@kensio/yulin 1.10.1 → 1.10.2

package/dist/service/s3/command/get-object/get-object.handler.js

@@ -41,7 +41,7 @@ export class GetObjectCommandHandler {
         }
         // Complete request sequencing before authorization and storage access.
         await this.background.sequence();
-        this.authorizer.authorize(bucket, command.input.Key, options?.caller);
+        this.authorizer.authorize(bucket, command.input.Key, options);
         return await this.loader.load(bucket, command.input.Key);
     }
 }

package/dist/service/s3/command/get-object/get-object.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAYzD;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAsB;IAEjD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;CACF"}
+{"version":3,"file":"get-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAQzD;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAsB;IAEjD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAA6B;QAE7B,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/service/s3/command/get-public-access-block/get-public-access-block.handler.d.ts

@@ -1,6 +1,6 @@
 import type { CommandHandler } from "../../../../command/command-handler.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
 import type { SimGetPublicAccessBlockCommand, SimGetPublicAccessBlockCommandOutput } from "./get-public-access-block.command.js";
@@ -9,9 +9,6 @@ interface GetPublicAccessBlockCommandHandlerProperties {
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
-interface GetPublicAccessBlockCommandHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
 /**
  * Simulated S3 GetPublicAccessBlockCommand handler.
  */
@@ -26,7 +23,7 @@ export declare class GetPublicAccessBlockCommandHandler implements CommandHandle
      * Every simulated Bucket has settings, so unlike the Bucket policy there is
      * no missing-configuration case to report.
      */
-    handle(command: SimGetPublicAccessBlockCommand, options?: GetPublicAccessBlockCommandHandlerOptions): Promise<SimGetPublicAccessBlockCommandOutput>;
+    handle(command: SimGetPublicAccessBlockCommand, options?: SimS3RequestOptions): Promise<SimGetPublicAccessBlockCommandOutput>;
 }
 export {};
 //# sourceMappingURL=get-public-access-block.handler.d.ts.map

package/dist/service/s3/command/get-public-access-block/get-public-access-block.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-public-access-block.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-public-access-block/get-public-access-block.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,8BAA8B,EAC9B,oCAAoC,EACrC,MAAM,sCAAsC,CAAC;AAE9C,UAAU,4CAA4C;IACpD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,yCAAyC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,kCAAmC,YAAW,cAAc,CACvE,8BAA8B,EAC9B,oCAAoC,CACrC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,4CAA4C,EAUnE;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,yCAAyC,GAClD,OAAO,CAAC,oCAAoC,CAAC,CAmB/C;CACF"}
+{"version":3,"file":"get-public-access-block.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-public-access-block/get-public-access-block.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,8BAA8B,EAC9B,oCAAoC,EACrC,MAAM,sCAAsC,CAAC;AAE9C,UAAU,4CAA4C;IACpD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,kCAAmC,YAAW,cAAc,CACvE,8BAA8B,EAC9B,oCAAoC,CACrC;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,4CAA4C,EAUnE;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,oCAAoC,CAAC,CAmB/C;CACF"}

package/dist/service/s3/command/get-public-access-block/get-public-access-block.handler.js

@@ -27,7 +27,7 @@ export class GetPublicAccessBlockCommandHandler {
         const bucketName = command.input.Bucket;
         const bucket = requireSimS3Bucket(this.buckets, bucketName);
         await this.background.sequence();
-        this.authorizer.authorizeRead(bucket, options?.caller);
+        this.authorizer.authorizeRead(bucket, options);
         return {
             PublicAccessBlockConfiguration: bucket
                 .getPublicAccessBlock()

