@kensio/yulin 1.12.0 → 1.13.0

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-ksk-creator.js

@@ -0,0 +1,58 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { normalizeSimRoute53HostedZoneId } from "../../command/create-hosted-zone/sim-route53-zone-id.js";
+import { simCfnRoute53String } from "./sim-cfn-r53-dnssec-properties.js";
+const resourceType = "AWS::Route53::KeySigningKey";
+/**
+ * Creates simulated Route53 key-signing keys from CloudFormation Resources.
+ *
+ * Creation goes through `CreateKeySigningKey` rather than building the stored
+ * object, so a template gets the same KMS key checks and the same DNSSEC field
+ * derivation an SDK caller gets.
+ */
+export class SimCfnRoute53KskCreator {
+    route53;
+    constructor(properties) {
+        this.route53 = properties.route53;
+    }
+    /**
+     * Create a key-signing key from an AWS::Route53::KeySigningKey Resource.
+     */
+    async create(resource, properties) {
+        const hostedZoneId = this.string(resource, properties["HostedZoneId"], "HostedZoneId");
+        const name = this.string(resource, properties["Name"], "Name");
+        await this.route53.createKeySigningKey({
+            input: {
+                CallerReference: resource.logicalId,
+                HostedZoneId: hostedZoneId,
+                KeyManagementServiceArn: this.string(resource, properties["KeyManagementServiceArn"], "KeyManagementServiceArn"),
+                Name: name,
+                Status: this.string(resource, properties["Status"], "Status"),
+            },
+        });
+        const keySigningKey = this.route53.hostedZones
+            .get(normalizeSimRoute53HostedZoneId(hostedZoneId))
+            ?.dnssec.keys()
+            .find((key) => key.name === name);
+        assertDefined(keySigningKey, `sim Route53 key signing key ${name} after CloudFormation creation`);
+        return keySigningKey;
+    }
+    /**
+     * Delete a key-signing key an AWS::Route53::KeySigningKey Resource created.
+     *
+     * A key still signing cannot be deleted, and a template that deployed one
+     * active would otherwise be undeployable, so it is deactivated first. Real
+     * CloudFormation does the same thing on its way to removing the Resource.
+     */
+    async delete(resource, properties) {
+        const input = {
+            HostedZoneId: this.string(resource, properties["HostedZoneId"], "HostedZoneId"),
+            Name: this.string(resource, properties["Name"], "Name"),
+        };
+        await this.route53.deactivateKeySigningKey({ input });
+        await this.route53.deleteKeySigningKey({ input });
+    }
+    string(resource, value, name) {
+        return simCfnRoute53String(resource, value, resourceType, name);
+    }
+}
+//# sourceMappingURL=sim-cfn-r53-ksk-creator.js.map

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-ksk-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-r53-ksk-creator.js","sourceRoot":"","sources":["../../../../../src/service/route53/cfn/dnssec/sim-cfn-r53-ksk-creator.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAMnD;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACjB,OAAO,CAAa;IAErC,YAAY,UAA6C;QACvD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC9B,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,cAAc,CACf,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACrC,KAAK,EAAE;gBACL,eAAe,EAAE,QAAQ,CAAC,SAAS;gBACnC,YAAY,EAAE,YAAY;gBAC1B,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAClC,QAAQ,EACR,UAAU,CAAC,yBAAyB,CAAC,EACrC,yBAAyB,CAC1B;gBACD,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;aAC9D;SACF,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW;aAC3C,GAAG,CAAC,+BAA+B,CAAC,YAAY,CAAC,CAAC;YACnD,EAAE,MAAM,CAAC,IAAI,EAAE;aACd,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAEpC,aAAa,CACX,aAAa,EACb,+BAA+B,IAAI,gCAAgC,CACpE,CAAC;QAEF,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG;YACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,cAAc,CACf;YACD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;SACxD,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,MAAM,CACZ,QAAwB,EACxB,KAAsC,EACtC,IAAY;QAEZ,OAAO,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimRoute53HostedZone } from "../../hosted-zone/sim-route53-hosted-zone.js";
+import type { SimRoute53 } from "../../sim-route53.js";
+interface SimCfnRoute53ZoneSigningCreatorProperties {
+    readonly route53: SimRoute53;
+}
+/**
+ * Turns DNSSEC signing on for a hosted zone from a CloudFormation Resource.
+ *
+ * The Resource has no state of its own beyond the zone it names, so the
+ * simulated resource behind it is that hosted zone. Its `Ref` is the hosted
+ * zone ID, which is what the Resource's physical ID is on real
+ * CloudFormation.
+ */
+export declare class SimCfnRoute53ZoneSigningCreator {
+    private readonly route53;
+    constructor(properties: SimCfnRoute53ZoneSigningCreatorProperties);
+    /**
+     * Start signing the zone an AWS::Route53::DNSSEC Resource names.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimRoute53HostedZone>;
+    /**
+     * Stop signing the zone as the Resource is removed.
+     */
+    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    private hostedZoneId;
+}
+export {};
+//# sourceMappingURL=sim-cfn-r53-zone-signing-creator.d.ts.map

