);
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-parameter-properties.js.map

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-parameter-properties.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-properties.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,4BAA4B;IACtB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IAEvD,YAAY,UAAkD;QAC5D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,IAAI;QACF,OAAO,CACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAE1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,aAAa,CACtB,qEAAqE;gBACnE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAErC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAC/C,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,IAAY;QAEZ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,IAAY;QAEZ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,OAAO,IAAI,KAAK,CACd,wCAAwC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,EAAE,CAC7E,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/cfn/sim-cfn-ssm-resource-factory.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimSsm } from "../sim-ssm.js";
+interface SimSsmCfnResourceFactoryProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * CloudFormation Resource factory for simulated SSM resources.
+ */
+export declare class SimSsmCfnResourceFactory implements SimCfnServiceResourceFactory {
+    private readonly parameterCreator;
+    constructor(properties: SimSsmCfnResourceFactoryProperties);
+    /**
+     * Create a simulated SSM resource from a CloudFormation Resource.
+     *
+     * Parameter Store is the only part of Systems Manager this simulation
+     * models, so the rest of the AWS::SSM::* Resource types are reported as
+     * unsupported and skipped rather than quietly treated as deployed.
+     */
+    create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-resource-factory.d.ts.map

package/dist/service/ssm/cfn/sim-cfn-ssm-resource-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/cfn/sim-cfn-ssm-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG5C,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,4BAA4B;IAC3E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IAE7D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;;;;;OAMG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B;CACF"}

package/dist/service/ssm/cfn/sim-cfn-ssm-resource-factory.js

@@ -0,0 +1,30 @@
+import { SimCfnSsmParameterCreator } from "./parameter/sim-cfn-ssm-parameter-creator.js";
+/**
+ * CloudFormation Resource factory for simulated SSM resources.
+ */
+export class SimSsmCfnResourceFactory {
+    parameterCreator;
+    constructor(properties) {
+        this.parameterCreator = new SimCfnSsmParameterCreator({
+            ssm: properties.ssm,
+        });
+    }
+    /**
+     * Create a simulated SSM resource from a CloudFormation Resource.
+     *
+     * Parameter Store is the only part of Systems Manager this simulation
+     * models, so the rest of the AWS::SSM::* Resource types are reported as
+     * unsupported and skipped rather than quietly treated as deployed.
+     */
+    async create(resourceTypeName, resource, context) {
+        switch (resourceTypeName) {
+            case "Parameter": {
+                return await this.parameterCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            default: {
+                throw new Error(`Unsupported sim SSM CloudFormation Resource ${resourceTypeName}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-resource-factory.js.map

package/dist/service/ssm/cfn/sim-cfn-ssm-resource-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/ssm/cfn/sim-cfn-ssm-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAMzF;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAClB,gBAAgB,CAA4B;IAE7D,YAAY,UAA8C;QACxD,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,WAAW,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CACvC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/command/parameter/parameter.command.d.ts

@@ -24,6 +24,7 @@ export interface SimSsmParameterMetadata {
     readonly ARN?: string | undefined;
     readonly DataType?: string | undefined;
     readonly Description?: string | undefined;
+    readonly KeyId?: string | undefined;
     readonly LastModifiedDate?: Date | undefined;
     readonly LastModifiedUser?: string | undefined;
     readonly Name?: string | undefined;

package/dist/service/ssm/command/parameter/parameter.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parameter.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/parameter.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"parameter.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/parameter.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/ssm/command/parameter/sim-ssm-get-parameter-commands.d.ts

