@kensio/yulin 1.1.0 → 1.2.0

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.js

@@ -1,29 +1,31 @@
 import { SimS3NotImplemented } from "../../error/sim-s3.error.js";
 /**
- * The destinations of one simulated S3 scope, keyed on the service an ARN
- * names.
+ * The destinations of one simulated S3 scope, one per kind of destination.
  *
- * An ARN's service segment is the only thing that decides which destination
- * takes it, so the lookup is a map rather than a chain of checks, and a service
- * this simulator has no destination for is refused by name.
+ * A configuration says which kind it wants by the destination group it was
+ * declared in, so nothing here reads an ARN. The ARN is the destination's own
+ * business, and each of them refuses one that does not name a resource of the
+ * kind it delivers to.
  */
 export class SimS3ServiceNotificationDestinations {
-    byService;
+    lambda;
+    sqs;
     constructor(properties) {
-        this.byService = new Map([["lambda", properties.lambda]]);
+        this.lambda = properties.lambda;
+        this.sqs = properties.sqs;
     }
     /**
-     * The destination an ARN names.
+     * The destination of a kind.
      */
-    resolve(destinationArn) {
-        const service = destinationArn.split(":", 3)[2];
-        const destination = service === undefined ? undefined : this.byService.get(service);
-        if (destination === undefined) {
-            throw new SimS3NotImplemented(`Simulated S3 cannot notify ${destinationArn}. It notifies a Lambda ` +
-                "function; SQS queue, SNS topic and EventBridge destinations are " +
-                "not simulated.");
+    resolve(service) {
+        switch (service) {
+            case "lambda": {
+                return this.lambda;
+            }
+            case "sqs": {
+                return this.sqs;
+            }
         }
-        return destination;
     }
 }
 /**
@@ -38,7 +40,7 @@ export class SimS3NoNotificationDestinations {
     /**
      * Refuse every destination, explaining how to get one.
      */
-    resolve(destinationArn) {
+    resolve(_service, destinationArn) {
         throw new SimS3NotImplemented(`Cannot notify ${destinationArn}: this SimS3 was constructed on its ` +
             "own, so it has no other simulated services to notify and no shared " +
             "background scheduler to deliver on. Reach simulated S3 through " +

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-service-notification-destinations.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-notification-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAUlE;;;;;;;GAOG;AACH,MAAM,OAAO,oCAAoC;IAC9B,SAAS,CAAoD;IAE9E,YAAY,UAA0D;QACpE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,cAAsB;QAC5B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,WAAW,GACf,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,cAAc,yBAAyB;gBACnE,kEAAkE;gBAClE,gBAAgB,CACnB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAC1C;;OAEG;IACH,OAAO,CAAC,cAAsB;QAC5B,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,cAAc,sCAAsC;YACnE,qEAAqE;YACrE,iEAAiE;YACjE,iDAAiD,CACpD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-s3-service-notification-destinations.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-notification-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAYlE;;;;;;;GAOG;AACH,MAAM,OAAO,oCAAoC;IAC9B,MAAM,CAA+B;IACrC,GAAG,CAA+B;IAEnD,YAAY,UAA0D;QACpE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAA4C;QAE5C,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;YACD,KAAK,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAC1C;;OAEG;IACH,OAAO,CACL,QAA6C,EAC7C,cAAsB;QAEtB,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,cAAc,sCAAsC;YACnE,qEAAqE;YACrE,iEAAiE;YACjE,iDAAiD,CACpD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/destination/sim-s3-service-principal.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The service principal S3 reaches a notification destination as.
+ *
+ * Every destination's resource policy is written for this, so it lives beside
+ * the destinations rather than inside one of them.
+ */
+export declare const simS3ServicePrincipal = "s3.amazonaws.com";
+//# sourceMappingURL=sim-s3-service-principal.d.ts.map

package/dist/service/s3/notification/destination/sim-s3-service-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-service-principal.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-principal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC"}

package/dist/service/s3/notification/destination/sim-s3-service-principal.js

@@ -0,0 +1,8 @@
+/**
+ * The service principal S3 reaches a notification destination as.
+ *
+ * Every destination's resource policy is written for this, so it lives beside
+ * the destinations rather than inside one of them.
+ */
+export const simS3ServicePrincipal = "s3.amazonaws.com";
+//# sourceMappingURL=sim-s3-service-principal.js.map

