@kensio/yulin 1.12.1 → 1.14.0

package/dist/service/kms/key/spec/sim-kms-key-spec.d.ts

@@ -0,0 +1,69 @@
+import type { SimKmsSigningAlgorithm } from "./sim-kms-signing-algorithm.js";
+/**
+ * What a key can be used for. A key has exactly one usage, fixed when it is
+ * created, and it is what decides which operations the key answers.
+ */
+export declare const SimKmsKeyUsage: {
+    readonly EncryptDecrypt: "ENCRYPT_DECRYPT";
+    readonly SignVerify: "SIGN_VERIFY";
+};
+export type SimKmsKeyUsage = (typeof SimKmsKeyUsage)[keyof typeof SimKmsKeyUsage];
+/**
+ * The Node key pair parameters behind an asymmetric key spec.
+ *
+ * A key spec is an AWS name for a curve or a modulus length, so this is the
+ * translation of that name into what `generateKeyPairSync` needs.
+ */
+export interface SimKmsEcKeyPair {
+    readonly type: "ec";
+    readonly namedCurve: string;
+}
+export interface SimKmsRsaKeyPair {
+    readonly type: "rsa";
+    readonly modulusLength: number;
+}
+export type SimKmsKeyPairParameters = SimKmsEcKeyPair | SimKmsRsaKeyPair;
+interface SimKmsKeySpecProperties {
+    readonly name: string;
+    readonly keyUsage: SimKmsKeyUsage;
+    readonly keyPair?: SimKmsKeyPairParameters | undefined;
+    readonly signingAlgorithms?: readonly SimKmsSigningAlgorithm[] | undefined;
+    readonly encryptionAlgorithms?: readonly string[] | undefined;
+}
+/**
+ * One key spec this simulation models, and what a key of that spec can do.
+ *
+ * The spec is the single answer to three questions that used to be constants:
+ * what material the key holds, which operations it answers, and which
+ * algorithms those operations accept.
+ */
+export declare class SimKmsKeySpec {
+    readonly name: string;
+    readonly keyUsage: SimKmsKeyUsage;
+    readonly signingAlgorithms: readonly SimKmsSigningAlgorithm[];
+    readonly encryptionAlgorithms: readonly string[];
+    private readonly keyPair;
+    constructor(properties: SimKmsKeySpecProperties);
+    /**
+     * Whether this spec holds a key pair rather than symmetric key material.
+     */
+    get isAsymmetric(): boolean;
+    /**
+     * The Node key pair parameters for this spec.
+     */
+    keyPairParameters(): SimKmsKeyPairParameters;
+    /**
+     * The signing algorithm names, as DescribeKey and GetPublicKey report them.
+     */
+    signingAlgorithmNames(): readonly string[];
+    /**
+     * Resolve the signing algorithm a Sign or Verify request asks for.
+     *
+     * AWS requires the algorithm on every signing request rather than defaulting
+     * it, because the choice is part of what the signature means, so an omitted
+     * one is refused here too.
+     */
+    requireSigningAlgorithm(algorithmName: string | undefined): SimKmsSigningAlgorithm;
+}
+export {};
+//# sourceMappingURL=sim-kms-key-spec.d.ts.map

package/dist/service/kms/key/spec/sim-kms-key-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-spec.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-key-spec.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,cAAc;aACzB,cAAc,EAAE,iBAAiB;aACjC,UAAU,EAAE,aAAa;CACjB,CAAC;AAEX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEzE,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,QAAQ,EAAE,cAAc,CAAC;IACzC,SAAgB,iBAAiB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrE,SAAgB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,YAAY,UAAU,EAAE,uBAAuB,EAM9C;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,iBAAiB,IAAI,uBAAuB,CAK3C;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;;;;;OAMG;IACH,uBAAuB,CACrB,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,sBAAsB,CAwBxB;CACF"}

