@kensio/yulin 0.41.0 → 0.43.0

package/dist/service/ssm/parameter/sim-ssm-parameter-value.d.ts

@@ -1,14 +1,30 @@
 /**
- * The value held by one version of a simulated parameter.
+ * The value held by one version of a simulated parameter, as it is stored.
  *
  * A `StringList` value is a single comma-separated string here, as it is on
  * real Parameter Store. It is stored and returned that way rather than split
  * into an array, so handler code that splits it on commas is exercising the
  * same shape it would get from AWS.
+ *
+ * A `SecureString` value is stored as the base64 ciphertext KMS produced,
+ * which is what a read without `WithDecryption` returns. The 4KB limit applies
+ * to the plaintext a request submitted rather than to that ciphertext, so the
+ * two ways of making one of these are separate.
  */
 export declare class SimSsmParameterValue {
     readonly value: string;
-    constructor(value: string | undefined);
-    private static validated;
+    private constructor();
+    /**
+     * The value a request submitted, checked against the standard tier limit.
+     */
+    static submitted(value: string | undefined): SimSsmParameterValue;
+    /**
+     * The stored form of an encrypted value.
+     *
+     * This is longer than the plaintext it came from and is not subject to the
+     * limit that plaintext was checked against, because Parameter Store measures
+     * the request rather than what it keeps.
+     */
+    static encrypted(ciphertext: string): SimSsmParameterValue;
 }
 //# sourceMappingURL=sim-ssm-parameter-value.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-value.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-value.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAWA;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,KAAK,EAAE,MAAM,GAAG,SAAS,EAEpC;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;CAmBzB"}
+{"version":3,"file":"sim-ssm-parameter-value.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAkBhE;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,CAEzD;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-value.js

@@ -8,19 +8,27 @@ import { SimSsmValidationException } from "../error/sim-ssm.error.js";
  */
 const maxValueBytes = 4096;
 /**
- * The value held by one version of a simulated parameter.
+ * The value held by one version of a simulated parameter, as it is stored.
  *
  * A `StringList` value is a single comma-separated string here, as it is on
  * real Parameter Store. It is stored and returned that way rather than split
  * into an array, so handler code that splits it on commas is exercising the
  * same shape it would get from AWS.
+ *
+ * A `SecureString` value is stored as the base64 ciphertext KMS produced,
+ * which is what a read without `WithDecryption` returns. The 4KB limit applies
+ * to the plaintext a request submitted rather than to that ciphertext, so the
+ * two ways of making one of these are separate.
  */
 export class SimSsmParameterValue {
     value;
     constructor(value) {
-        this.value = SimSsmParameterValue.validated(value);
+        this.value = value;
     }
-    static validated(value) {
+    /**
+     * The value a request submitted, checked against the standard tier limit.
+     */
+    static submitted(value) {
         if (value === undefined || value === "") {
             throw new SimSsmValidationException("A parameter Value is required and cannot be empty");
         }
@@ -30,7 +38,17 @@ export class SimSsmParameterValue {
                 `parameter holds at most ${String(maxValueBytes)} bytes. The ` +
                 `advanced tier is not simulated.`);
         }
-        return value;
+        return new SimSsmParameterValue(value);
+    }
+    /**
+     * The stored form of an encrypted value.
+     *
+     * This is longer than the plaintext it came from and is not subject to the
+     * limit that plaintext was checked against, because Parameter Store measures
+     * the request rather than what it keeps.
+     */
+    static encrypted(ciphertext) {
+        return new SimSsmParameterValue(ciphertext);
     }
 }
 //# sourceMappingURL=sim-ssm-parameter-value.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-value.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-value.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IAE9B,YAAY,KAAyB;QACnC,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,KAAyB;QAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,sBAAsB,MAAM,CAAC,UAAU,CAAC,0BAA0B;gBAChE,2BAA2B,MAAM,CAAC,aAAa,CAAC,cAAc;gBAC9D,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-parameter-value.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IAE9B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAyB;QACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,sBAAsB,MAAM,CAAC,UAAU,CAAC,0BAA0B;gBAChE,2BAA2B,MAAM,CAAC,aAAa,CAAC,cAAc;gBAC9D,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,UAAkB;QACjC,OAAO,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-version.d.ts