package/dist/service/s3/command/get-public-access-block/get-public-access-block.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-public-access-block.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-public-access-block/get-public-access-block.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAK5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AACnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgBjE;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAI5B,OAAO,CAAoC;IAC3C,UAAU,CAAmC;IAC7C,UAAU,CAAsB;IAEjD,YAAY,UAAwD;QAClE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAmD;QAEnD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,0CAA0C,CAC3C,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvD,OAAO;YACL,8BAA8B,EAAE,MAAM;iBACnC,oBAAoB,EAAE;iBACtB,eAAe,EAAE;YACpB,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"get-public-access-block.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-public-access-block/get-public-access-block.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAK5F,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AACnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAYjE;;GAEG;AACH,MAAM,OAAO,kCAAkC;IAI5B,OAAO,CAAoC;IAC3C,UAAU,CAAmC;IAC7C,UAAU,CAAsB;IAEjD,YAAY,UAAwD;QAClE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAA6B;QAE7B,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,0CAA0C,CAC3C,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE/C,OAAO;YACL,8BAA8B,EAAE,MAAM;iBACnC,oBAAoB,EAAE;iBACtB,eAAe,EAAE;YACpB,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/list-buckets/list-buckets-authorizer.d.ts

@@ -1,5 +1,5 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface ListBucketsAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -28,7 +28,7 @@ export declare class ListBucketsAuthorizer {
      * omitted caller, which defaults to Account root, from an explicit anonymous
      * caller, which has no identity policy permissions.
      */
-    authorize(caller?: SimAwsCaller): void;
+    authorize(options?: SimS3RequestOptions): void;
 }
 export {};
 //# sourceMappingURL=list-buckets-authorizer.d.ts.map

package/dist/service/s3/command/list-buckets/list-buckets-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-buckets-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAyB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAO;IAEvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAcrC;CACF"}
+{"version":3,"file":"list-buckets-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAyB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAO;IAEvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAe7C;CACF"}

package/dist/service/s3/command/list-buckets/list-buckets-authorizer.js

@@ -1,4 +1,5 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
 /**
  * Applies IAM authorization to an S3 ListBuckets request.
  *
@@ -26,11 +27,12 @@ export class ListBucketsAuthorizer {
      * omitted caller, which defaults to Account root, from an explicit anonymous
      * caller, which has no identity policy permissions.
      */
-    authorize(caller) {
+    authorize(options) {
         const decision = this.iam.authorize({
             action: ListBucketsAuthorizer.action,
             resource: ListBucketsAuthorizer.resource,
-            caller,
+            caller: options?.caller,
+            conditionContext: simS3ConditionContext(options),
         });
         if (decision.isDenied) {
             throw new SimIamAccessDenied({

package/dist/service/s3/command/list-buckets/list-buckets-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-buckets-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAU,MAAM,GAAG,qBAAqB,CAAC;IAC/C,MAAM,CAAU,QAAQ,GAAG,GAAG,CAAC;IAEtB,GAAG,CAA0B;IAE9C,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;YACxC,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qBAAqB,CAAC,MAAM;gBACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"list-buckets-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAOjF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAU,MAAM,GAAG,qBAAqB,CAAC;IAC/C,MAAM,CAAU,QAAQ,GAAG,GAAG,CAAC;IAEtB,GAAG,CAA0B;IAE9C,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,OAA6B;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;YACxC,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;SACjD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qBAAqB,CAAC,MAAM;gBACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/list-buckets/list-buckets.handler.d.ts

@@ -3,15 +3,12 @@ import type { SimListBucketsCommand, SimListBucketsCommandOutput } from "./list-
 import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface ListBucketsCommandHandlerProperties {
     readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
-interface ListBucketsCommandHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
 /**
  * Simulated S3 ListBucketsCommand handler.
  *
@@ -32,7 +29,7 @@ export declare class ListBucketsCommandHandler implements CommandHandler<SimList
      * Once authorized, page construction is delegated so this handler remains
      * focused on coordinating request-level concerns.
      */
-    handle(command: SimListBucketsCommand, options?: ListBucketsCommandHandlerOptions): Promise<SimListBucketsCommandOutput>;
+    handle(command: SimListBucketsCommand, options?: SimS3RequestOptions): Promise<SimListBucketsCommandOutput>;
 }
 export {};
 //# sourceMappingURL=list-buckets.handler.d.ts.map