package/dist/service/kms/key/spec/sim-kms-key-spec.js

@@ -0,0 +1,72 @@
+import { SimKmsInvalidKeyUsageException } from "../../error/sim-kms.error.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * What a key can be used for. A key has exactly one usage, fixed when it is
+ * created, and it is what decides which operations the key answers.
+ */
+export const SimKmsKeyUsage = {
+    EncryptDecrypt: "ENCRYPT_DECRYPT",
+    SignVerify: "SIGN_VERIFY",
+};
+/**
+ * One key spec this simulation models, and what a key of that spec can do.
+ *
+ * The spec is the single answer to three questions that used to be constants:
+ * what material the key holds, which operations it answers, and which
+ * algorithms those operations accept.
+ */
+export class SimKmsKeySpec {
+    name;
+    keyUsage;
+    signingAlgorithms;
+    encryptionAlgorithms;
+    keyPair;
+    constructor(properties) {
+        this.name = properties.name;
+        this.keyUsage = properties.keyUsage;
+        this.keyPair = properties.keyPair;
+        this.signingAlgorithms = properties.signingAlgorithms ?? [];
+        this.encryptionAlgorithms = properties.encryptionAlgorithms ?? [];
+    }
+    /**
+     * Whether this spec holds a key pair rather than symmetric key material.
+     */
+    get isAsymmetric() {
+        return this.keyPair !== undefined;
+    }
+    /**
+     * The Node key pair parameters for this spec.
+     */
+    keyPairParameters() {
+        const keyPair = this.keyPair;
+        assertDefined(keyPair, `key pair parameters for key spec ${this.name}`);
+        return keyPair;
+    }
+    /**
+     * The signing algorithm names, as DescribeKey and GetPublicKey report them.
+     */
+    signingAlgorithmNames() {
+        return this.signingAlgorithms.map((algorithm) => algorithm.name);
+    }
+    /**
+     * Resolve the signing algorithm a Sign or Verify request asks for.
+     *
+     * AWS requires the algorithm on every signing request rather than defaulting
+     * it, because the choice is part of what the signature means, so an omitted
+     * one is refused here too.
+     */
+    requireSigningAlgorithm(algorithmName) {
+        if (this.signingAlgorithms.length === 0) {
+            throw new SimKmsInvalidKeyUsageException(`A ${this.name} key cannot sign or verify: its KeyUsage is ${this.keyUsage}`);
+        }
+        if (algorithmName === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`SigningAlgorithm is required, and must be one of ${this.signingAlgorithmNames().join(", ")}`);
+        }
+        const algorithm = this.signingAlgorithms.find((candidate) => candidate.name === algorithmName);
+        if (algorithm === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`SigningAlgorithm '${algorithmName}' is not valid for a ${this.name} key: use one of ${this.signingAlgorithmNames().join(", ")}`);
+        }
+        return algorithm;
+    }
+}
+//# sourceMappingURL=sim-kms-key-spec.js.map

package/dist/service/kms/key/spec/sim-kms-key-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-spec.js","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-key-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc,EAAE,iBAAiB;IACjC,UAAU,EAAE,aAAa;CACjB,CAAC;AA+BX;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACR,IAAI,CAAS;IACb,QAAQ,CAAiB;IACzB,iBAAiB,CAAoC;IACrD,oBAAoB,CAAoB;IAEvC,OAAO,CAAsC;IAE9D,YAAY,UAAmC;QAC7C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAC5D,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,aAAa,CAAC,OAAO,EAAE,oCAAoC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAExE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CACrB,aAAiC;QAEjC,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,8BAA8B,CACtC,KAAK,IAAI,CAAC,IAAI,+CAA+C,IAAI,CAAC,QAAQ,EAAE,CAC7E,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAA8B,CACtC,oDAAoD,IAAI,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,CAChD,CAAC;QAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,aAAa,wBAAwB,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjI,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/service/kms/key/spec/sim-kms-key-specs.d.ts