@@ -8,12 +8,17 @@ import type { SimSsmParameterValue } from "./sim-ssm-parameter-value.js";
  */
 export declare const ssmTextDataType = "text";
 /**
- * The details one write of a parameter carries, beyond its value.
+ * The details one stored version of a parameter records, beyond its value.
  */
 export interface SimSsmParameterVersionDetails {
     readonly description?: string | undefined;
     readonly dataType?: string | undefined;
     readonly lastModifiedUser?: string | undefined;
+    /**
+     * The ARN of the KMS key a SecureString value was encrypted under, and
+     * undefined for the types that are stored in the clear.
+     */
+    readonly keyId?: string | undefined;
 }
 interface SimSsmParameterVersionProperties extends SimSsmParameterVersionDetails {
     readonly version: number;
@@ -33,6 +38,7 @@ export declare class SimSsmParameterVersion {
     readonly lastModifiedDate: Date;
     readonly lastModifiedUser: string | undefined;
     readonly description: string | undefined;
+    readonly keyId: string | undefined;
     readonly dataType: string;
     constructor(properties: SimSsmParameterVersionProperties);
 }

package/dist/service/ssm/parameter/sim-ssm-parameter-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-version.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,SAAS,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,UAAU,gCAAiC,SAAQ,6BAA6B;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,KAAK,EAAE,oBAAoB,CAAC;IAC5C,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IACvC,SAAgB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC,YAAY,UAAU,EAAE,gCAAgC,EAOvD;CACF"}
+{"version":3,"file":"sim-ssm-parameter-version.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,SAAS,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,UAAU,gCAAiC,SAAQ,6BAA6B;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,KAAK,EAAE,oBAAoB,CAAC;IAC5C,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IACvC,SAAgB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC,YAAY,UAAU,EAAE,gCAAgC,EAQvD;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-version.js

@@ -19,6 +19,7 @@ export class SimSsmParameterVersion {
     lastModifiedDate;
     lastModifiedUser;
     description;
+    keyId;
     dataType;
     constructor(properties) {
         this.version = properties.version;
@@ -26,6 +27,7 @@ export class SimSsmParameterVersion {
         this.lastModifiedDate = properties.lastModifiedDate;
         this.lastModifiedUser = properties.lastModifiedUser;
         this.description = properties.description;
+        this.keyId = properties.keyId;
         this.dataType = properties.dataType ?? ssmTextDataType;
     }
 }

package/dist/service/ssm/parameter/sim-ssm-parameter-version.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-version.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-version.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAiBtC;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IACjB,OAAO,CAAS;IAChB,KAAK,CAAuB;IAC5B,gBAAgB,CAAO;IACvB,gBAAgB,CAAqB;IACrC,WAAW,CAAqB;IAChC,QAAQ,CAAS;IAEjC,YAAY,UAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,eAAe,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-parameter-version.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-version.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAuBtC;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IACjB,OAAO,CAAS;IAChB,KAAK,CAAuB;IAC5B,gBAAgB,CAAO;IACvB,gBAAgB,CAAqB;IACrC,WAAW,CAAqB;IAChC,KAAK,CAAqB;IAC1B,QAAQ,CAAS;IAEjC,YAAY,UAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,eAAe,CAAC;IACzD,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-writer.d.ts