package/dist/service/s3/command/list-buckets/list-buckets.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-buckets.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,cAAc,CAC9D,qBAAqB,EACrB,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,mCAAmC,EAS1D;IAED;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,gCAAgC,GACzC,OAAO,CAAC,2BAA2B,CAAC,CAUtC;CACF"}
+{"version":3,"file":"list-buckets.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,cAAc,CAC9D,qBAAqB,EACrB,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,mCAAmC,EAS1D;IAED;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,2BAA2B,CAAC,CAUtC;CACF"}

package/dist/service/s3/command/list-buckets/list-buckets.handler.js

@@ -30,7 +30,7 @@ export class ListBucketsCommandHandler {
     async handle(command, options) {
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
-        this.authorizer.authorize(options?.caller);
+        this.authorizer.authorize(options);
         return {
             ...this.pageBuilder.build(command.input),
             $metadata: {},

package/dist/service/s3/command/list-buckets/list-buckets.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-buckets.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAInB,UAAU,CAAwB;IAClC,WAAW,CAAyB;IACpC,UAAU,CAAsB;IAEjD,YAAY,UAA+C;QACzD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAA0C;QAE1C,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACxC,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"list-buckets.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAInB,UAAU,CAAwB;IAClC,WAAW,CAAyB;IACpC,UAAU,CAAsB;IAEjD,YAAY,UAA+C;QACzD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAA6B;QAE7B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEnC,OAAO;YACL,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACxC,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/list-objects/list-objects-authorizer.d.ts

@@ -1,6 +1,6 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface ListObjectsAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -8,7 +8,7 @@ interface ListObjectsAuthorizationInput {
     readonly bucket: SimS3Bucket;
     readonly prefix?: string | undefined;
     readonly maxKeys: number;
-    readonly caller?: SimAwsCaller | undefined;
+    readonly options?: SimS3RequestOptions | undefined;
 }
 /**
  * Applies IAM authorization to an S3 ListObjects request.

package/dist/service/s3/command/list-objects/list-objects-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-objects-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAEjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CA8BpD;CACF"}
+{"version":3,"file":"list-objects-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACpD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAEjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CA+BpD;CACF"}

package/dist/service/s3/command/list-objects/list-objects-authorizer.js

@@ -1,4 +1,5 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
 /**
  * Applies IAM authorization to an S3 ListObjects request.
  *
@@ -26,8 +27,9 @@ export class ListObjectsAuthorizer {
         const decision = this.iam.authorize({
             action: ListObjectsAuthorizer.action,
             resource,
-            caller: input.caller,
+            caller: input.options?.caller,
             conditionContext: {
+                ...simS3ConditionContext(input.options),
                 "s3:prefix": input.prefix ?? "",
                 "s3:max-keys": input.maxKeys,
             },

package/dist/service/s3/command/list-objects/list-objects-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-objects-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAczE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAU,MAAM,GAAG,eAAe,CAAC;IAEhC,GAAG,CAA0B;IAE9C,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAoC;QAC5C,MAAM,QAAQ,GAAG,gBAAgB,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE;gBAChB,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;gBAC/B,aAAa,EAAE,KAAK,CAAC,OAAO;aAC7B;YACD,gBAAgB,EACd,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,cAAc;wBAC1B,WAAW,EAAE,QAAQ;qBACtB;iBACF;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qBAAqB,CAAC,MAAM;gBACpC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"list-objects-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAcjF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAU,MAAM,GAAG,eAAe,CAAC;IAEhC,GAAG,CAA0B;IAE9C,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAoC;QAC5C,MAAM,QAAQ,GAAG,gBAAgB,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM;YAC7B,gBAAgB,EAAE;gBAChB,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;gBAC/B,aAAa,EAAE,KAAK,CAAC,OAAO;aAC7B;YACD,gBAAgB,EACd,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,cAAc;wBAC1B,WAAW,EAAE,QAAQ;qBACtB;iBACF;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qBAAqB,CAAC,MAAM;gBACpC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/list-objects/list-objects.handler.d.ts