@@ -0,0 +1,25 @@
+import { SimKmsKeySpec } from "./sim-kms-key-spec.js";
+/**
+ * The symmetric encryption spec, which is what a key gets when a request names
+ * no spec at all.
+ */
+export declare const simKmsSymmetricKeySpecName = "SYMMETRIC_DEFAULT";
+/**
+ * The symmetric encryption key spec itself, which several call sites need
+ * directly because it is the default a key gets.
+ */
+export declare const simKmsSymmetricKeySpec: SimKmsKeySpec;
+/**
+ * Every key spec this simulation models, by the name AWS gives it.
+ *
+ * Real KMS also offers asymmetric encryption, HMAC and key agreement specs,
+ * and offers the RSA specs for encryption as well as signing. Those are absent
+ * rather than listed, so `CreateKey` refuses them: a key that cannot do what
+ * its spec says it does would be worse than no key at all.
+ */
+export declare const simKmsKeySpecs: ReadonlyMap<string, SimKmsKeySpec>;
+/**
+ * The names of the key specs this simulation models, for a refusal to list.
+ */
+export declare function simKmsKeySpecNames(): readonly string[];
+//# sourceMappingURL=sim-kms-key-specs.d.ts.map

package/dist/service/kms/key/spec/sim-kms-key-specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-specs.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-key-specs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAGd,MAAM,uBAAuB,CAAC;AAG/B;;;GAGG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,sBAAsB,eAIjC,CAAC;AA8EH;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAY7D,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAEtD"}

package/dist/service/kms/key/spec/sim-kms-key-specs.js

@@ -0,0 +1,90 @@
+import { SimKmsKeySpec, SimKmsKeyUsage, } from "./sim-kms-key-spec.js";
+import { SimKmsSigningAlgorithm } from "./sim-kms-signing-algorithm.js";
+/**
+ * The symmetric encryption spec, which is what a key gets when a request names
+ * no spec at all.
+ */
+export const simKmsSymmetricKeySpecName = "SYMMETRIC_DEFAULT";
+/**
+ * The symmetric encryption key spec itself, which several call sites need
+ * directly because it is the default a key gets.
+ */
+export const simKmsSymmetricKeySpec = new SimKmsKeySpec({
+    name: simKmsSymmetricKeySpecName,
+    keyUsage: SimKmsKeyUsage.EncryptDecrypt,
+    encryptionAlgorithms: [simKmsSymmetricKeySpecName],
+});
+/**
+ * An ECC key spec offers exactly one signing algorithm, the one paired with
+ * its curve.
+ */
+const ecdsa = (name, digest) => [
+    new SimKmsSigningAlgorithm({ name, digest }),
+];
+/**
+ * Every RSA signing key offers the same six algorithms, in the order KMS lists
+ * them: the two padding schemes across the three digests.
+ */
+const rsaSigningAlgorithms = [
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PSS_SHA_256",
+        digest: "sha256",
+        probabilisticPadding: true,
+    }),
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PSS_SHA_384",
+        digest: "sha384",
+        probabilisticPadding: true,
+    }),
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PSS_SHA_512",
+        digest: "sha512",
+        probabilisticPadding: true,
+    }),
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PKCS1_V1_5_SHA_256",
+        digest: "sha256",
+    }),
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PKCS1_V1_5_SHA_384",
+        digest: "sha384",
+    }),
+    new SimKmsSigningAlgorithm({
+        name: "RSASSA_PKCS1_V1_5_SHA_512",
+        digest: "sha512",
+    }),
+];
+const signingKeySpec = (name, keyPair, signingAlgorithms) => new SimKmsKeySpec({
+    name,
+    keyUsage: SimKmsKeyUsage.SignVerify,
+    keyPair,
+    signingAlgorithms,
+});
+const ecSigningKeySpec = (name, namedCurve, signingAlgorithm, digest) => signingKeySpec(name, { type: "ec", namedCurve }, ecdsa(signingAlgorithm, digest));
+const rsaSigningKeySpec = (modulusLength) => signingKeySpec(`RSA_${String(modulusLength)}`, { type: "rsa", modulusLength }, rsaSigningAlgorithms);
+/**
+ * Every key spec this simulation models, by the name AWS gives it.
+ *
+ * Real KMS also offers asymmetric encryption, HMAC and key agreement specs,
+ * and offers the RSA specs for encryption as well as signing. Those are absent
+ * rather than listed, so `CreateKey` refuses them: a key that cannot do what
+ * its spec says it does would be worse than no key at all.
+ */
+export const simKmsKeySpecs = new Map([
+    simKmsSymmetricKeySpec,
+    ecSigningKeySpec("ECC_NIST_P256", "prime256v1", "ECDSA_SHA_256", "sha256"),
+    ecSigningKeySpec("ECC_NIST_P384", "secp384r1", "ECDSA_SHA_384", "sha384"),
+    ecSigningKeySpec("ECC_NIST_P521", "secp521r1", "ECDSA_SHA_512", "sha512"),
+    // secp256k1 signs with SHA-256, the same as the P-256 curve above.
+    ecSigningKeySpec("ECC_SECG_P256K1", "secp256k1", "ECDSA_SHA_256", "sha256"),
+    rsaSigningKeySpec(2048),
+    rsaSigningKeySpec(3072),
+    rsaSigningKeySpec(4096),
+].map((keySpec) => [keySpec.name, keySpec]));
+/**
+ * The names of the key specs this simulation models, for a refusal to list.
+ */
+export function simKmsKeySpecNames() {
+    return simKmsKeySpecs.keys().toArray();
+}
+//# sourceMappingURL=sim-kms-key-specs.js.map