@@ -1,19 +1,40 @@
 import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimSsmParameterEncryption } from "./sim-ssm-parameter-encryption.js";
 import type { SimSsmParameterName } from "./sim-ssm-parameter-name.js";
 import type { SimSsmParameterStore } from "./sim-ssm-parameter-store.js";
-import type { SimSsmParameterVersion, SimSsmParameterVersionDetails } from "./sim-ssm-parameter-version.js";
+import type { SimSsmParameterVersion } from "./sim-ssm-parameter-version.js";
 /**
  * One write of a parameter, as PutParameter describes it.
+ *
+ * This is the request rather than what gets stored, which is why it does not
+ * share the version's details: the two differ on the key. Here it is whatever
+ * the request asked for, and on the version it is the ARN that answered.
  */
-export interface SimSsmParameterWrite extends SimSsmParameterVersionDetails {
+export interface SimSsmParameterWrite {
     readonly name: SimSsmParameterName;
     readonly value: string | undefined;
     readonly type: string | undefined;
     readonly overwrite: boolean | undefined;
+    readonly description: string | undefined;
+    readonly dataType: string | undefined;
+    readonly lastModifiedUser: string | undefined;
+    /**
+     * The key the request asked to encrypt with, in any form KMS accepts: an
+     * alias such as `alias/aws/ssm`, a key ID, or a key ARN. Undefined leaves
+     * Parameter Store to pick its own AWS managed key.
+     */
+    readonly keyId: string | undefined;
+    /**
+     * The caller the KMS call for a SecureString is made as, so that encrypting
+     * needs the caller's own `kms:Encrypt` permission on the key.
+     */
+    readonly caller: SimAwsCaller | undefined;
 }
 interface SimSsmParameterWriterProperties {
     readonly parameters: SimSsmParameterStore;
+    readonly encryption: SimSsmParameterEncryption;
     readonly accountRegionScope: SimAwsAccountRegionScope;
     readonly clock: SimClock;
 }
@@ -21,32 +42,31 @@ interface SimSsmParameterWriterProperties {
  * The single path by which a simulated parameter is created or updated.
  *
  * Keeping creation and overwrite in one collaborator is what stops the two
- * drifting apart on the rules that only show up when they meet: a name that is
- * already taken, and a type that cannot change once the parameter exists.
+ * drifting apart on the rules that only show up when they meet.
  */
 export declare class SimSsmParameterWriter {
     private readonly parameters;
+    private readonly encryption;
     private readonly accountRegionScope;
     private readonly clock;
+    private readonly overwrite;
     constructor(properties: SimSsmParameterWriterProperties);
     /**
      * Write a new version of a parameter, creating it if it is new.
      *
-     * Everything is validated before anything is stored, so a request refused
-     * for its value leaves no half-made parameter behind.
+     * Everything is validated and encrypted before anything is stored, so a
+     * request refused for its value, or for a key the caller may not encrypt
+     * with, leaves no half-made parameter behind.
      */
-    write(request: SimSsmParameterWrite): SimSsmParameterVersion;
-    private parameterFor;
-    private created;
+    write(request: SimSsmParameterWrite): Promise<SimSsmParameterVersion>;
     /**
-     * Refuse an overwrite that real Parameter Store refuses.
+     * The ARN the parameter has or is about to have.
      *
-     * A request that leaves out Overwrite is a create, so a name already in use
-     * fails rather than quietly replacing what is there. A request naming a
-     * different type fails too: Parameter Store has no way to convert a stored
-     * parameter, so the caller has to delete it and make a new one.
+     * It is needed before the parameter exists, because it is the encryption
+     * context a SecureString value is bound to.
      */
-    private requireOverwriteAllowed;
+    private arnFor;
+    private created;
 }
 export {};
 //# sourceMappingURL=sim-ssm-parameter-writer.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-writer.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-writer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAM1F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,gCAAgC,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,6BAA6B;IACzE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,+BAA+B,EAItD;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,oBAAoB,GAAG,sBAAsB,CAS3D;IAED,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,OAAO;IAYf;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;CA4BhC"}
+{"version":3,"file":"sim-ssm-parameter-writer.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-writer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;CAC3C;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAE5D,YAAY,UAAU,EAAE,+BAA+B,EAKtD;IAED;;;;;;OAMG;IACG,KAAK,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoB1E;IAED;;;;;OAKG;IACH,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,OAAO;CAchB"}