@@ -1,9 +1,11 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSsmParameterEncryption } from "../../parameter/sim-ssm-parameter-encryption.js";
 import type { SimSsmParameterStore } from "../../parameter/sim-ssm-parameter-store.js";
 import type { SimSsmAuthorizer } from "../authorize/sim-ssm-authorizer.js";
 import type { SimGetParameterCommand, SimGetParameterCommandOutput, SimGetParametersCommand, SimGetParametersCommandOutput } from "./query.command.js";
 interface SimSsmGetParameterCommandsProperties {
     readonly parameters: SimSsmParameterStore;
+    readonly encryption: SimSsmParameterEncryption;
     readonly authorizer: SimSsmAuthorizer;
 }
 interface SimSsmGetParameterCommandsOptions {
@@ -12,9 +14,9 @@ interface SimSsmGetParameterCommandsOptions {
 /**
  * The commands that read parameter values.
  *
- * `WithDecryption` is accepted and ignored, as real Parameter Store ignores it
- * for `String` and `StringList` parameters. Nothing else here is encrypted,
- * because `SecureString` is not simulated.
+ * `WithDecryption` decrypts a SecureString through simulated KMS and is
+ * ignored for the types stored in the clear, as real Parameter Store ignores
+ * it for them.
  */
 export declare class SimSsmGetParameterCommands {
     private readonly reader;
@@ -22,7 +24,7 @@ export declare class SimSsmGetParameterCommands {
     /**
      * Read one parameter, refusing if it is not there.
      */
-    get(command: SimGetParameterCommand, options?: SimSsmGetParameterCommandsOptions): SimGetParameterCommandOutput;
+    get(command: SimGetParameterCommand, options?: SimSsmGetParameterCommandsOptions): Promise<SimGetParameterCommandOutput>;
     /**
      * Read several parameters at once.
      *
@@ -31,7 +33,7 @@ export declare class SimSsmGetParameterCommands {
      * nothing on real AWS, so a test that asserts on `Parameters` alone passes
      * while the application reads no configuration at all.
      */
-    getMany(command: SimGetParametersCommand, options?: SimSsmGetParameterCommandsOptions): SimGetParametersCommandOutput;
+    getMany(command: SimGetParametersCommand, options?: SimSsmGetParameterCommandsOptions): Promise<SimGetParametersCommandOutput>;
 }
 export {};
 //# sourceMappingURL=sim-ssm-get-parameter-commands.d.ts.map

package/dist/service/ssm/command/parameter/sim-ssm-get-parameter-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-get-parameter-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameter-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAO5B,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAE/C,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACH,GAAG,CACD,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,iCAAiC,GAC1C,4BAA4B,CAgB9B;IAED;;;;;;;OAOG;IACH,OAAO,CACL,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,iCAAiC,GAC1C,6BAA6B,CA4B/B;CACF"}
+{"version":3,"file":"sim-ssm-get-parameter-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameter-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAK5B,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAE/C,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACG,GAAG,CACP,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,CAiBvC;IAED;;;;;;;OAOG;IACG,OAAO,CACX,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,6BAA6B,CAAC,CA8BxC;CACF"}

package/dist/service/ssm/command/parameter/sim-ssm-get-parameter-commands.js

@@ -1,12 +1,12 @@
 import { SimSsmValidationException } from "../../error/sim-ssm.error.js";
 import { requireParameterNames } from "./sim-ssm-parameter-names.js";
-import { SimSsmParameterReader, } from "./sim-ssm-parameter-reader.js";
+import { SimSsmParameterReader } from "./sim-ssm-parameter-reader.js";
 /**
  * The commands that read parameter values.
  *
- * `WithDecryption` is accepted and ignored, as real Parameter Store ignores it
- * for `String` and `StringList` parameters. Nothing else here is encrypted,
- * because `SecureString` is not simulated.
+ * `WithDecryption` decrypts a SecureString through simulated KMS and is
+ * ignored for the types stored in the clear, as real Parameter Store ignores
+ * it for them.
  */
 export class SimSsmGetParameterCommands {
     reader;
@@ -16,12 +16,17 @@ export class SimSsmGetParameterCommands {
     /**
      * Read one parameter, refusing if it is not there.
      */
-    get(command, options) {
+    async get(command, options) {
         const requested = command.input.Name;
         if (requested === undefined || requested.trim() === "") {
             throw new SimSsmValidationException("GetParameter requires a parameter Name");
         }
-        const found = this.reader.read("ssm:GetParameter", requested, options?.caller);
+        const found = await this.reader.read({
+            action: "ssm:GetParameter",
+            requested,
+            withDecryption: command.input.WithDecryption,
+            caller: options?.caller,
+        });
         return { $metadata: {}, Parameter: found.output };
     }
     /**
@@ -32,12 +37,18 @@ export class SimSsmGetParameterCommands {
      * nothing on real AWS, so a test that asserts on `Parameters` alone passes
      * while the application reads no configuration at all.
      */
-    getMany(command, options) {
+    async getMany(command, options) {
         const names = requireParameterNames(command.input.Names, "GetParameters");
         const found = [];
         const invalid = [];
         for (const name of names) {
-            const parameter = this.reader.readOrInvalid("ssm:GetParameters", name, options?.caller);
+            // eslint-disable-next-line no-await-in-loop -- one name at a time, so a denial names the first name the caller may not read
+            const parameter = await this.reader.readOrInvalid({
+                action: "ssm:GetParameters",
+                requested: name,
+                withDecryption: command.input.WithDecryption,
+                caller: options?.caller,
+            });
             if (parameter === undefined) {
                 invalid.push(name);
             }