package/dist/service/kms/key/spec/sim-kms-key-specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-key-specs.js","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-key-specs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,aAAa,CAAC;IACtD,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,cAAc,CAAC,cAAc;IACvC,oBAAoB,EAAE,CAAC,0BAA0B,CAAC;CACnD,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,KAAK,GAAG,CACZ,IAAY,EACZ,MAAc,EACqB,EAAE,CAAC;IACtC,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;CAC7C,CAAC;AAEF;;;GAGG;AACH,MAAM,oBAAoB,GAAsC;IAC9D,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,QAAQ;QAChB,oBAAoB,EAAE,IAAI;KAC3B,CAAC;IACF,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,QAAQ;QAChB,oBAAoB,EAAE,IAAI;KAC3B,CAAC;IACF,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,QAAQ;QAChB,oBAAoB,EAAE,IAAI;KAC3B,CAAC;IACF,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,IAAI,sBAAsB,CAAC;QACzB,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,QAAQ;KACjB,CAAC;CACH,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,IAAY,EACZ,OAAgC,EAChC,iBAAoD,EACrC,EAAE,CACjB,IAAI,aAAa,CAAC;IAChB,IAAI;IACJ,QAAQ,EAAE,cAAc,CAAC,UAAU;IACnC,OAAO;IACP,iBAAiB;CAClB,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CACvB,IAAY,EACZ,UAAkB,EAClB,gBAAwB,EACxB,MAAc,EACC,EAAE,CACjB,cAAc,CACZ,IAAI,EACJ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAC1B,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAChC,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CAAC,aAAqB,EAAiB,EAAE,CACjE,cAAc,CACZ,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,EAC9B,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,EAC9B,oBAAoB,CACrB,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuC,IAAI,GAAG,CACvE;IACE,sBAAsB;IACtB,gBAAgB,CAAC,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC1E,gBAAgB,CAAC,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IACzE,gBAAgB,CAAC,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IACzE,mEAAmE;IACnE,gBAAgB,CAAC,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC3E,iBAAiB,CAAC,IAAI,CAAC;IACvB,iBAAiB,CAAC,IAAI,CAAC;IACvB,iBAAiB,CAAC,IAAI,CAAC;CACxB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAC5C,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/service/kms/key/spec/sim-kms-signing-algorithm.d.ts

@@ -0,0 +1,31 @@
+import { type KeyObject, type SignKeyObjectInput } from "node:crypto";
+interface SimKmsSigningAlgorithmProperties {
+    readonly name: string;
+    readonly digest: string;
+    readonly probabilisticPadding?: boolean | undefined;
+}
+/**
+ * One KMS signing algorithm, translated into what Node's crypto needs.
+ *
+ * The AWS name carries two things: the digest to hash the message with, and,
+ * for RSA, which of the two padding schemes to use. Both signatures are real,
+ * so the padding has to be the padding AWS uses rather than whichever one Node
+ * defaults to.
+ */
+export declare class SimKmsSigningAlgorithm {
+    readonly name: string;
+    readonly digest: string;
+    private readonly probabilisticPadding;
+    constructor(properties: SimKmsSigningAlgorithmProperties);
+    /**
+     * The key input for a sign or verify call under this algorithm.
+     *
+     * RSASSA-PSS needs the padding named and a salt the length of the digest,
+     * which is what KMS signs with. Everything else takes the key on its own:
+     * PKCS#1 v1.5 is Node's default RSA padding, and an EC key has no padding to
+     * choose.
+     */
+    keyInput(key: KeyObject): KeyObject | SignKeyObjectInput;
+}
+export {};
+//# sourceMappingURL=sim-kms-signing-algorithm.d.ts.map