package/dist/service/s3/notification/destination/sim-s3-service-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-service-principal.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-principal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC"}

package/dist/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.d.ts

@@ -0,0 +1,40 @@
+import type { SimAws } from "../../../../aws/sim-aws.js";
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationQueues } from "./sim-s3-notification-queues.js";
+interface SimAwsS3NotificationQueuesProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The simulated SQS queues of one simulated AWS instance, as S3 notification
+ * destinations.
+ *
+ * Queues are looked up when a configuration is applied or an event is
+ * delivered, never when this is built, for the same reason the Lambda
+ * destination does it that way: reaching another service while this one is
+ * being constructed is a cycle with no bottom to it.
+ *
+ * A queue in another Account is allowed, and evaluated against the IAM of the
+ * Account owning it. Real S3 asks only that the queue is in the Bucket's
+ * Region, which is why AWS's own documented destination queue policy carries an
+ * `aws:SourceAccount` guard: it would have no job if the two Accounts were
+ * always the same.
+ */
+export declare class SimAwsS3NotificationQueues implements SimS3NotificationQueues {
+    private readonly simAws;
+    constructor(properties: SimAwsS3NotificationQueuesProperties);
+    /**
+     * Why S3 may not send to the queue, or nothing when it may.
+     *
+     * The Region is this side's rule and the rest is the queue's own. What S3
+     * adds to the queue's decision is which Bucket is sending, so a policy
+     * granting one Bucket does not open the queue to another.
+     */
+    sendRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Send the event document to the queue.
+     */
+    send(request: SimS3NotificationDestinationRequest, body: string): Promise<void>;
+    private queue;
+}
+export {};
+//# sourceMappingURL=sim-aws-s3-notification-queues.d.ts.map

package/dist/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-queues.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAGjG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAYpB;IAED;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,mCAAmC,EAC5C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAIf;IAED,OAAO,CAAC,KAAK;CAMd"}

package/dist/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.js

@@ -0,0 +1,52 @@
+import { SimS3NotificationQueue } from "./sim-s3-notification-queue.js";
+import { SimS3NotificationQueueArn } from "./sim-s3-notification-queue-arn.js";
+/**
+ * The simulated SQS queues of one simulated AWS instance, as S3 notification
+ * destinations.
+ *
+ * Queues are looked up when a configuration is applied or an event is
+ * delivered, never when this is built, for the same reason the Lambda
+ * destination does it that way: reaching another service while this one is
+ * being constructed is a cycle with no bottom to it.
+ *
+ * A queue in another Account is allowed, and evaluated against the IAM of the
+ * Account owning it. Real S3 asks only that the queue is in the Bucket's
+ * Region, which is why AWS's own documented destination queue policy carries an
+ * `aws:SourceAccount` guard: it would have no job if the two Accounts were
+ * always the same.
+ */
+export class SimAwsS3NotificationQueues {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Why S3 may not send to the queue, or nothing when it may.
+     *
+     * The Region is this side's rule and the rest is the queue's own. What S3
+     * adds to the queue's decision is which Bucket is sending, so a policy
+     * granting one Bucket does not open the queue to another.
+     */
+    sendRefusal(request) {
+        const arn = SimS3NotificationQueueArn.parse(request.destinationArn);
+        if (!arn.isIn(request.bucketRegionName)) {
+            return (`${request.destinationArn} is in ${arn.regionName}, and an S3 event ` +
+                "notification destination queue must be in the Bucket's Region, " +
+                `${request.bucketRegionName}.`);
+        }
+        return this.queue(arn).sendRefusal(request);
+    }
+    /**
+     * Send the event document to the queue.
+     */
+    async send(request, body) {
+        await this.queue(SimS3NotificationQueueArn.parse(request.destinationArn)).send(request, body);
+    }
+    queue(arn) {
+        return new SimS3NotificationQueue({
+            arn,
+            scope: this.simAws.accountRegionScope(arn.accountId, arn.regionName),
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-s3-notification-queues.js.map

package/dist/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-queues.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-aws-s3-notification-queues.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAO/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAA4C;QAE5C,MAAM,GAAG,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,OAAO,CACL,GAAG,OAAO,CAAC,cAAc,UAAU,GAAG,CAAC,UAAU,oBAAoB;gBACrE,iEAAiE;gBACjE,GAAG,OAAO,CAAC,gBAAgB,GAAG,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,OAA4C,EAC5C,IAAY;QAEZ,MAAM,IAAI,CAAC,KAAK,CACd,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CACxD,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,GAA8B;QAC1C,OAAO,IAAI,sBAAsB,CAAC;YAChC,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.d.ts