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-r53-zone-signing-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAKvD,UAAU,yCAAyC;IACjD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IAErC,YAAY,UAAU,EAAE,yCAAyC,EAEhE;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAgB/B;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAIf;IAED,OAAO,CAAC,YAAY;CAWrB"}

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.js

@@ -0,0 +1,42 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { normalizeSimRoute53HostedZoneId } from "../../command/create-hosted-zone/sim-route53-zone-id.js";
+import { simCfnRoute53String } from "./sim-cfn-r53-dnssec-properties.js";
+const resourceType = "AWS::Route53::DNSSEC";
+/**
+ * Turns DNSSEC signing on for a hosted zone from a CloudFormation Resource.
+ *
+ * The Resource has no state of its own beyond the zone it names, so the
+ * simulated resource behind it is that hosted zone. Its `Ref` is the hosted
+ * zone ID, which is what the Resource's physical ID is on real
+ * CloudFormation.
+ */
+export class SimCfnRoute53ZoneSigningCreator {
+    route53;
+    constructor(properties) {
+        this.route53 = properties.route53;
+    }
+    /**
+     * Start signing the zone an AWS::Route53::DNSSEC Resource names.
+     */
+    async create(resource, properties) {
+        const hostedZoneId = this.hostedZoneId(resource, properties);
+        await this.route53.enableHostedZoneDnssec({
+            input: { HostedZoneId: hostedZoneId },
+        });
+        const hostedZone = this.route53.hostedZones.get(normalizeSimRoute53HostedZoneId(hostedZoneId));
+        assertDefined(hostedZone, `sim Route53 Hosted Zone ${hostedZoneId} after enabling DNSSEC`);
+        return hostedZone;
+    }
+    /**
+     * Stop signing the zone as the Resource is removed.
+     */
+    async delete(resource, properties) {
+        await this.route53.disableHostedZoneDnssec({
+            input: { HostedZoneId: this.hostedZoneId(resource, properties) },
+        });
+    }
+    hostedZoneId(resource, properties) {
+        return simCfnRoute53String(resource, properties["HostedZoneId"], resourceType, "HostedZoneId");
+    }
+}
+//# sourceMappingURL=sim-cfn-r53-zone-signing-creator.js.map

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-r53-zone-signing-creator.js","sourceRoot":"","sources":["../../../../../src/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAG1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAM5C;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,OAAO,CAAa;IAErC,YAAY,UAAqD;QAC/D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;YACxC,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;SACtC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAC7C,+BAA+B,CAAC,YAAY,CAAC,CAC9C,CAAC;QACF,aAAa,CACX,UAAU,EACV,2BAA2B,YAAY,wBAAwB,CAChE,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;YACzC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,QAAwB,EACxB,UAAqC;QAErC,OAAO,mBAAmB,CACxB,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,YAAY,EACZ,cAAc,CACf,CAAC;IACJ,CAAC;CACF"}

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.d.ts

@@ -1,8 +1,12 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53 } from "../sim-route53.js";
+import type { SimCfnRoute53KskCreator } from "./dnssec/sim-cfn-r53-ksk-creator.js";
+import type { SimCfnRoute53ZoneSigningCreator } from "./dnssec/sim-cfn-r53-zone-signing-creator.js";
 interface SimCfnRoute53ResourceDeleterProperties {
     readonly route53: SimRoute53;
+    readonly keySigningKeyCreator: SimCfnRoute53KskCreator;
+    readonly zoneSigningCreator: SimCfnRoute53ZoneSigningCreator;
 }
 /**
  * Deletes the simulated Route53 resources a CloudFormation Stack created.
@@ -14,9 +18,14 @@ interface SimCfnRoute53ResourceDeleterProperties {
  * The Hosted Zone goes last, and only works because it does: DeleteHostedZone
  * refuses a zone that still holds records, and the record set Resources naming
  * the zone have already been taken off it by then.
+ *
+ * DNSSEC comes off the same way. Signing stops before the key-signing keys go,
+ * because a key that is still signing cannot be deleted.
  */
 export declare class SimCfnRoute53ResourceDeleter {
     private readonly route53;
+    private readonly keySigningKeyCreator;
+    private readonly zoneSigningCreator;
     private readonly hostedZoneResolver;
     constructor(properties: SimCfnRoute53ResourceDeleterProperties);
     /**