@@ -3,15 +3,12 @@ import type { SimListObjectsCommand, SimListObjectsCommandOutput } from "./list-
 import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface ListObjectsCommandHandlerProperties {
     readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
-interface ListObjectsCommandHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
 /**
  * Simulated S3 ListObjectsCommand handler.
  *
@@ -30,7 +27,7 @@ export declare class ListObjectsCommandHandler implements CommandHandler<SimList
      * existing S3 error behavior. Authorization occurs before storage listing so
      * a denied caller cannot inspect Object keys or sizes.
      */
-    handle(command: SimListObjectsCommand, options?: ListObjectsCommandHandlerOptions): Promise<SimListObjectsCommandOutput>;
+    handle(command: SimListObjectsCommand, options?: SimS3RequestOptions): Promise<SimListObjectsCommandOutput>;
 }
 export {};
 //# sourceMappingURL=list-objects.handler.d.ts.map

package/dist/service/s3/command/list-objects/list-objects.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-objects.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,cAAc,CAC9D,qBAAqB,EACrB,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,mCAAmC,EAU1D;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,gCAAgC,GACzC,OAAO,CAAC,2BAA2B,CAAC,CA0BtC;CACF"}
+{"version":3,"file":"list-objects.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,cAAc,CAC9D,qBAAqB,EACrB,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,mCAAmC,EAU1D;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,2BAA2B,CAAC,CA0BtC;CACF"}

package/dist/service/s3/command/list-objects/list-objects.handler.js

@@ -41,7 +41,7 @@ export class ListObjectsCommandHandler {
             bucket,
             prefix: command.input.Prefix,
             maxKeys,
-            caller: options?.caller,
+            options,
         });
         return await this.pageBuilder.build({
             bucket,

package/dist/service/s3/command/list-objects/list-objects.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-objects.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAInB,OAAO,CAAoC;IAC3C,UAAU,CAAwB;IAClC,WAAW,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC3C,UAAU,CAAsB;IAEjD,YAAY,UAA+C;QACzD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAA0C;QAE1C,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACxB,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,OAAO;YACP,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"list-objects.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAInB,OAAO,CAAoC;IAC3C,UAAU,CAAwB;IAClC,WAAW,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC3C,UAAU,CAAsB;IAEjD,YAAY,UAA+C;QACzD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAA6B;QAE7B,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACxB,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,OAAO;YACP,OAAO;SACR,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/s3/command/notification/sim-s3-notification-authorizer.d.ts

@@ -1,6 +1,6 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface SimS3NotificationAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -22,11 +22,11 @@ export declare class SimS3NotificationAuthorizer {
     /**
      * Ensure the caller may read the Bucket's notification configuration.
      */
-    authorizeRead(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+    authorizeRead(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
     /**
      * Ensure the caller may replace the Bucket's notification configuration.
      */
-    authorizeWrite(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+    authorizeWrite(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
     private authorize;
 }
 export {};

package/dist/service/s3/command/notification/sim-s3-notification-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-notification-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/notification/sim-s3-notification-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAEjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAE9D;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAE/D;IAED,OAAO,CAAC,SAAS;CAqBlB"}
+{"version":3,"file":"sim-s3-notification-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/notification/sim-s3-notification-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAEjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAEtE;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAEvE;IAED,OAAO,CAAC,SAAS;CAsBlB"}