@@ -0,0 +1,33 @@
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { AwsRegionName } from "../../../../aws/sim-aws-region.js";
+/**
+ * The SQS queue ARN a notification configuration names.
+ *
+ * A queue ARN has no resource type segment, so the queue name follows the
+ * Account id directly and the shared ARN reader cannot read one.
+ */
+export declare class SimS3NotificationQueueArn {
+    readonly regionName: AwsRegionName;
+    readonly accountId: SimAwsAccountId;
+    readonly queueName: string;
+    private constructor();
+    /**
+     * Read an SQS queue ARN, refusing anything else.
+     *
+     * A FIFO queue is refused by its name, as real S3 refuses one as an event
+     * notification destination. Simulated SQS has no FIFO queues either, so
+     * without this the refusal would be that the queue does not exist, which
+     * points at the wrong thing to fix.
+     */
+    static parse(arn: string): SimS3NotificationQueueArn;
+    /**
+     * The URL an SQS request names this queue by.
+     */
+    get queueUrl(): string;
+    /**
+     * Whether this queue is in a Region, which a destination queue has to share
+     * with the Bucket notifying it.
+     */
+    isIn(regionName: string): boolean;
+}
+//# sourceMappingURL=sim-s3-notification-queue-arn.d.ts.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queue-arn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOvE;;;;;GAKG;AACH,qBAAa,yBAAyB;IACpC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,SAAS,EAAE,MAAM,CAAC;IAElC,OAAO,eAQN;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,yBAAyB,CA+BnD;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,CAMrB;IAED;;;OAGG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEhC;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.js

@@ -0,0 +1,64 @@
+import { sqsQueueUrl } from "../../../../sqs/queue/sim-sqs-queue-arn.js";
+import { SimS3InvalidArgument, SimS3NotImplemented, } from "../../../error/sim-s3.error.js";
+/**
+ * The SQS queue ARN a notification configuration names.
+ *
+ * A queue ARN has no resource type segment, so the queue name follows the
+ * Account id directly and the shared ARN reader cannot read one.
+ */
+export class SimS3NotificationQueueArn {
+    regionName;
+    accountId;
+    queueName;
+    constructor(regionName, accountId, queueName) {
+        this.regionName = regionName;
+        this.accountId = accountId;
+        this.queueName = queueName;
+    }
+    /**
+     * Read an SQS queue ARN, refusing anything else.
+     *
+     * A FIFO queue is refused by its name, as real S3 refuses one as an event
+     * notification destination. Simulated SQS has no FIFO queues either, so
+     * without this the refusal would be that the queue does not exist, which
+     * points at the wrong thing to fix.
+     */
+    static parse(arn) {
+        const [prefix, partition, service, region, accountId, name, extra] = arn.split(":");
+        if (prefix !== "arn" ||
+            partition !== "aws" ||
+            service !== "sqs" ||
+            region === undefined ||
+            region === "" ||
+            accountId === undefined ||
+            accountId === "" ||
+            name === undefined ||
+            name === "" ||
+            extra !== undefined) {
+            throw new SimS3InvalidArgument(`${arn} is not an SQS queue ARN.`);
+        }
+        if (name.endsWith(".fifo")) {
+            throw new SimS3NotImplemented(`Cannot notify ${arn}: a FIFO queue is not a valid S3 event ` +
+                "notification destination, and simulated SQS has no FIFO queues.");
+        }
+        return new SimS3NotificationQueueArn(region, accountId, name);
+    }
+    /**
+     * The URL an SQS request names this queue by.
+     */
+    get queueUrl() {
+        return sqsQueueUrl({
+            regionName: this.regionName,
+            accountId: this.accountId,
+            name: this.queueName,
+        });
+    }
+    /**
+     * Whether this queue is in a Region, which a destination queue has to share
+     * with the Bucket notifying it.
+     */
+    isIn(regionName) {
+        return this.regionName === regionName;
+    }
+}
+//# sourceMappingURL=sim-s3-notification-queue-arn.js.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queue-arn.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queue-arn.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACpB,UAAU,CAAgB;IAC1B,SAAS,CAAkB;IAC3B,SAAS,CAAS;IAElC,YACE,UAAyB,EACzB,SAA0B,EAC1B,SAAiB;QAEjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,GAAW;QACtB,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,GAChE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjB,IACE,MAAM,KAAK,KAAK;YAChB,SAAS,KAAK,KAAK;YACnB,OAAO,KAAK,KAAK;YACjB,MAAM,KAAK,SAAS;YACpB,MAAM,KAAK,EAAE;YACb,SAAS,KAAK,SAAS;YACvB,SAAS,KAAK,EAAE;YAChB,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,EAAE;YACX,KAAK,KAAK,SAAS,EACnB,CAAC;YACD,MAAM,IAAI,oBAAoB,CAAC,GAAG,GAAG,2BAA2B,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,GAAG,yCAAyC;gBAC3D,iEAAiE,CACpE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,yBAAyB,CAClC,MAAuB,EACvB,SAA4B,EAC5B,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,WAAW,CAAC;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,UAAkB;QACrB,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC;IACxC,CAAC;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue.d.ts