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-route53-resource-deleter.d.ts","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-deleter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAC/G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAMpD,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2C;IAE9E,YAAY,UAAU,EAAE,sCAAsC,EAK7D;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAgBf;YAEa,gBAAgB;YAUhB,eAAe;CA0B9B"}
+{"version":3,"file":"sim-cfn-route53-resource-deleter.d.ts","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-deleter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAC/G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAKpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,8CAA8C,CAAC;AAEpG,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,uBAAuB,CAAC;IACvD,QAAQ,CAAC,kBAAkB,EAAE,+BAA+B,CAAC;CAC9D;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA0B;IAC/D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAkC;IACrE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2C;IAE9E,YAAY,UAAU,EAAE,sCAAsC,EAO7D;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAwBf;YAEa,gBAAgB;YAUhB,eAAe;CA0B9B"}

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.js

@@ -11,12 +11,19 @@ import { assertDefined } from "../../../util/type-guard/defined.js";
  * The Hosted Zone goes last, and only works because it does: DeleteHostedZone
  * refuses a zone that still holds records, and the record set Resources naming
  * the zone have already been taken off it by then.
+ *
+ * DNSSEC comes off the same way. Signing stops before the key-signing keys go,
+ * because a key that is still signing cannot be deleted.
  */
 export class SimCfnRoute53ResourceDeleter {
     route53;
+    keySigningKeyCreator;
+    zoneSigningCreator;
     hostedZoneResolver;
     constructor(properties) {
         this.route53 = properties.route53;
+        this.keySigningKeyCreator = properties.keySigningKeyCreator;
+        this.zoneSigningCreator = properties.zoneSigningCreator;
         this.hostedZoneResolver = new SimCfnRoute53RecordSetHostedZoneResolver({
             route53: this.route53,
         });
@@ -34,6 +41,14 @@ export class SimCfnRoute53ResourceDeleter {
                 await this.deleteRecordSet(resource, properties);
                 return;
             }
+            case "KeySigningKey": {
+                await this.keySigningKeyCreator.delete(resource, properties);
+                return;
+            }
+            case "DNSSEC": {
+                await this.zoneSigningCreator.delete(resource, properties);
+                return;
+            }
             default: {
                 throw new Error(`Unsupported sim Route53 CloudFormation Resource ${resourceTypeName} deletion`);
             }

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-route53-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-deleter.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sDAAsD,CAAC;AACrG,OAAO,EAAE,wCAAwC,EAAE,MAAM,2DAA2D,CAAC;AACrH,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMpE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,4BAA4B;IACtB,OAAO,CAAa;IACpB,kBAAkB,CAA2C;IAE9E,YAAY,UAAkD;QAC5D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,wCAAwC,CAAC;YACrE,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,UAAqC;QAErC,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,mDAAmD,gBAAgB,WAAW,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAwB;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAA+C,CAAC;QAC5E,aAAa,CACX,UAAU,EACV,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CACvD,QAAQ,EACR,UAAU,CACX,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CACjD,QAAQ,EACR,UAAU,CACX,CAAC,KAAK,EAAE,CAAC;QAEV,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE;gBACL,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE;oBACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;iBAC9D;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW;aAC3B,GAAG,CAAC,YAAY,CAAC;YAClB,EAAE,8BAA8B,EAAE,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-route53-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-deleter.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,6BAA6B,EAAE,MAAM,sDAAsD,CAAC;AACrG,OAAO,EAAE,wCAAwC,EAAE,MAAM,2DAA2D,CAAC;AACrH,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAUpE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,4BAA4B;IACtB,OAAO,CAAa;IACpB,oBAAoB,CAA0B;IAC9C,kBAAkB,CAAkC;IACpD,kBAAkB,CAA2C;IAE9E,YAAY,UAAkD;QAC5D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAC;QAC5D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,kBAAkB,GAAG,IAAI,wCAAwC,CAAC;YACrE,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,UAAqC;QAErC,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,mDAAmD,gBAAgB,WAAW,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAwB;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAA+C,CAAC;QAC5E,aAAa,CACX,UAAU,EACV,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CACvD,QAAQ,EACR,UAAU,CACX,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CACjD,QAAQ,EACR,UAAU,CACX,CAAC,KAAK,EAAE,CAAC;QAEV,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE;gBACL,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE;oBACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;iBAC9D;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW;aAC3B,GAAG,CAAC,YAAY,CAAC;YAClB,EAAE,8BAA8B,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/route53/cfn/sim-cfn-route53-resource-factory.d.ts