package/dist/service/s3/command/notification/sim-s3-notification-authorizer.js

@@ -1,6 +1,7 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
 import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
 import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
 /**
  * Applies IAM authorization to the S3 event notification commands.
  *
@@ -21,21 +22,22 @@ export class SimS3NotificationAuthorizer {
     /**
      * Ensure the caller may read the Bucket's notification configuration.
      */
-    authorizeRead(bucket, caller) {
-        this.authorize(SimS3NotificationAuthorizer.readAction, bucket, caller);
+    authorizeRead(bucket, options) {
+        this.authorize(SimS3NotificationAuthorizer.readAction, bucket, options);
     }
     /**
      * Ensure the caller may replace the Bucket's notification configuration.
      */
-    authorizeWrite(bucket, caller) {
-        this.authorize(SimS3NotificationAuthorizer.writeAction, bucket, caller);
+    authorizeWrite(bucket, options) {
+        this.authorize(SimS3NotificationAuthorizer.writeAction, bucket, options);
     }
-    authorize(action, bucket, caller) {
+    authorize(action, bucket, options) {
         const resource = simS3BucketArn(bucket.bucketName);
         const decision = this.iam.authorize({
             action,
             resource,
-            caller,
+            caller: options?.caller,
+            conditionContext: simS3ConditionContext(options),
             resourcePolicies: simS3BucketResourcePolicies(bucket),
         });
         if (decision.isDenied) {

package/dist/service/s3/command/notification/sim-s3-notification-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-notification-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/notification/sim-s3-notification-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;;;;;;;;GASG;AACH,MAAM,OAAO,2BAA2B;IAC9B,MAAM,CAAU,UAAU,GAAG,0BAA0B,CAAC;IACxD,MAAM,CAAU,WAAW,GAAG,0BAA0B,CAAC;IAEhD,GAAG,CAA0B;IAE9C,YAAY,UAAiD;QAC3D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAmB,EAAE,MAAqB;QACtD,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAmB,EAAE,MAAqB;QACvD,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAEO,SAAS,CACf,MAAc,EACd,MAAmB,EACnB,MAAqB;QAErB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-s3-notification-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/notification/sim-s3-notification-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAOjF;;;;;;;;;GASG;AACH,MAAM,OAAO,2BAA2B;IAC9B,MAAM,CAAU,UAAU,GAAG,0BAA0B,CAAC;IACxD,MAAM,CAAU,WAAW,GAAG,0BAA0B,CAAC;IAEhD,GAAG,CAA0B;IAE9C,YAAY,UAAiD;QAC3D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAmB,EAAE,OAA6B;QAC9D,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAmB,EAAE,OAA6B;QAC/D,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAEO,SAAS,CACf,MAAc,EACd,MAAmB,EACnB,OAA6B;QAE7B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;YAChD,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.d.ts

@@ -1,6 +1,6 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface SimS3PublicAccessBlockAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -20,11 +20,11 @@ export declare class SimS3PublicAccessBlockAuthorizer {
     /**
      * Ensure the caller may read the Bucket's Block Public Access settings.
      */
-    authorizeRead(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+    authorizeRead(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
     /**
      * Ensure the caller may replace or remove the Block Public Access settings.
      */
-    authorizeWrite(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+    authorizeWrite(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
     private authorize;
 }
 export {};

package/dist/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-public-access-block-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,0CAA0C;IAClD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAmC;IACrE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAEtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,0CAA0C,EAEjE;IAED;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAE9D;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAM/D;IAED,OAAO,CAAC,SAAS;CAqBlB"}
+{"version":3,"file":"sim-s3-public-access-block-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,0CAA0C;IAClD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAmC;IACrE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAEtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,0CAA0C,EAEjE;IAED;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAMtE;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAMvE;IAED,OAAO,CAAC,SAAS;CAsBlB"}