@@ -0,0 +1,33 @@
+import type { SimAwsAccountRegionContainer } from "../../../../aws/sim-aws-account-region-scope.js";
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationQueueArn } from "./sim-s3-notification-queue-arn.js";
+interface SimS3NotificationQueueProperties {
+    readonly arn: SimS3NotificationQueueArn;
+    readonly scope: SimAwsAccountRegionContainer;
+}
+/**
+ * One queue an S3 Bucket is notifying, in the Account and Region its ARN names.
+ *
+ * Everything here is asked of the queue's own Account, which is what makes a
+ * queue in another Account reachable: its policy is the grant, and its
+ * Account's IAM is what evaluates it.
+ */
+export declare class SimS3NotificationQueue {
+    private readonly arn;
+    private readonly scope;
+    constructor(properties: SimS3NotificationQueueProperties);
+    /**
+     * Why S3 may not send to this queue, or nothing when it may.
+     */
+    sendRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Send one message body to this queue as the S3 service principal.
+     *
+     * This goes through the ordinary SendMessage path rather than putting a
+     * message on the queue directly, so a delivered event is the same thing an
+     * SDK caller would have sent, and is authorized again on the way in.
+     */
+    send(request: SimS3NotificationDestinationRequest, body: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-s3-notification-queue.d.ts.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queue.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAEpG,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;OAEG;IACH,WAAW,CACT,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAyBpB;IAED;;;;;;OAMG;IACG,IAAI,CACR,OAAO,EAAE,mCAAmC,EAC5C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CASf;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue.js