package/dist/service/ssm/parameter/sim-ssm-parameter-writer.js

@@ -1,79 +1,65 @@
-import { SimSsmHierarchyTypeMismatchException, SimSsmParameterAlreadyExists, } from "../error/sim-ssm.error.js";
 import { SimSsmParameter } from "./sim-ssm-parameter.js";
-import { SimSsmParameterType } from "./sim-ssm-parameter-type.js";
+import { SimSsmParameterArn } from "./sim-ssm-parameter-arn.js";
+import { SimSsmParameterOverwrite } from "./sim-ssm-parameter-overwrite.js";
 import { SimSsmParameterValue } from "./sim-ssm-parameter-value.js";
 /**
  * The single path by which a simulated parameter is created or updated.
  *
  * Keeping creation and overwrite in one collaborator is what stops the two
- * drifting apart on the rules that only show up when they meet: a name that is
- * already taken, and a type that cannot change once the parameter exists.
+ * drifting apart on the rules that only show up when they meet.
  */
 export class SimSsmParameterWriter {
     parameters;
+    encryption;
     accountRegionScope;
     clock;
+    overwrite = new SimSsmParameterOverwrite();
     constructor(properties) {
         this.parameters = properties.parameters;
+        this.encryption = properties.encryption;
         this.accountRegionScope = properties.accountRegionScope;
         this.clock = properties.clock;
     }
     /**
      * Write a new version of a parameter, creating it if it is new.
      *
-     * Everything is validated before anything is stored, so a request refused
-     * for its value leaves no half-made parameter behind.
+     * Everything is validated and encrypted before anything is stored, so a
+     * request refused for its value, or for a key the caller may not encrypt
+     * with, leaves no half-made parameter behind.
      */
-    write(request) {
-        const value = new SimSsmParameterValue(request.value);
-        const parameter = this.parameterFor(request);
-        return parameter.addVersion(value, this.clock.now(), {
+    async write(request) {
+        const submitted = SimSsmParameterValue.submitted(request.value);
+        const existing = this.parameters.find(request.name.value);
+        const type = this.overwrite.typeFor(request, existing);
+        const stored = await this.encryption.stored(type, this.arnFor(request.name), submitted, request.keyId, request.caller);
+        const parameter = existing ?? this.created(request.name, type);
+        return parameter.addVersion(stored.value, this.clock.now(), {
             description: request.description,
             dataType: request.dataType,
             lastModifiedUser: request.lastModifiedUser,
+            keyId: stored.keyId,
         });
     }
-    parameterFor(request) {
-        const existing = this.parameters.find(request.name.value);
-        if (existing === undefined) {
-            return this.created(request);
-        }
-        this.requireOverwriteAllowed(request, existing);
-        return existing;
+    /**
+     * The ARN the parameter has or is about to have.
+     *
+     * It is needed before the parameter exists, because it is the encryption
+     * context a SecureString value is bound to.
+     */
+    arnFor(name) {
+        return new SimSsmParameterArn({
+            resource: name.resource,
+            accountRegionScope: this.accountRegionScope,
+        }).value;
     }
-    created(request) {
+    created(name, type) {
         const parameter = new SimSsmParameter({
-            name: request.name,
-            type: SimSsmParameterType.forNewParameter(request.type),
+            name,
+            type,
             accountRegionScope: this.accountRegionScope,
         });
         this.parameters.add(parameter);
         return parameter;
     }
-    /**
-     * Refuse an overwrite that real Parameter Store refuses.
-     *
-     * A request that leaves out Overwrite is a create, so a name already in use
-     * fails rather than quietly replacing what is there. A request naming a
-     * different type fails too: Parameter Store has no way to convert a stored
-     * parameter, so the caller has to delete it and make a new one.
-     */
-    requireOverwriteAllowed(request, existing) {
-        if (request.overwrite !== true) {
-            throw new SimSsmParameterAlreadyExists(`The parameter '${existing.name.value}' already exists. To overwrite ` +
-                `this value, set the Overwrite option in the request to true.`);
-        }
-        if (request.type === undefined) {
-            return;
-        }
-        const requested = new SimSsmParameterType(request.type);
-        if (requested.value === existing.type.value) {
-            return;
-        }
-        throw new SimSsmHierarchyTypeMismatchException(`Parameter '${existing.name.value}' is a ${existing.type.value} ` +
-            `parameter and cannot be changed to ${requested.value}. Parameter ` +
-            `Store does not support changing a parameter type: create a new, ` +
-            `unique parameter instead.`);
-    }
 }
 //# sourceMappingURL=sim-ssm-parameter-writer.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm-parameter-writer.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-writer.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oCAAoC,EACpC,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAsBpE;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAuB;IACjC,kBAAkB,CAA2B;IAC7C,KAAK,CAAW;IAEjC,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAA6B;QACjC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE7C,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE;YACnD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,OAA6B;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEhD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,OAA6B;QAC3C,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,mBAAmB,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;YACvD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,uBAAuB,CAC7B,OAA6B,EAC7B,QAAyB;QAEzB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,4BAA4B,CACpC,kBAAkB,QAAQ,CAAC,IAAI,CAAC,KAAK,iCAAiC;gBACpE,8DAA8D,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,oCAAoC,CAC5C,cAAc,QAAQ,CAAC,IAAI,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG;YAC/D,sCAAsC,SAAS,CAAC,KAAK,cAAc;YACnE,kEAAkE;YAClE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-ssm-parameter-writer.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-writer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAG5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAwCpE;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAuB;IACjC,UAAU,CAA4B;IACtC,kBAAkB,CAA2B;IAC7C,KAAK,CAAW;IAChB,SAAS,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAE5D,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,OAA6B;QACvC,MAAM,SAAS,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACzC,IAAI,EACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACzB,SAAS,EACT,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,CACf,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE/D,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE;YAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,IAAyB;QACtC,OAAO,IAAI,kBAAkB,CAAC;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,OAAO,CACb,IAAyB,EACzB,IAAyB;QAEzB,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,IAAI;YACJ,IAAI;YACJ,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/B,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/service/ssm/sim-ssm.d.ts