package/dist/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.js

@@ -1,6 +1,7 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
 import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
 import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
 /**
  * Applies IAM authorization to the S3 Block Public Access commands.
  *
@@ -19,21 +20,22 @@ export class SimS3PublicAccessBlockAuthorizer {
     /**
      * Ensure the caller may read the Bucket's Block Public Access settings.
      */
-    authorizeRead(bucket, caller) {
-        this.authorize(SimS3PublicAccessBlockAuthorizer.readAction, bucket, caller);
+    authorizeRead(bucket, options) {
+        this.authorize(SimS3PublicAccessBlockAuthorizer.readAction, bucket, options);
     }
     /**
      * Ensure the caller may replace or remove the Block Public Access settings.
      */
-    authorizeWrite(bucket, caller) {
-        this.authorize(SimS3PublicAccessBlockAuthorizer.writeAction, bucket, caller);
+    authorizeWrite(bucket, options) {
+        this.authorize(SimS3PublicAccessBlockAuthorizer.writeAction, bucket, options);
     }
-    authorize(action, bucket, caller) {
+    authorize(action, bucket, options) {
         const resource = simS3BucketArn(bucket.bucketName);
         const decision = this.iam.authorize({
             action,
             resource,
-            caller,
+            caller: options?.caller,
+            conditionContext: simS3ConditionContext(options),
             resourcePolicies: simS3BucketResourcePolicies(bucket),
         });
         if (decision.isDenied) {

package/dist/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-public-access-block-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IACnC,MAAM,CAAU,UAAU,GAAG,+BAA+B,CAAC;IAC7D,MAAM,CAAU,WAAW,GAAG,+BAA+B,CAAC;IAErD,GAAG,CAA0B;IAE9C,YAAY,UAAsD;QAChE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAmB,EAAE,MAAqB;QACtD,IAAI,CAAC,SAAS,CAAC,gCAAgC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAmB,EAAE,MAAqB;QACvD,IAAI,CAAC,SAAS,CACZ,gCAAgC,CAAC,WAAW,EAC5C,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAAc,EACd,MAAmB,EACnB,MAAqB;QAErB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-s3-public-access-block-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAOjF;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IACnC,MAAM,CAAU,UAAU,GAAG,+BAA+B,CAAC;IAC7D,MAAM,CAAU,WAAW,GAAG,+BAA+B,CAAC;IAErD,GAAG,CAA0B;IAE9C,YAAY,UAAsD;QAChE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAmB,EAAE,OAA6B;QAC9D,IAAI,CAAC,SAAS,CACZ,gCAAgC,CAAC,UAAU,EAC3C,MAAM,EACN,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAmB,EAAE,OAA6B;QAC/D,IAAI,CAAC,SAAS,CACZ,gCAAgC,CAAC,WAAW,EAC5C,MAAM,EACN,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAAc,EACd,MAAmB,EACnB,OAA6B;QAE7B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;YAChD,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-bucket-notification-configuration.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,KAAK,EAAE,iDAAiD,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,yBAAyB,CAAC,EACjC,mCAAmC,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,4BAA4B,CAAC,EACpC,SAAS,qCAAqC,EAAE,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,CAAC,EAC3B,SAAS,4BAA4B,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,mBAAmB,CAAC,EAC3B,SAAS,4BAA4B,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,CAAC,EACnB,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC"}
+{"version":3,"file":"put-bucket-notification-configuration.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,KAAK,EAAE,iDAAiD,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,yBAAyB,CAAC,EAC/B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,4BAA4B,CAAC,EAClC,SAAS,qCAAqC,EAAE,GAChD,SAAS,CAAC;IACd,QAAQ,CAAC,mBAAmB,CAAC,EACzB,SAAS,4BAA4B,EAAE,GACvC,SAAS,CAAC;IACd,QAAQ,CAAC,mBAAmB,CAAC,EACzB,SAAS,4BAA4B,EAAE,GACvC,SAAS,CAAC;IACd,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,CAAC,EACjB,SAAS,gCAAgC,EAAE,GAC3C,SAAS,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC"}