@@ -0,0 +1,55 @@
+import { SimSqsServiceSendAuthorizer } from "../../../../sqs/command/authorize/sim-sqs-service-send-authorizer.js";
+import { simS3ServicePrincipal } from "../sim-s3-service-principal.js";
+/**
+ * One queue an S3 Bucket is notifying, in the Account and Region its ARN names.
+ *
+ * Everything here is asked of the queue's own Account, which is what makes a
+ * queue in another Account reachable: its policy is the grant, and its
+ * Account's IAM is what evaluates it.
+ */
+export class SimS3NotificationQueue {
+    arn;
+    scope;
+    constructor(properties) {
+        this.arn = properties.arn;
+        this.scope = properties.scope;
+    }
+    /**
+     * Why S3 may not send to this queue, or nothing when it may.
+     */
+    sendRefusal(request) {
+        const queue = this.scope.sqs().findQueue(this.arn.queueName);
+        if (queue === undefined) {
+            return `${request.destinationArn} is not a simulated SQS queue.`;
+        }
+        const decision = new SimSqsServiceSendAuthorizer({
+            iam: this.scope.iam(),
+        }).authorize({
+            queue,
+            servicePrincipal: simS3ServicePrincipal,
+            sourceArn: request.bucketArn,
+            sourceAccount: request.bucketOwnerAccountId,
+        });
+        if (decision.isDenied) {
+            return (`The queue policy of ${request.destinationArn} does not allow ` +
+                `${simS3ServicePrincipal} to send to it for ${request.bucketArn}. ` +
+                "Grant sqs:SendMessage with the queue's Policy attribute.");
+        }
+        return undefined;
+    }
+    /**
+     * Send one message body to this queue as the S3 service principal.
+     *
+     * This goes through the ordinary SendMessage path rather than putting a
+     * message on the queue directly, so a delivered event is the same thing an
+     * SDK caller would have sent, and is authorized again on the way in.
+     */
+    async send(request, body) {
+        await this.scope.sqs().sendMessage({ input: { QueueUrl: this.arn.queueUrl, MessageBody: body } }, {
+            caller: { kind: "service", service: simS3ServicePrincipal },
+            sourceArn: request.bucketArn,
+            sourceAccount: request.bucketOwnerAccountId,
+        });
+    }
+}
+//# sourceMappingURL=sim-s3-notification-queue.js.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queue.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sEAAsE,CAAC;AAEnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAQvE;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,WAAW,CACT,OAA4C;QAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,GAAG,OAAO,CAAC,cAAc,gCAAgC,CAAC;QACnE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,2BAA2B,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,KAAK;YACL,gBAAgB,EAAE,qBAAqB;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,uBAAuB,OAAO,CAAC,cAAc,kBAAkB;gBAC/D,GAAG,qBAAqB,sBAAsB,OAAO,CAAC,SAAS,IAAI;gBACnE,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CACR,OAA4C,EAC5C,IAAY;QAEZ,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAChC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAC7D;YACE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE;YAC3D,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queues.d.ts

@@ -0,0 +1,23 @@
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+/**
+ * The narrow slice of simulated SQS that S3 event notification needs.
+ *
+ * S3 asks two questions of a queue: whether it may send to it, and then to send
+ * to it. Both are asked by ARN, because a notification configuration names a
+ * queue by ARN and that ARN can name another Account.
+ */
+export interface SimS3NotificationQueues {
+    /**
+     * Why S3 may not send to the queue, or nothing when it may.
+     *
+     * A reason rather than a boolean, because both the configuration-time
+     * refusal and the delivery-time record repeat it back to whoever has to fix
+     * it.
+     */
+    sendRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Send one message body to the queue.
+     */
+    send(request: SimS3NotificationDestinationRequest, body: string): Promise<void>;
+}
+//# sourceMappingURL=sim-s3-notification-queues.d.ts.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queues.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queues.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAEjG;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,mCAAmC,GAAG,MAAM,GAAG,SAAS,CAAC;IAE9E;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,mCAAmC,EAC5C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queues.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-notification-queues.js.map

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-queues.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-notification-queues.ts"],"names":[],"mappings":""}

package/dist/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.d.ts

@@ -0,0 +1,40 @@
+import type { SimS3NotificationDeliveryRequest, SimS3NotificationDestination, SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationQueues } from "./sim-s3-notification-queues.js";
+interface SimS3SqsNotificationDestinationProperties {
+    readonly queues: SimS3NotificationQueues;
+}
+/**
+ * A simulated SQS queue as somewhere S3 sends Object events.
+ *
+ * The whole `Records` document goes on the queue as one message body, which is
+ * the double envelope a consumer has to reach through: the SQS message carries
+ * the S3 event document as text, so a handler parses `record.body` before it
+ * can read a key out of it.
+ *
+ * The same question is asked twice on purpose, as it is for a function
+ * destination. Real S3 checks the queue policy when the configuration is
+ * applied and checks it again for every event, so a permission removed
+ * afterwards stops delivery.
+ */
+export declare class SimS3SqsNotificationDestination implements SimS3NotificationDestination {
+    private readonly queues;
+    constructor(properties: SimS3SqsNotificationDestinationProperties);
+    /**
+     * Refuse a queue the Bucket may not send to.
+     *
+     * Real S3 answers InvalidArgument for a destination it could not validate,
+     * which is what a queue policy that does not admit `s3.amazonaws.com`
+     * produces.
+     */
+    validate(request: SimS3NotificationDestinationRequest): void;
+    /**
+     * Put the event document on the queue, if it still admits this Bucket.
+     *
+     * The refusal is asked for before sending rather than left to the send,
+     * which authorizes the same way, so that a queue policy saying no is recorded
+     * as a refusal rather than as a fault in the simulation.
+     */
+    deliver(request: SimS3NotificationDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-s3-sqs-notification-destination.d.ts.map