@@ -11,6 +11,8 @@ interface SimRoute53CloudFormationResourceFactoryProperties {
 export declare class SimRoute53CloudFormationResourceFactory implements SimCfnServiceResourceFactory {
     private readonly hostedZoneCreator;
     private readonly recordSetCreator;
+    private readonly keySigningKeyCreator;
+    private readonly zoneSigningCreator;
     private readonly deleter;
     constructor(properties?: SimRoute53CloudFormationResourceFactoryProperties);
     /**

package/dist/service/route53/cfn/sim-cfn-route53-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-route53-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,wDAAwD,CAAC;AAErH,UAAU,iDAAiD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,uCAAwC,YAAW,4BAA4B;IAC1F,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IAEvD,YACE,UAAU,GAAE,iDAAsD,EAOnE;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoB7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAMf;CACF"}
+{"version":3,"file":"sim-cfn-route53-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAM/C,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,wDAAwD,CAAC;AAErH,UAAU,iDAAiD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,uCAAwC,YAAW,4BAA4B;IAC1F,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IACpE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA0B;IAC/D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAkC;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IAEvD,YACE,UAAU,GAAE,iDAAsD,EAanE;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAMf;CACF"}

package/dist/service/route53/cfn/sim-cfn-route53-resource-factory.js

@@ -1,6 +1,8 @@
 import { SimRoute53 } from "../sim-route53.js";
 import { SimCfnRoute53HostedZoneCreator } from "./hosted-zone/sim-cfn-r53-zone-creator.js";
 import { SimCfnRoute53RecordSetApplicator } from "./record-set/apply/sim-cfn-r53-record-set-applicator.js";
+import { SimCfnRoute53KskCreator } from "./dnssec/sim-cfn-r53-ksk-creator.js";
+import { SimCfnRoute53ZoneSigningCreator } from "./dnssec/sim-cfn-r53-zone-signing-creator.js";
 import { SimCfnRoute53ResourceDeleter } from "./sim-cfn-route53-resource-deleter.js";
 /**
  * CloudFormation Resource factory for simulated Route53 resources.
@@ -8,12 +10,20 @@ import { SimCfnRoute53ResourceDeleter } from "./sim-cfn-route53-resource-deleter
 export class SimRoute53CloudFormationResourceFactory {
     hostedZoneCreator;
     recordSetCreator;
+    keySigningKeyCreator;
+    zoneSigningCreator;
     deleter;
     constructor(properties = {}) {
         const { route53 = new SimRoute53() } = properties;
         this.hostedZoneCreator = new SimCfnRoute53HostedZoneCreator({ route53 });
         this.recordSetCreator = new SimCfnRoute53RecordSetApplicator({ route53 });
-        this.deleter = new SimCfnRoute53ResourceDeleter({ route53 });
+        this.keySigningKeyCreator = new SimCfnRoute53KskCreator({ route53 });
+        this.zoneSigningCreator = new SimCfnRoute53ZoneSigningCreator({ route53 });
+        this.deleter = new SimCfnRoute53ResourceDeleter({
+            route53,
+            keySigningKeyCreator: this.keySigningKeyCreator,
+            zoneSigningCreator: this.zoneSigningCreator,
+        });
     }
     /**
      * Create a simulated Route53 resource from a CloudFormation Resource.
@@ -26,6 +36,12 @@ export class SimRoute53CloudFormationResourceFactory {
             case "RecordSet": {
                 return await this.recordSetCreator.create(resource, context.resolvedProperties ?? resource.properties);
             }
+            case "KeySigningKey": {
+                return await this.keySigningKeyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            case "DNSSEC": {
+                return await this.zoneSigningCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
             default: {
                 throw new Error(`Unsupported sim Route53 CloudFormation Resource ${resourceTypeName}`);
             }

package/dist/service/route53/cfn/sim-cfn-route53-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-route53-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-factory.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,gCAAgC,EAAE,MAAM,yDAAyD,CAAC;AAC3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAOrF;;GAEG;AACH,MAAM,OAAO,uCAAuC;IACjC,iBAAiB,CAAiC;IAClD,gBAAgB,CAAmC;IACnD,OAAO,CAA+B;IAEvD,YACE,UAAU,GAAsD,EAAE;QAElE,MAAM,EAAE,OAAO,GAAG,IAAI,UAAU,EAAE,EAAE,GAAG,UAAU,CAAC;QAElD,IAAI,CAAC,iBAAiB,GAAG,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,GAAG,IAAI,gCAAgC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,GAAG,IAAI,4BAA4B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACxC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CACvC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,mDAAmD,gBAAgB,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,gBAAgB,EAChB,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-route53-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/route53/cfn/sim-cfn-route53-resource-factory.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,gCAAgC,EAAE,MAAM,yDAAyD,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAOrF;;GAEG;AACH,MAAM,OAAO,uCAAuC;IACjC,iBAAiB,CAAiC;IAClD,gBAAgB,CAAmC;IACnD,oBAAoB,CAA0B;IAC9C,kBAAkB,CAAkC;IACpD,OAAO,CAA+B;IAEvD,YACE,UAAU,GAAsD,EAAE;QAElE,MAAM,EAAE,OAAO,GAAG,IAAI,UAAU,EAAE,EAAE,GAAG,UAAU,CAAC;QAElD,IAAI,CAAC,iBAAiB,GAAG,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,GAAG,IAAI,gCAAgC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,oBAAoB,GAAG,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,kBAAkB,GAAG,IAAI,+BAA+B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,GAAG,IAAI,4BAA4B,CAAC;YAC9C,OAAO;YACP,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACxC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CACvC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACzC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,mDAAmD,gBAAgB,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,gBAAgB,EAChB,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"change-resource-record-sets.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,gDAAgD;IACxD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,6CAA6C;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,sCAAuC,YAAW,cAAc,CAC3E,kCAAkC,EAClC,wCAAwC,CACzC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,gDAAgD,EASvE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,kCAAkC,EAC3C,OAAO,CAAC,EAAE,6CAA6C,GACtD,OAAO,CAAC,wCAAwC,CAAC,CAsCnD;CACF"}
+{"version":3,"file":"change-resource-record-sets.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,gDAAgD;IACxD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,6CAA6C;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,sCAAuC,YAAW,cAAc,CAC3E,kCAAkC,EAClC,wCAAwC,CACzC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,gDAAgD,EASvE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,kCAAkC,EAC3C,OAAO,CAAC,EAAE,6CAA6C,GACtD,OAAO,CAAC,wCAAwC,CAAC,CAkCnD;CACF"}