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.d.ts

@@ -1,6 +1,6 @@
 import type { CommandHandler } from "../../../../command/command-handler.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
 import type { SimS3NotificationDestinations } from "../../notification/destination/sim-s3-notification-destination.js";
@@ -11,9 +11,6 @@ interface PutBucketNotificationConfigurationHandlerProperties {
     readonly background?: BackgroundScheduler;
     readonly notificationDestinations: SimS3NotificationDestinations;
 }
-interface PutBucketNotificationConfigurationHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
 /**
  * Simulated S3 PutBucketNotificationConfiguration command handler.
  *
@@ -33,7 +30,7 @@ export declare class PutBucketNotificationConfigurationCommandHandler implements
      * then is anything stored, so a request the simulator refuses leaves the
      * Bucket's previous configuration exactly as it was.
      */
-    handle(command: SimPutBucketNotificationConfigurationCommand, options?: PutBucketNotificationConfigurationHandlerOptions): Promise<SimPutBucketNotificationConfigurationCommandOutput>;
+    handle(command: SimPutBucketNotificationConfigurationCommand, options?: SimS3RequestOptions): Promise<SimPutBucketNotificationConfigurationCommandOutput>;
 }
 export {};
 //# sourceMappingURL=put-bucket-notification-configuration.handler.d.ts.map

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-bucket-notification-configuration.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mEAAmE,CAAC;AAGvH,OAAO,KAAK,EACV,4CAA4C,EAC5C,kDAAkD,EACnD,MAAM,oDAAoD,CAAC;AAE5D,UAAU,mDAAmD;IAC3D,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;CAClE;AAED,UAAU,gDAAgD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gDAAiD,YAAW,cAAc,CACrF,4CAA4C,EAC5C,kDAAkD,CACnD;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IACjE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IAErE,YAAY,UAAU,EAAE,mDAAmD,EAc1E;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,4CAA4C,EACrD,OAAO,CAAC,EAAE,gDAAgD,GACzD,OAAO,CAAC,kDAAkD,CAAC,CA+B7D;CACF"}
+{"version":3,"file":"put-bucket-notification-configuration.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mEAAmE,CAAC;AAGvH,OAAO,KAAK,EACV,4CAA4C,EAC5C,kDAAkD,EACnD,MAAM,oDAAoD,CAAC;AAE5D,UAAU,mDAAmD;IAC3D,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;CAClE;AAED;;;;GAIG;AACH,qBAAa,gDAAiD,YAAW,cAAc,CACrF,4CAA4C,EAC5C,kDAAkD,CACnD;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IACjE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IAErE,YAAY,UAAU,EAAE,mDAAmD,EAc1E;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,4CAA4C,EACrD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kDAAkD,CAAC,CA+B7D;CACF"}

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.js

@@ -36,7 +36,7 @@ export class PutBucketNotificationConfigurationCommandHandler {
         assertDefined(input.NotificationConfiguration, "PutBucketNotificationConfigurationCommand.input.NotificationConfiguration");
         const bucket = requireSimS3Bucket(this.buckets, input.Bucket);
         await this.background.sequence();
-        this.authorizer.authorizeWrite(bucket, options?.caller);
+        this.authorizer.authorizeWrite(bucket, options);
         const configuration = this.reader.read(input.NotificationConfiguration);
         if (input.SkipDestinationValidation !== true) {
             this.destinations.check(bucket, configuration);