package/dist/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-sqs-notification-destination.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,mCAAmC,EACpC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,UAAU,yCAAyC;IACjD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,+BAAgC,YAAW,4BAA4B;IAClF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAEjD,YAAY,UAAU,EAAE,yCAAyC,EAEhE;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,mCAAmC,GAAG,IAAI,CAQ3D;IAED;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAatE;CACF"}

package/dist/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.js

@@ -0,0 +1,51 @@
+import { jsonStringify } from "../../../../../util/type-guard/json.js";
+import { SimS3InvalidArgument } from "../../../error/sim-s3.error.js";
+import { SimS3NotificationNotPermitted } from "../../../error/sim-s3-notification.error.js";
+import { simS3EventRecordsDocument } from "../../event/sim-s3-event-records.js";
+/**
+ * A simulated SQS queue as somewhere S3 sends Object events.
+ *
+ * The whole `Records` document goes on the queue as one message body, which is
+ * the double envelope a consumer has to reach through: the SQS message carries
+ * the S3 event document as text, so a handler parses `record.body` before it
+ * can read a key out of it.
+ *
+ * The same question is asked twice on purpose, as it is for a function
+ * destination. Real S3 checks the queue policy when the configuration is
+ * applied and checks it again for every event, so a permission removed
+ * afterwards stops delivery.
+ */
+export class SimS3SqsNotificationDestination {
+    queues;
+    constructor(properties) {
+        this.queues = properties.queues;
+    }
+    /**
+     * Refuse a queue the Bucket may not send to.
+     *
+     * Real S3 answers InvalidArgument for a destination it could not validate,
+     * which is what a queue policy that does not admit `s3.amazonaws.com`
+     * produces.
+     */
+    validate(request) {
+        const refusal = this.queues.sendRefusal(request);
+        if (refusal !== undefined) {
+            throw new SimS3InvalidArgument(`Unable to validate the following destination configurations: ${refusal}`);
+        }
+    }
+    /**
+     * Put the event document on the queue, if it still admits this Bucket.
+     *
+     * The refusal is asked for before sending rather than left to the send,
+     * which authorizes the same way, so that a queue policy saying no is recorded
+     * as a refusal rather than as a fault in the simulation.
+     */
+    async deliver(request) {
+        const refusal = this.queues.sendRefusal(request);
+        if (refusal !== undefined) {
+            throw new SimS3NotificationNotPermitted(refusal);
+        }
+        await this.queues.send(request, jsonStringify(simS3EventRecordsDocument(request.event, request.configurationId)));
+    }
+}
+//# sourceMappingURL=sim-s3-sqs-notification-destination.js.map

package/dist/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-sqs-notification-destination.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/sqs/sim-s3-sqs-notification-destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAYhF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,+BAA+B;IACzB,MAAM,CAA0B;IAEjD,YAAY,UAAqD;QAC/D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAA4C;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAC5B,gEAAgE,OAAO,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,OAAyC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,OAAO,EACP,aAAa,CACX,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAClE,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/sim-s3-notification-dispatcher.d.ts

@@ -1,4 +1,4 @@
-import type { SimS3LambdaNotification } from "../bucket/notification/sim-s3-lambda-notification.js";
+import type { SimS3Notification } from "../bucket/notification/sim-s3-notification.js";
 import type { SimS3NotificationDestinations } from "./destination/sim-s3-notification-destination.js";
 import type { SimS3ObjectEvent } from "./event/sim-s3-object-event.js";
 import { SimS3NotificationDeliveryFailure } from "./sim-s3-notification-failures.js";
@@ -27,7 +27,7 @@ export declare class SimS3NotificationDispatcher {
     /**
      * Deliver one event to the destination one configuration names.
      */
-    deliver(notification: SimS3LambdaNotification, event: SimS3ObjectEvent): Promise<void>;
+    deliver(notification: SimS3Notification, event: SimS3ObjectEvent): Promise<void>;
 }
 export {};
 //# sourceMappingURL=sim-s3-notification-dispatcher.d.ts.map