package/dist/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.js

@@ -40,7 +40,7 @@ export class ChangeResourceRecordSetsCommandHandler {
         this.authorizer.authorize(hostedZoneArn, options?.caller);
         const hostedZone = getChangeResourceRecordSetsHostedZone(this.hostedZones, hostedZoneId);
         const submittedAt = this.background.now();
-        await scheduleChangeResourceRecordSets(this.background, hostedZone, changes);
+        scheduleChangeResourceRecordSets(this.background, hostedZone, changes);
         return {
             ChangeInfo: {
                 Id: `/change/${hostedZoneId}-${makeSimRoute53ChangeId()}`,

package/dist/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"change-resource-record-sets.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EACL,+BAA+B,GAEhC,MAAM,8CAA8C,CAAC;AAKtD,OAAO,EAAE,qCAAqC,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AACnG,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,kCAAkC,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAYpE;;;;GAIG;AACH,MAAM,OAAO,sCAAsC;IAIhC,WAAW,CAG1B;IACe,UAAU,CAAqC;IAC/C,UAAU,CAAsB;IAEjD,YAAY,UAA4D;QACtE,MAAM,EACJ,WAAW,EACX,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,kCAAkC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAA2C,EAC3C,OAAuD;QAEvD,MAAM,YAAY,GAAG,+BAA+B,CAClD,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QACF,MAAM,aAAa,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC;QACnD,aAAa,CACX,OAAO,EACP,qDAAqD,CACtD,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,qCAAqC,CACtD,IAAI,CAAC,WAAW,EAChB,YAAY,CACb,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAE1C,MAAM,gCAAgC,CACpC,IAAI,CAAC,UAAU,EACf,UAAU,EACV,OAAO,CACR,CAAC;QAEF,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,IAAI,sBAAsB,EAAE,EAAE;gBACzD,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,WAAW,EAAE,WAAW;aACzB;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"change-resource-record-sets.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/change-resource-record-sets/change-resource-record-sets.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EACL,+BAA+B,GAEhC,MAAM,8CAA8C,CAAC;AAKtD,OAAO,EAAE,qCAAqC,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AACnG,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,kCAAkC,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAYpE;;;;GAIG;AACH,MAAM,OAAO,sCAAsC;IAIhC,WAAW,CAG1B;IACe,UAAU,CAAqC;IAC/C,UAAU,CAAsB;IAEjD,YAAY,UAA4D;QACtE,MAAM,EACJ,WAAW,EACX,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,kCAAkC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAA2C,EAC3C,OAAuD;QAEvD,MAAM,YAAY,GAAG,+BAA+B,CAClD,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QACF,MAAM,aAAa,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC;QACnD,aAAa,CACX,OAAO,EACP,qDAAqD,CACtD,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,qCAAqC,CACtD,IAAI,CAAC,WAAW,EAChB,YAAY,CACb,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAE1C,gCAAgC,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,IAAI,sBAAsB,EAAE,EAAE;gBACzD,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,WAAW,EAAE,WAAW;aACzB;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.d.ts

@@ -3,6 +3,10 @@ import type { SimRoute53HostedZone } from "../../../hosted-zone/sim-route53-host
 import type { SimRoute53Change } from "../change-resource-record-sets.command.js";
 /**
  * Validates and schedules Route53 record changes for a Hosted Zone.
+ *
+ * Nothing here waits: the changes are validated, the zone goes to PENDING, and
+ * the mutation is handed to the background scheduler. Waiting for it is what
+ * the zone's own synchronization is for.
  */
-export declare function scheduleChangeResourceRecordSets(background: BackgroundScheduler, hostedZone: SimRoute53HostedZone, changes: readonly SimRoute53Change[]): Promise<void>;
+export declare function scheduleChangeResourceRecordSets(background: BackgroundScheduler, hostedZone: SimRoute53HostedZone, changes: readonly SimRoute53Change[]): void;
 //# sourceMappingURL=schedule-change-resource-rec-sets.d.ts.map