package/dist/service/ssm/command/parameter/sim-ssm-get-parameter-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-get-parameter-commands.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameter-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AASzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAEL,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAWvC;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAwB;IAE/C,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,GAAG,CACD,OAA+B,EAC/B,OAA2C;QAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAErC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,yBAAyB,CACjC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAC5B,kBAAkB,EAClB,SAAS,EACT,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CACL,OAAgC,EAChC,OAA2C;QAE3C,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CACzC,mBAAmB,EACnB,IAAI,EACJ,OAAO,EAAE,MAAM,CAChB,CAAC;YAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,EAAE;YACb,wEAAwE;YACxE,wCAAwC;YACxC,UAAU,EAAE,KAAK;iBACd,QAAQ,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,iBAAiB,EAAE,OAAO;SAC3B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-get-parameter-commands.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameter-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAUzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAYtE;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAwB;IAE/C,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,OAA+B,EAC/B,OAA2C;QAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAErC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,yBAAyB,CACjC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACnC,MAAM,EAAE,kBAAkB;YAC1B,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc;YAC5C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,OAAgC,EAChC,OAA2C;QAE3C,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,4HAA4H;YAC5H,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc;gBAC5C,MAAM,EAAE,OAAO,EAAE,MAAM;aACxB,CAAC,CAAC;YAEH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,EAAE;YACb,wEAAwE;YACxE,wCAAwC;YACxC,UAAU,EAAE,KAAK;iBACd,QAAQ,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,iBAAiB,EAAE,OAAO;SAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.d.ts

@@ -1,10 +1,12 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSsmParameterEncryption } from "../../parameter/sim-ssm-parameter-encryption.js";
 import type { SimSsmParameterStore } from "../../parameter/sim-ssm-parameter-store.js";
 import type { SimSsmAuthorizer } from "../authorize/sim-ssm-authorizer.js";
 import type { SimGetParametersByPathCommand, SimGetParametersByPathCommandOutput } from "./query.command.js";
 interface SimSsmGetParametersByPathProperties {
     readonly parameters: SimSsmParameterStore;
+    readonly encryption: SimSsmParameterEncryption;
     readonly authorizer: SimSsmAuthorizer;
     readonly accountRegionScope: SimAwsAccountRegionScope;
 }
@@ -21,6 +23,7 @@ interface SimSsmGetParametersByPathOptions {
  */
 export declare class SimSsmGetParametersByPath {
     private readonly parameters;
+    private readonly encryption;
     private readonly authorizer;
     private readonly accountRegionScope;
     private readonly view;
@@ -28,7 +31,11 @@ export declare class SimSsmGetParametersByPath {
     /**
      * List the parameters under one level of the hierarchy.
      */
-    handle(command: SimGetParametersByPathCommand, options?: SimSsmGetParametersByPathOptions): SimGetParametersByPathCommandOutput;
+    handle(command: SimGetParametersByPathCommand, options?: SimSsmGetParametersByPathOptions): Promise<SimGetParametersByPathCommandOutput>;
+    /**
+     * One listed parameter, decrypted if the listing asked for it.
+     */
+    private listed;
 }
 export {};
 //# sourceMappingURL=sim-ssm-get-parameters-by-path.d.ts.map

package/dist/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-get-parameters-by-path.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAG7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,oBAAoB,CAAC;AAS5B,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,gCAAgC,GACzC,mCAAmC,CAmCrC;CACF"}
+{"version":3,"file":"sim-ssm-get-parameters-by-path.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAGjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EACV,6BAA6B,EAE7B,mCAAmC,EACpC,MAAM,oBAAoB,CAAC;AAS5B,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,mCAAmC,EAK1D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,gCAAgC,GACzC,OAAO,CAAC,mCAAmC,CAAC,CAqC9C;IAED;;OAEG;YACW,MAAM;CAerB"}