@@ -4,7 +4,9 @@ import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type * as simSsmCommands from "./command/sim-ssm-command.types.js";
+import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
 import type { SimSsmParameter } from "./parameter/sim-ssm-parameter.js";
+import type { SimSsmKmsCrypto } from "./parameter/sim-ssm-kms-crypto.js";
 export interface SimSsmRequestOptions {
     readonly caller?: SimAwsCaller;
 }
@@ -12,6 +14,12 @@ interface SimSsmProperties {
     readonly accountRegionScope?: SimAwsAccountRegionScope;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
+    /**
+     * The simulated KMS that SecureString values are encrypted through. One is
+     * created for this scope when none is supplied, so a standalone SimSsm still
+     * encrypts rather than quietly storing secrets in the clear.
+     */
+    readonly kms?: SimSsmKmsCrypto;
 }
 /**
  * Simulated SSM Parameter Store. Handles SDK commands. Emulates AWS behaviour
@@ -32,6 +40,7 @@ export declare class SimSsm {
     private readonly describeParametersCommand;
     private readonly background;
     private readonly sdkRouter;
+    private readonly cfnFactory;
     constructor(properties?: SimSsmProperties);
     /**
      * Find a parameter by name, with or without its leading slash.
@@ -68,6 +77,10 @@ export declare class SimSsm {
      * Handle a DescribeParameters Command from the SDK.
      */
     describeParameters(command: simSsmCommands.SimDescribeParametersCommand, options?: SimSsmRequestOptions): Promise<simSsmCommands.SimDescribeParametersCommandOutput>;
+    /**
+     * Get the CloudFormation Resource factory for AWS::SSM::* Resources.
+     */
+    cfnResourceFactory(): SimSsmCfnResourceFactory;
     /**
      * Get this service's SDK Command router for SDK client interception.
      */

package/dist/service/ssm/sim-ssm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAO1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAKxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAqC5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAQ1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EA4C5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/ssm/sim-ssm.js