package/dist/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-change-resource-rec-sets.d.ts","sourceRoot":"","sources":["../../../../../../src/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAMlF;;GAEG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,mBAAmB,EAC/B,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAcf"}
+{"version":3,"file":"schedule-change-resource-rec-sets.d.ts","sourceRoot":"","sources":["../../../../../../src/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAMlF;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,mBAAmB,EAC/B,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GACnC,IAAI,CAgBN"}

package/dist/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.js

@@ -1,17 +1,22 @@
 import { applyChangeResourceRecordSet, validateChangeResourceRecordSet, } from "../change-resource-record-sets.js";
 /**
  * Validates and schedules Route53 record changes for a Hosted Zone.
+ *
+ * Nothing here waits: the changes are validated, the zone goes to PENDING, and
+ * the mutation is handed to the background scheduler. Waiting for it is what
+ * the zone's own synchronization is for.
  */
-export async function scheduleChangeResourceRecordSets(background, hostedZone, changes) {
+export function scheduleChangeResourceRecordSets(background, hostedZone, changes) {
     for (const change of changes) {
         validateChangeResourceRecordSet(change);
     }
-    await hostedZone.beginSynchronization();
-    hostedZone.scheduleSynchronization(background, async () => {
+    hostedZone.beginSynchronization();
+    hostedZone.scheduleSynchronization(background, () => {
         for (const change of changes) {
             applyChangeResourceRecordSet(hostedZone, change);
         }
-        await hostedZone.completeSynchronization();
+        hostedZone.markSynchronized();
+        return Promise.resolve();
     });
 }
 //# sourceMappingURL=schedule-change-resource-rec-sets.js.map

package/dist/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-change-resource-rec-sets.js","sourceRoot":"","sources":["../../../../../../src/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAA+B,EAC/B,UAAgC,EAChC,OAAoC;IAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,UAAU,CAAC,oBAAoB,EAAE,CAAC;IAExC,UAAU,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,4BAA4B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,CAAC,uBAAuB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"schedule-change-resource-rec-sets.js","sourceRoot":"","sources":["../../../../../../src/service/route53/command/change-resource-record-sets/schedule/schedule-change-resource-rec-sets.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAA+B,EAC/B,UAAgC,EAChC,OAAoC;IAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,UAAU,CAAC,oBAAoB,EAAE,CAAC;IAElC,UAAU,CAAC,uBAAuB,CAAC,UAAU,EAAE,GAAG,EAAE;QAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,4BAA4B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAE9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/service/route53/command/create-hosted-zone/create-hosted-zone.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-hosted-zone.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/create-hosted-zone/create-hosted-zone.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,wCAAwC;IAChD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC/C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD,YAAY,UAAU,EAAE,wCAAwC,EAW/D;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CA+D3C;CACF"}
+{"version":3,"file":"create-hosted-zone.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/create-hosted-zone/create-hosted-zone.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,wCAAwC;IAChD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC/C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD,YAAY,UAAU,EAAE,wCAAwC,EAW/D;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CAmE3C;CACF"}

package/dist/service/route53/command/create-hosted-zone/create-hosted-zone.handler.js

@@ -54,7 +54,10 @@ export class CreateHostedZoneCommandHandler {
         this.hostedZones.set(hostedZoneId, hostedZone);
         this.route53Registry.registerHostedZone(hostedZoneId, hostedZone);
         // Schedule background task to complete creation of the sim Hosted Zone.
-        this.background.schedule(() => hostedZone.completeSynchronization());
+        this.background.schedule(() => {
+            hostedZone.markSynchronized();
+            return Promise.resolve();
+        });
         return {
             HostedZone: {
                 Id: hostedZone.id,