package/dist/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.js

@@ -16,18 +16,20 @@ const maxResults = 10;
  */
 export class SimSsmGetParametersByPath {
     parameters;
+    encryption;
     authorizer;
     accountRegionScope;
     view = new SimSsmParameterView();
     constructor(properties) {
         this.parameters = properties.parameters;
+        this.encryption = properties.encryption;
         this.authorizer = properties.authorizer;
         this.accountRegionScope = properties.accountRegionScope;
     }
     /**
      * List the parameters under one level of the hierarchy.
      */
-    handle(command, options) {
+    async handle(command, options) {
         const { input } = command;
         if (input.ParameterFilters !== undefined) {
             throw new SimSsmValidationException("GetParametersByPath ParameterFilters are not simulated: applying " +
@@ -42,9 +44,17 @@ export class SimSsmGetParametersByPath {
         const page = new SimSsmParameterPage(this.parameters.under(path, input.Recursive === true), input, { operation: "GetParametersByPath", maxResults });
         return {
             $metadata: {},
-            Parameters: page.items.map((parameter) => this.view.value(parameter, parameter.currentVersion)),
+            Parameters: await Promise.all(page.items.map(async (parameter) => await this.listed(parameter, input, options))),
             NextToken: page.nextToken,
         };
     }
+    /**
+     * One listed parameter, decrypted if the listing asked for it.
+     */
+    async listed(parameter, input, options) {
+        const version = parameter.currentVersion;
+        const reportedValue = await this.encryption.reported(parameter, version, input.WithDecryption, options?.caller);
+        return this.view.value(parameter, version, reportedValue);
+    }
 }
 //# sourceMappingURL=sim-ssm-get-parameters-by-path.js.map

package/dist/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-get-parameters-by-path.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAOhF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE;;GAEG;AACH,MAAM,UAAU,GAAG,EAAE,CAAC;AAYtB;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,UAAU,CAAuB;IACjC,UAAU,CAAmB;IAC7B,kBAAkB,CAA2B;IAC7C,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA+C;QACzD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAsC,EACtC,OAA0C;QAE1C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CACjC,mEAAmE;gBACjE,gEAAgE;gBAChE,eAAe,CAClB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,YAAY,CAC1B,yBAAyB,EACzB,IAAI,CAAC,GAAG,EACR,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,EACrD,KAAK,EACL,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,EAAE,CACjD,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,cAAc,CAAC,CACrD;YACD,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-get-parameters-by-path.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-get-parameters-by-path.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAUhF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE;;GAEG;AACH,MAAM,UAAU,GAAG,EAAE,CAAC;AAatB;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,UAAU,CAAuB;IACjC,UAAU,CAA4B;IACtC,UAAU,CAAmB;IAC7B,kBAAkB,CAA2B;IAC7C,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA+C;QACzD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAsC,EACtC,OAA0C;QAE1C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CACjC,mEAAmE;gBACjE,gEAAgE;gBAChE,eAAe,CAClB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,YAAY,CAC1B,yBAAyB,EACzB,IAAI,CAAC,GAAG,EACR,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,EACrD,KAAK,EACL,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,EAAE,CACjD,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,MAAM,OAAO,CAAC,GAAG,CAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAClE,CACF;YACD,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAClB,SAA0B,EAC1B,KAAyC,EACzC,OAAqD;QAErD,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC;QACzC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAClD,SAAS,EACT,OAAO,EACP,KAAK,CAAC,cAAc,EACpB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/ssm/command/parameter/sim-ssm-parameter-read.d.ts

@@ -0,0 +1,23 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSsmParameterOutput } from "./parameter.command.js";
+/**
+ * What one read of a parameter asks for.
+ */
+export interface SimSsmParameterReadRequest {
+    readonly action: string;
+    readonly requested: string;
+    readonly withDecryption: boolean | undefined;
+    readonly caller: SimAwsCaller | undefined;
+}
+/**
+ * A parameter a read resolved, with the stored name it is ordered by.
+ *
+ * The name is carried separately rather than read back off the output because
+ * a batch read has to sort by it, and the reported shape leaves every field
+ * optional.
+ */
+export interface SimSsmFoundParameter {
+    readonly name: string;
+    readonly output: SimSsmParameterOutput;
+}
+//# sourceMappingURL=sim-ssm-parameter-read.d.ts.map

package/dist/service/ssm/command/parameter/sim-ssm-parameter-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-read.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC"}