package/dist/service/kms/key/spec/sim-kms-signing-algorithm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-signing-algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-signing-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAE/C,YAAY,UAAU,EAAE,gCAAgC,EAIvD;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAUvD;CACF"}

package/dist/service/kms/key/spec/sim-kms-signing-algorithm.js

@@ -0,0 +1,38 @@
+import { constants, } from "node:crypto";
+/**
+ * One KMS signing algorithm, translated into what Node's crypto needs.
+ *
+ * The AWS name carries two things: the digest to hash the message with, and,
+ * for RSA, which of the two padding schemes to use. Both signatures are real,
+ * so the padding has to be the padding AWS uses rather than whichever one Node
+ * defaults to.
+ */
+export class SimKmsSigningAlgorithm {
+    name;
+    digest;
+    probabilisticPadding;
+    constructor(properties) {
+        this.name = properties.name;
+        this.digest = properties.digest;
+        this.probabilisticPadding = properties.probabilisticPadding ?? false;
+    }
+    /**
+     * The key input for a sign or verify call under this algorithm.
+     *
+     * RSASSA-PSS needs the padding named and a salt the length of the digest,
+     * which is what KMS signs with. Everything else takes the key on its own:
+     * PKCS#1 v1.5 is Node's default RSA padding, and an EC key has no padding to
+     * choose.
+     */
+    keyInput(key) {
+        if (!this.probabilisticPadding) {
+            return key;
+        }
+        return {
+            key,
+            padding: constants.RSA_PKCS1_PSS_PADDING,
+            saltLength: constants.RSA_PSS_SALTLEN_DIGEST,
+        };
+    }
+}
+//# sourceMappingURL=sim-kms-signing-algorithm.js.map

package/dist/service/kms/key/spec/sim-kms-signing-algorithm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-signing-algorithm.js","sourceRoot":"","sources":["../../../../../src/service/kms/key/spec/sim-kms-signing-algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,GAGV,MAAM,aAAa,CAAC;AAQrB;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACjB,IAAI,CAAS;IACb,MAAM,CAAS;IAEd,oBAAoB,CAAU;IAE/C,YAAY,UAA4C;QACtD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,IAAI,KAAK,CAAC;IACvE,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAc;QACrB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,OAAO;YACL,GAAG;YACH,OAAO,EAAE,SAAS,CAAC,qBAAqB;YACxC,UAAU,EAAE,SAAS,CAAC,sBAAsB;SAC7C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/registry/sim-kms-registry.d.ts

@@ -0,0 +1,39 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimKmsKey } from "../key/sim-kms-key.js";
+import type { SimKms } from "../sim-kms.js";
+/**
+ * How another simulated service gets from a key ARN to the key it names.
+ *
+ * Named as an interface so a service depending on it depends on the lookup
+ * rather than on the whole of KMS.
+ */
+export interface SimKmsKeyResolver {
+    key(keyArn: string): SimKmsKey | undefined;
+}
+/**
+ * Simulation-wide registry of Account/Region-scoped KMS facades.
+ *
+ * One registry belongs to one SimAws environment. KMS is scoped to an account
+ * and Region, but other services hold only a key ARN, so this is how they get
+ * from that ARN back to the key it names. Route53 uses it to check the
+ * customer managed key a key-signing key is built on.
+ *
+ * The registry indexes KMS facades but does not create or own them.
+ */
+export declare class SimKmsRegistry implements SimKmsKeyResolver {
+    private readonly kmsByScope;
+    /**
+     * Register the KMS facade belonging to an Account and Region.
+     */
+    register(accountRegionScope: SimAwsAccountRegionScope, kms: SimKms): void;
+    /**
+     * Find the key an ARN names, wherever in the simulation it lives.
+     *
+     * Undefined covers every way an ARN can fail to name a key: it is not an
+     * ARN, it is not a KMS ARN, its account and Region hold no simulated KMS, or
+     * that KMS holds no such key. Callers report the failure in their own terms,
+     * as AWS services do.
+     */
+    key(keyArn: string): SimKmsKey | undefined;
+}
+//# sourceMappingURL=sim-kms-registry.d.ts.map