package/dist/service/s3/notification/sim-s3-notification-dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-notification-dispatcher.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/notification/sim-s3-notification-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AACpG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACtG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EACL,gCAAgC,EAEjC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,6BAA6B,CAAC;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,SAAS,gCAAgC,EAAE,CAElE;IAED;;OAEG;IACG,OAAO,CACX,YAAY,EAAE,uBAAuB,EACrC,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAqBf;CACF"}
+{"version":3,"file":"sim-s3-notification-dispatcher.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/notification/sim-s3-notification-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC;AACtG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EACL,gCAAgC,EAEjC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,6BAA6B,CAAC;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,SAAS,gCAAgC,EAAE,CAElE;IAED;;OAEG;IACG,OAAO,CACX,YAAY,EAAE,iBAAiB,EAC/B,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAwBf;CACF"}

package/dist/service/s3/notification/sim-s3-notification-dispatcher.js

@@ -29,10 +29,13 @@ export class SimS3NotificationDispatcher {
     async deliver(notification, event) {
         this.ceiling.take(event.bucketName);
         try {
-            await this.destinations.resolve(notification.functionArn).deliver({
-                destinationArn: notification.functionArn,
+            await this.destinations
+                .resolve(notification.destinationService, notification.destinationArn)
+                .deliver({
+                destinationArn: notification.destinationArn,
                 bucketArn: event.bucketArn,
                 bucketOwnerAccountId: event.ownerAccountId,
+                bucketRegionName: event.regionName,
                 configurationId: notification.id,
                 event,
             });
@@ -40,7 +43,7 @@ export class SimS3NotificationDispatcher {
         catch (error) {
             this.failures.record(new SimS3NotificationDeliveryFailure({
                 event,
-                destinationArn: notification.functionArn,
+                destinationArn: notification.destinationArn,
                 configurationId: notification.id,
                 error,
             }));

package/dist/service/s3/notification/sim-s3-notification-dispatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-notification-dispatcher.js","sourceRoot":"","sources":["../../../../src/service/s3/notification/sim-s3-notification-dispatcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EACL,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAO3C;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAgC;IAC5C,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC3C,OAAO,CAA2B;IAEnD,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,YAAqC,EACrC,KAAuB;QAEvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;gBAChE,cAAc,EAAE,YAAY,CAAC,WAAW;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,oBAAoB,EAAE,KAAK,CAAC,cAAc;gBAC1C,eAAe,EAAE,YAAY,CAAC,EAAE;gBAChC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,IAAI,gCAAgC,CAAC;gBACnC,KAAK;gBACL,cAAc,EAAE,YAAY,CAAC,WAAW;gBACxC,eAAe,EAAE,YAAY,CAAC,EAAE;gBAChC,KAAK;aACN,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-s3-notification-dispatcher.js","sourceRoot":"","sources":["../../../../src/service/s3/notification/sim-s3-notification-dispatcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EACL,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAO3C;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAgC;IAC5C,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC3C,OAAO,CAA2B;IAEnD,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,YAA+B,EAC/B,KAAuB;QAEvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY;iBACpB,OAAO,CAAC,YAAY,CAAC,kBAAkB,EAAE,YAAY,CAAC,cAAc,CAAC;iBACrE,OAAO,CAAC;gBACP,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,oBAAoB,EAAE,KAAK,CAAC,cAAc;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,UAAU;gBAClC,eAAe,EAAE,YAAY,CAAC,EAAE;gBAChC,KAAK;aACN,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,IAAI,gCAAgC,CAAC;gBACnC,KAAK;gBACL,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,eAAe,EAAE,YAAY,CAAC,EAAE;gBAChC,KAAK;aACN,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/sqs/command/authorize/sim-sqs-condition-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sqs-condition-context.d.ts","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-condition-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAMhD"}
+{"version":3,"file":"sim-sqs-condition-context.d.ts","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-condition-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAShD"}