package/dist/service/ssm/command/parameter/sim-ssm-parameter-read.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-ssm-parameter-read.js.map

package/dist/service/ssm/command/parameter/sim-ssm-parameter-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-read.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-read.ts"],"names":[],"mappings":""}

package/dist/service/ssm/command/parameter/sim-ssm-parameter-reader.d.ts

@@ -1,20 +1,10 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSsmParameterEncryption } from "../../parameter/sim-ssm-parameter-encryption.js";
 import type { SimSsmParameterStore } from "../../parameter/sim-ssm-parameter-store.js";
 import type { SimSsmAuthorizer } from "../authorize/sim-ssm-authorizer.js";
-import type { SimSsmParameterOutput } from "./parameter.command.js";
-/**
- * A parameter a read resolved, with the stored name it is ordered by.
- *
- * The name is carried separately rather than read back off the output because
- * a batch read has to sort by it, and the reported shape leaves every field
- * optional.
- */
-export interface SimSsmFoundParameter {
-    readonly name: string;
-    readonly output: SimSsmParameterOutput;
-}
+import type { SimSsmFoundParameter, SimSsmParameterReadRequest } from "./sim-ssm-parameter-read.js";
 interface SimSsmParameterReaderProperties {
     readonly parameters: SimSsmParameterStore;
+    readonly encryption: SimSsmParameterEncryption;
     readonly authorizer: SimSsmAuthorizer;
 }
 /**
@@ -25,6 +15,7 @@ interface SimSsmParameterReaderProperties {
  */
 export declare class SimSsmParameterReader {
     private readonly parameters;
+    private readonly encryption;
     private readonly authorizer;
     private readonly view;
     constructor(properties: SimSsmParameterReaderProperties);
@@ -33,9 +24,10 @@ export declare class SimSsmParameterReader {
      *
      * Authorization comes first because real IAM evaluates a request before the
      * service sees it: a caller with no permission is refused whether or not the
-     * parameter exists, rather than being told it is missing.
+     * parameter exists, rather than being told it is missing. Decrypting a
+     * SecureString authorizes again, this time `kms:Decrypt` against the key.
      */
-    read(action: string, requested: string, caller: SimAwsCaller | undefined): SimSsmFoundParameter;
+    read(request: SimSsmParameterReadRequest): Promise<SimSsmFoundParameter>;
     /**
      * Read one name of a batch, reporting a name that resolves to nothing as
      * invalid rather than failing the whole request.
@@ -43,7 +35,7 @@ export declare class SimSsmParameterReader {
      * A refused authorization still throws, because one name the caller may not
      * read fails the whole batch on real AWS.
      */
-    readOrInvalid(action: string, requested: string, caller: SimAwsCaller | undefined): SimSsmFoundParameter | undefined;
+    readOrInvalid(request: SimSsmParameterReadRequest): Promise<SimSsmFoundParameter | undefined>;
 }
 export {};
 //# sourceMappingURL=sim-ssm-parameter-reader.d.ts.map

package/dist/service/ssm/command/parameter/sim-ssm-parameter-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAO1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;;;;;OAMG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,oBAAoB,CAmBtB;IAED;;;;;;OAMG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,oBAAoB,GAAG,SAAS,CAalC;CACF"}
+{"version":3,"file":"sim-ssm-parameter-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-reader.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAGjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,6BAA6B,CAAC;AAGrC,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,YAAY,UAAU,EAAE,+BAA+B,EAItD;IAED;;;;;;;OAOG;IACG,IAAI,CACR,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA2B/B;IAED;;;;;;OAMG;IACG,aAAa,CACjB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAa3C;CACF"}