@@ -1,12 +1,15 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimKms } from "../kms/index.js";
 import { SimSsmAuthorizer } from "./command/authorize/sim-ssm-authorizer.js";
 import { SimSsmDeleteParameterCommands } from "./command/parameter/sim-ssm-delete-parameter-commands.js";
 import { SimSsmDescribeParameters } from "./command/parameter/sim-ssm-describe-parameters.js";
 import { SimSsmGetParameterCommands } from "./command/parameter/sim-ssm-get-parameter-commands.js";
 import { SimSsmGetParametersByPath } from "./command/parameter/sim-ssm-get-parameters-by-path.js";
 import { SimSsmPutParameter } from "./command/parameter/sim-ssm-put-parameter.js";
+import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
+import { SimSsmParameterEncryption } from "./parameter/sim-ssm-parameter-encryption.js";
 import { SimSsmParameterStore } from "./parameter/sim-ssm-parameter-store.js";
 import { SimSsmParameterWriter } from "./parameter/sim-ssm-parameter-writer.js";
 import { SimSsmSdkCommandRouter } from "./sdk/sim-ssm-sdk-command-router.js";
@@ -29,14 +32,18 @@ export class SimSsm {
     describeParametersCommand;
     background;
     sdkRouter = new SimSsmSdkCommandRouter(this);
+    cfnFactory = new SimSsmCfnResourceFactory({ ssm: this });
     constructor(properties = {}) {
         const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        const { kms = new SimKms({ accountRegionScope, iam, background }) } = properties;
         const authorizer = new SimSsmAuthorizer({ iam, accountRegionScope });
+        const encryption = new SimSsmParameterEncryption({ kms });
         this.background = background;
         this.parameters = new SimSsmParameterStore();
         this.putParameterCommand = new SimSsmPutParameter({
             writer: new SimSsmParameterWriter({
                 parameters: this.parameters,
+                encryption,
                 accountRegionScope,
                 clock: background,
             }),
@@ -45,10 +52,12 @@ export class SimSsm {
         });
         this.readCommands = new SimSsmGetParameterCommands({
             parameters: this.parameters,
+            encryption,
             authorizer,
         });
         this.pathCommand = new SimSsmGetParametersByPath({
             parameters: this.parameters,
+            encryption,
             authorizer,
             accountRegionScope,
         });
@@ -75,28 +84,28 @@ export class SimSsm {
      */
     async putParameter(command, options) {
         await this.background.sequence();
-        return this.putParameterCommand.handle(command, options);
+        return await this.putParameterCommand.handle(command, options);
     }
     /**
      * Handle a GetParameter Command from the SDK.
      */
     async getParameter(command, options) {
         await this.background.sequence();
-        return this.readCommands.get(command, options);
+        return await this.readCommands.get(command, options);
     }
     /**
      * Handle a GetParameters Command from the SDK.
      */
     async getParameters(command, options) {
         await this.background.sequence();
-        return this.readCommands.getMany(command, options);
+        return await this.readCommands.getMany(command, options);
     }
     /**
      * Handle a GetParametersByPath Command from the SDK.
      */
     async getParametersByPath(command, options) {
         await this.background.sequence();
-        return this.pathCommand.handle(command, options);
+        return await this.pathCommand.handle(command, options);
     }
     /**
      * Handle a DeleteParameter Command from the SDK.
@@ -119,6 +128,12 @@ export class SimSsm {
         await this.background.sequence();
         return this.describeParametersCommand.handle(command, options);
     }
+    /**
+     * Get the CloudFormation Resource factory for AWS::SSM::* Resources.
+     */
+    cfnResourceFactory() {
+        return this.cfnFactory;
+    }
     /**
      * Get this service's SDK Command router for SDK client interception.
      */

package/dist/service/ssm/sim-ssm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAGlF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAY7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAmB7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,GACjE,UAAU,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "0.41.0",
+  "version": "0.43.0",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": {
     "type": "git",
@@ -38,6 +38,10 @@
       "import": "./dist/service/cloudfront/globals.js",
       "types": "./dist/service/cloudfront/globals.d.ts"
     },
+    "./cognito": {
+      "import": "./dist/service/cognito/index.js",
+      "types": "./dist/service/cognito/index.d.ts"
+    },
     "./dynamodb": {
       "import": "./dist/service/dynamodb/index.js",
       "types": "./dist/service/dynamodb/index.d.ts"
@@ -96,6 +100,7 @@
     "@aws-sdk/client-acm": "^3.1095.0",
     "@aws-sdk/client-cloudformation": "^3.1095.0",
     "@aws-sdk/client-cloudfront": "^3.1095.0",
+    "@aws-sdk/client-cognito-identity-provider": "^3.1096.0",
     "@aws-sdk/client-dynamodb": "^3.1095.0",
     "@aws-sdk/client-iam": "^3.1095.0",
     "@aws-sdk/client-kms": "^3.1095.0",
@@ -119,6 +124,7 @@
     "@vitest/eslint-plugin": "^1.6.23",
     "aws-cdk": "^2.1130.0",
     "aws-cdk-lib": "^2.261.0",
+    "aws-jwt-verify": "^5.2.1",
     "aws-sdk-client-mock": "^4.1.0",
     "constructs": "^10.6.0",
     "eslint": "^10.7.0",
@@ -139,7 +145,7 @@
   },
   "dependencies": {
     "@faker-js/faker": "^10.5.0",
-    "@kensio/part-factory": "^1.6.0",
+    "@kensio/part-factory": "^1.9.0",
     "lodash-es": "^4.18.1"
   },
   "peerDependencies": {