package/dist/service/route53/command/create-hosted-zone/create-hosted-zone.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-hosted-zone.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/create-hosted-zone/create-hosted-zone.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EACL,0BAA0B,GAE3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAahF;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAIxB,WAAW,CAG1B;IACe,UAAU,CAA6B;IACvC,UAAU,CAAsB;IAChC,eAAe,CAAqB;IAErD,YAAY,UAAoD;QAC9D,MAAM,EACJ,WAAW,EACX,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,eAAe,GAAG,IAAI,kBAAkB,EAAE,GAC3C,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA+C;QAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACrC,aAAa,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QAEzD,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;QACtD,aAAa,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;QAE1E,MAAM,YAAY,GAAG,0BAA0B,CAC7C,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAE1C,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW;aACxC,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,KAAK,eAAe,CAAC,CAAC;QACxE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,iCAAiC,CACzC,mDAAmD,eAAe,iBAAiB,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC;YAC1C,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,SAAS;YACf,eAAe;YACf,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAElE,wEAAwE;QACxE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAErE,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,sBAAsB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK;aACjD;YACD,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,EAAE;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,WAAW,EAAE,WAAW;aACzB;YACD,aAAa,EAAE;gBACb,WAAW,EAAE;oBACX,wBAAwB;oBACxB,wBAAwB;oBACxB,wBAAwB;oBACxB,wBAAwB;iBACzB;aACF;YACD,QAAQ,EAAE,2DAA2D,YAAY,EAAE;YACnF,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-hosted-zone.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/create-hosted-zone/create-hosted-zone.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EACL,0BAA0B,GAE3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAahF;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAIxB,WAAW,CAG1B;IACe,UAAU,CAA6B;IACvC,UAAU,CAAsB;IAChC,eAAe,CAAqB;IAErD,YAAY,UAAoD;QAC9D,MAAM,EACJ,WAAW,EACX,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,eAAe,GAAG,IAAI,kBAAkB,EAAE,GAC3C,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA+C;QAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACrC,aAAa,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QAEzD,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;QACtD,aAAa,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;QAE1E,MAAM,YAAY,GAAG,0BAA0B,CAC7C,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAE1C,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW;aACxC,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,KAAK,eAAe,CAAC,CAAC;QACxE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,iCAAiC,CACzC,mDAAmD,eAAe,iBAAiB,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC;YAC1C,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,SAAS;YACf,eAAe;YACf,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAElE,wEAAwE;QACxE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,UAAU,CAAC,gBAAgB,EAAE,CAAC;YAE9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,sBAAsB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK;aACjD;YACD,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,EAAE;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,WAAW,EAAE,WAAW;aACzB;YACD,aAAa,EAAE;gBACb,WAAW,EAAE;oBACX,wBAAwB;oBACxB,wBAAwB;oBACxB,wBAAwB;oBACxB,wBAAwB;iBACzB;aACF;YACD,QAAQ,EAAE,2DAA2D,YAAY,EAAE;YACnF,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.d.ts

@@ -34,6 +34,10 @@ export declare class DeleteHostedZoneCommandHandler implements CommandHandler<Si
      * simulated zone is created without those two, so any record at all counts
      * here, and the caller removes them with ChangeResourceRecordSets first.
      *
+     * A signed zone is refused for the same reason: real Route53 wants DNSSEC
+     * disabled before the zone goes, so the DS record at the parent stops
+     * pointing at a zone that no longer exists.
+     *
      * Deregistering the zone is what stops its names resolving, because DNS
      * resolution reads the cross-Account registry rather than this Account's
      * own hosted zone map.

package/dist/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-hosted-zone.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AAEzC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAY/D;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CA8B3C;CACF"}
+{"version":3,"file":"delete-hosted-zone.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AAEzC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAG1B;IACF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAY/D;IAED;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CA+B3C;CACF"}

package/dist/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.js

@@ -29,6 +29,10 @@ export class DeleteHostedZoneCommandHandler {
      * simulated zone is created without those two, so any record at all counts
      * here, and the caller removes them with ChangeResourceRecordSets first.
      *
+     * A signed zone is refused for the same reason: real Route53 wants DNSSEC
+     * disabled before the zone goes, so the DS record at the parent stops
+     * pointing at a zone that no longer exists.
+     *
      * Deregistering the zone is what stops its names resolving, because DNS
      * resolution reads the cross-Account registry rather than this Account's
      * own hosted zone map.
@@ -44,6 +48,7 @@ export class DeleteHostedZoneCommandHandler {
             throw new SimRoute53NoSuchHostedZone(`No sim Route53 Hosted Zone with ID ${hostedZoneId}`);
         }
         hostedZone.assertDeletable();
+        hostedZone.dnssec.assertZoneDeletable();
         this.hostedZones.delete(hostedZoneId);
         this.route53Registry.deregisterHostedZone(hostedZoneId);
         return {

package/dist/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete-hosted-zone.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAG3F,OAAO,EACL,+BAA+B,GAEhC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAiBhF;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAIxB,WAAW,CAG1B;IACe,eAAe,CAAqB;IACpC,UAAU,CAA6B;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAAoD;QAC9D,MAAM,EACJ,WAAW,EACX,eAAe,EACf,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA+C;QAE/C,MAAM,YAAY,GAAG,+BAA+B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAE5D,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,0BAA0B,CAClC,sCAAsC,YAAY,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,eAAe,EAAE,CAAC;QAE7B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;aACnC;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"delete-hosted-zone.handler.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/delete-hosted-zone/delete-hosted-zone.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAG3F,OAAO,EACL,+BAA+B,GAEhC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAiBhF;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAIxB,WAAW,CAG1B;IACe,eAAe,CAAqB;IACpC,UAAU,CAA6B;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAAoD;QAC9D,MAAM,EACJ,WAAW,EACX,eAAe,EACf,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA+C;QAE/C,MAAM,YAAY,GAAG,+BAA+B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAE5D,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,0BAA0B,CAClC,sCAAsC,YAAY,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,eAAe,EAAE,CAAC;QAC7B,UAAU,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAExC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACL,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,YAAY,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;aACnC;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/route53/command/dnssec/dnssec.command.d.ts