package/dist/service/ssm/command/parameter/sim-ssm-parameter-reader.js

@@ -10,10 +10,12 @@ import { SimSsmParameterView } from "./sim-ssm-parameter-view.js";
  */
 export class SimSsmParameterReader {
     parameters;
+    encryption;
     authorizer;
     view = new SimSsmParameterView();
     constructor(properties) {
         this.parameters = properties.parameters;
+        this.encryption = properties.encryption;
         this.authorizer = properties.authorizer;
     }
     /**
@@ -21,15 +23,18 @@ export class SimSsmParameterReader {
      *
      * Authorization comes first because real IAM evaluates a request before the
      * service sees it: a caller with no permission is refused whether or not the
-     * parameter exists, rather than being told it is missing.
+     * parameter exists, rather than being told it is missing. Decrypting a
+     * SecureString authorizes again, this time `kms:Decrypt` against the key.
      */
-    read(action, requested, caller) {
-        const selector = new SimSsmParameterSelector(requested);
-        this.authorizer.authorizeParameterResource(action, SimSsmParameterName.resourceFor(selector.name), caller);
+    async read(request) {
+        const selector = new SimSsmParameterSelector(request.requested);
+        this.authorizer.authorizeParameterResource(request.action, SimSsmParameterName.resourceFor(selector.name), request.caller);
         const parameter = this.parameters.require(selector.name);
+        const version = selector.versionOf(parameter);
+        const reportedValue = await this.encryption.reported(parameter, version, request.withDecryption, request.caller);
         return {
             name: parameter.name.value,
-            output: this.view.value(parameter, selector.versionOf(parameter), selector.selector),
+            output: this.view.value(parameter, version, reportedValue, selector.selector),
         };
     }
     /**
@@ -39,9 +44,9 @@ export class SimSsmParameterReader {
      * A refused authorization still throws, because one name the caller may not
      * read fails the whole batch on real AWS.
      */
-    readOrInvalid(action, requested, caller) {
+    async readOrInvalid(request) {
         try {
-            return this.read(action, requested, caller);
+            return await this.read(request);
         }
         catch (error) {
             if (error instanceof SimSsmParameterNotFound ||

package/dist/service/ssm/command/parameter/sim-ssm-parameter-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-reader.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-reader.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAIxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAmBlE;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAuB;IACjC,UAAU,CAAmB;IAC7B,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CACF,MAAc,EACd,SAAiB,EACjB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAExD,IAAI,CAAC,UAAU,CAAC,0BAA0B,CACxC,MAAM,EACN,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC9C,MAAM,CACP,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEzD,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;YAC1B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CACrB,SAAS,EACT,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAC7B,QAAQ,CAAC,QAAQ,CAClB;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CACX,MAAc,EACd,SAAiB,EACjB,MAAgC;QAEhC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IACE,KAAK,YAAY,uBAAuB;gBACxC,KAAK,YAAY,8BAA8B,EAC/C,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-parameter-reader.js","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAOxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAQlE;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAuB;IACjC,UAAU,CAA4B;IACtC,UAAU,CAAmB;IAC7B,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAElD,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,OAAmC;QAEnC,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhE,IAAI,CAAC,UAAU,CAAC,0BAA0B,CACxC,OAAO,CAAC,MAAM,EACd,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC9C,OAAO,CAAC,MAAM,CACf,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAClD,SAAS,EACT,OAAO,EACP,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,CACf,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;YAC1B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CACrB,SAAS,EACT,OAAO,EACP,aAAa,EACb,QAAQ,CAAC,QAAQ,CAClB;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmC;QAEnC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IACE,KAAK,YAAY,uBAAuB;gBACxC,KAAK,YAAY,8BAA8B,EAC/C,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/command/parameter/sim-ssm-parameter-view.d.ts

@@ -19,10 +19,14 @@ export declare class SimSsmParameterView {
     /**
      * The parameter shape that carries a value.
      *
+     * The reported value is passed in rather than read off the version, because
+     * a SecureString reads back as its ciphertext or its plaintext depending on
+     * whether the request asked for decryption.
+     *
      * `Selector` is only reported when the request asked for a version or a
      * label, as real Parameter Store only reports it then.
      */
-    value(parameter: SimSsmParameter, version: SimSsmParameterVersion, selector?: string): SimSsmParameterOutput;
+    value(parameter: SimSsmParameter, version: SimSsmParameterVersion, reportedValue: string, selector?: string): SimSsmParameterOutput;
     /**
      * The parameter shape that carries no value.
      *

package/dist/service/ssm/command/parameter/sim-ssm-parameter-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B;;;;;OAKG;IACH,KAAK,CACH,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,CAAC,EAAE,MAAM,GAChB,qBAAqB,CAWvB;IAED;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,uBAAuB,CAe5D;CACF"}
+{"version":3,"file":"sim-ssm-parameter-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/command/parameter/sim-ssm-parameter-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B;;;;;;;;;OASG;IACH,KAAK,CACH,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,sBAAsB,EAC/B,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,GAChB,qBAAqB,CAWvB;IAED;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,uBAAuB,CAgB5D;CACF"}