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-bucket-notification-configuration.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,uEAAuE,CAAC;AAK7H,OAAO,EAAE,iCAAiC,EAAE,MAAM,yEAAyE,CAAC;AAE5H,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAiBjE;;;;GAIG;AACH,MAAM,OAAO,gDAAgD;IAI1C,OAAO,CAAoC;IAC3C,UAAU,CAA8B;IACxC,UAAU,CAAsB;IAChC,YAAY,CAAoC;IAChD,MAAM,GAAG,IAAI,oCAAoC,EAAE,CAAC;IAErE,YAAY,UAA+D;QACzE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,wBAAwB,GACzB,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,iCAAiC,CACvD,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAAqD,EACrD,OAA0D;QAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,aAAa,CACX,KAAK,CAAC,MAAM,EACZ,wDAAwD,CACzD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,yBAAyB,EAC/B,2EAA2E,CAC5E,CAAC;QAEF,MAAM,MAAM,GAAG,kBAAkB,CAC/B,IAAI,CAAC,OAAO,EACZ,KAAK,CAAC,MAAyB,CAChC,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAExE,IAAI,KAAK,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7C,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"put-bucket-notification-configuration.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,uEAAuE,CAAC;AAK7H,OAAO,EAAE,iCAAiC,EAAE,MAAM,yEAAyE,CAAC;AAE5H,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAajE;;;;GAIG;AACH,MAAM,OAAO,gDAAgD;IAI1C,OAAO,CAAoC;IAC3C,UAAU,CAA8B;IACxC,UAAU,CAAsB;IAChC,YAAY,CAAoC;IAChD,MAAM,GAAG,IAAI,oCAAoC,EAAE,CAAC;IAErE,YAAY,UAA+D;QACzE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,wBAAwB,GACzB,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,iCAAiC,CACvD,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAAqD,EACrD,OAA6B;QAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,aAAa,CACX,KAAK,CAAC,MAAM,EACZ,wDAAwD,CACzD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,yBAAyB,EAC/B,2EAA2E,CAC5E,CAAC;QAEF,MAAM,MAAM,GAAG,kBAAkB,CAC/B,IAAI,CAAC,OAAO,EACZ,KAAK,CAAC,MAAyB,CAChC,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAExE,IAAI,KAAK,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7C,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.d.ts

@@ -1,6 +1,6 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
 interface PutBucketPolicyAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -14,7 +14,7 @@ export declare class PutBucketPolicyAuthorizer {
     /**
      * Ensure the caller may replace the Bucket policy.
      */
-    authorize(bucketName: SimS3BucketName, caller?: SimAwsCaller): void;
+    authorize(bucketName: SimS3BucketName, options?: SimS3RequestOptions): void;
 }
 export {};
 //# sourceMappingURL=put-bucket-policy-authorizer.d.ts.map

package/dist/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-bucket-policy-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAEtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAelE;CACF"}
+{"version":3,"file":"put-bucket-policy-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAEtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAgB1E;CACF"}

package/dist/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.js

@@ -1,4 +1,5 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
 /**
  * Applies IAM authorization to an S3 PutBucketPolicy request.
  */
@@ -11,12 +12,13 @@ export class PutBucketPolicyAuthorizer {
     /**
      * Ensure the caller may replace the Bucket policy.
      */
-    authorize(bucketName, caller) {
+    authorize(bucketName, options) {
         const resource = `arn:aws:s3:::${bucketName}`;
         const decision = this.iam.authorize({
             action: PutBucketPolicyAuthorizer.action,
             resource,
-            caller,
+            caller: options?.caller,
+            conditionContext: simS3ConditionContext(options),
         });
         if (decision.isDenied) {
             throw new SimIamAccessDenied({

package/dist/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-bucket-policy-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAOzE;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,MAAM,CAAU,MAAM,GAAG,oBAAoB,CAAC;IAErC,GAAG,CAA0B;IAE9C,YAAY,UAA+C;QACzD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAA2B,EAAE,MAAqB;QAC1D,MAAM,QAAQ,GAAG,gBAAgB,UAAU,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,yBAAyB,CAAC,MAAM;YACxC,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,yBAAyB,CAAC,MAAM;gBACxC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"put-bucket-policy-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAOjF;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,MAAM,CAAU,MAAM,GAAG,oBAAoB,CAAC;IAErC,GAAG,CAA0B;IAE9C,YAAY,UAA+C;QACzD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAA2B,EAAE,OAA6B;QAClE,MAAM,QAAQ,GAAG,gBAAgB,UAAU,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,yBAAyB,CAAC,MAAM;YACxC,QAAQ;YACR,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC;SACjD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,yBAAyB,CAAC,MAAM;gBACxC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}