@@ -0,0 +1,78 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimRoute53KeySigningKeyView } from "../../dnssec/sim-route53-key-signing-key.js";
+import type { SimRoute53ServeSignature } from "../../dnssec/sim-route53-zone-dnssec.js";
+import type { SimRoute53ChangeInfo } from "../create-hosted-zone/create-hosted-zone.command.js";
+/**
+ * Minimal structural sim Route53 CreateKeySigningKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/route-53/command/CreateKeySigningKeyCommand/
+ */
+export interface SimCreateKeySigningKeyCommand {
+    readonly input: SimCreateKeySigningKeyCommandInput;
+}
+export interface SimCreateKeySigningKeyCommandInput {
+    readonly CallerReference?: string | undefined;
+    readonly HostedZoneId?: string | undefined;
+    readonly KeyManagementServiceArn?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly Status?: string | undefined;
+}
+export interface SimCreateKeySigningKeyCommandOutput {
+    readonly ChangeInfo?: SimRoute53ChangeInfo | undefined;
+    readonly KeySigningKey?: SimRoute53KeySigningKeyView | undefined;
+    readonly Location?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Route53 key-signing key command input.
+ *
+ * ActivateKeySigningKey, DeactivateKeySigningKey and DeleteKeySigningKey all
+ * take the same two fields and answer with the same change info.
+ */
+export interface SimKeySigningKeyCommand {
+    readonly input: SimKeySigningKeyCommandInput;
+}
+export interface SimKeySigningKeyCommandInput {
+    readonly HostedZoneId?: string | undefined;
+    readonly Name?: string | undefined;
+}
+export interface SimKeySigningKeyCommandOutput {
+    readonly ChangeInfo?: SimRoute53ChangeInfo | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Route53 zone signing command input.
+ *
+ * EnableHostedZoneDNSSEC and DisableHostedZoneDNSSEC share it.
+ */
+export interface SimHostedZoneDnssecCommand {
+    readonly input: SimHostedZoneDnssecCommandInput;
+}
+export interface SimHostedZoneDnssecCommandInput {
+    readonly HostedZoneId?: string | undefined;
+}
+export interface SimHostedZoneDnssecCommandOutput {
+    readonly ChangeInfo?: SimRoute53ChangeInfo | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Route53 GetDNSSEC command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/route-53/command/GetDNSSECCommand/
+ */
+export interface SimGetDnssecCommand {
+    readonly input: SimGetDnssecCommandInput;
+}
+export interface SimGetDnssecCommandInput {
+    readonly HostedZoneId?: string | undefined;
+}
+export interface SimRoute53DnssecStatus {
+    readonly ServeSignature?: SimRoute53ServeSignature | undefined;
+    readonly StatusMessage?: string | undefined;
+}
+export interface SimGetDnssecCommandOutput {
+    readonly Status?: SimRoute53DnssecStatus | undefined;
+    readonly KeySigningKeys?: readonly SimRoute53KeySigningKeyView[] | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=dnssec.command.d.ts.map

package/dist/service/route53/command/dnssec/dnssec.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnssec.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/dnssec/dnssec.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAEhG;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,2BAA2B,EAAE,GAAG,SAAS,CAAC;IAC7E,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/route53/command/dnssec/dnssec.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dnssec.command.js.map

package/dist/service/route53/command/dnssec/dnssec.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnssec.command.js","sourceRoot":"","sources":["../../../../../src/service/route53/command/dnssec/dnssec.command.ts"],"names":[],"mappings":""}

package/dist/service/route53/command/dnssec/sim-route53-dnssec-authorizer.d.ts

@@ -0,0 +1,24 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimRoute53HostedZoneId } from "../create-hosted-zone/sim-route53-zone-id.js";
+interface SimRoute53DnssecAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a Route53 DNSSEC request.
+ *
+ * Every DNSSEC operation names a hosted zone and authorizes against that
+ * zone's ARN, so one authorizer takes the action rather than there being seven
+ * classes that differ by a string. Authorization runs before the zone is
+ * looked up, so an unauthorized caller cannot learn whether a zone ID exists.
+ */
+export declare class SimRoute53DnssecAuthorizer {
+    private readonly iam;
+    constructor(properties: SimRoute53DnssecAuthorizerProperties);
+    /**
+     * Ensure the caller may perform a DNSSEC action on a hosted zone.
+     */
+    authorize(action: string, hostedZoneId: SimRoute53HostedZoneId, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=sim-route53-dnssec-authorizer.d.ts.map

package/dist/service/route53/command/dnssec/sim-route53-dnssec-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-route53-dnssec-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/route53/command/dnssec/sim-route53-dnssec-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAE3F,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,sBAAsB,EACpC,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAWN;CACF"}