package/dist/service/kms/registry/sim-kms-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/kms/registry/sim-kms-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;IAEhE;;OAEG;IACH,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAExE;IAED;;;;;;;OAOG;IACH,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAYzC;CACF"}

package/dist/service/kms/registry/sim-kms-registry.js

@@ -0,0 +1,40 @@
+import { parseSimArn } from "../../aws/arn.js";
+/**
+ * Simulation-wide registry of Account/Region-scoped KMS facades.
+ *
+ * One registry belongs to one SimAws environment. KMS is scoped to an account
+ * and Region, but other services hold only a key ARN, so this is how they get
+ * from that ARN back to the key it names. Route53 uses it to check the
+ * customer managed key a key-signing key is built on.
+ *
+ * The registry indexes KMS facades but does not create or own them.
+ */
+export class SimKmsRegistry {
+    kmsByScope = new Map();
+    /**
+     * Register the KMS facade belonging to an Account and Region.
+     */
+    register(accountRegionScope, kms) {
+        this.kmsByScope.set(scopeKey(accountRegionScope), kms);
+    }
+    /**
+     * Find the key an ARN names, wherever in the simulation it lives.
+     *
+     * Undefined covers every way an ARN can fail to name a key: it is not an
+     * ARN, it is not a KMS ARN, its account and Region hold no simulated KMS, or
+     * that KMS holds no such key. Callers report the failure in their own terms,
+     * as AWS services do.
+     */
+    key(keyArn) {
+        const arn = parseSimArn(keyArn);
+        if (arn?.service !== "kms") {
+            return undefined;
+        }
+        const kms = this.kmsByScope.get(scopeKey({ accountId: arn.accountId, regionName: arn.region }));
+        return kms?.findKey(keyArn);
+    }
+}
+function scopeKey(accountRegionScope) {
+    return `${accountRegionScope.accountId}:${accountRegionScope.regionName}`;
+}
+//# sourceMappingURL=sim-kms-registry.js.map

package/dist/service/kms/registry/sim-kms-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-registry.js","sourceRoot":"","sources":["../../../../src/service/kms/registry/sim-kms-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAiB/C;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IACR,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEhE;;OAEG;IACH,QAAQ,CAAC,kBAA4C,EAAE,GAAW;QAChE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;OAOG;IACH,GAAG,CAAC,MAAc;QAChB,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,GAAG,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAC7B,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAC/D,CAAC;QAEF,OAAO,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,QAAQ,CACf,kBAA4C;IAE5C,OAAO,GAAG,kBAAkB,CAAC,SAAS,IAAI,kBAAkB,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC"}

package/dist/service/kms/sdk/sim-kms-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/kms/sdk/sim-kms-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAsB/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EA2HzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-kms-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/kms/sdk/sim-kms-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AA2B/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EAmJzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/kms/sdk/sim-kms-sdk-command-router.js

@@ -66,6 +66,18 @@ export class SimKmsSdkCommandRouter {
                 "GenerateDataKeyCommand",
                 async (command, context) => await simKms.generateDataKey(command, simSdkCallerOptions(context)),
             ],
+            [
+                "SignCommand",
+                async (command, context) => await simKms.sign(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "VerifyCommand",
+                async (command, context) => await simKms.verify(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetPublicKeyCommand",
+                async (command, context) => await simKms.getPublicKey(command, simSdkCallerOptions(context)),
+            ],
         ]);
     }
     /**

package/dist/service/kms/sdk/sim-kms-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/kms/sdk/sim-kms-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAwB/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,SAAS,CACpB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,iBAAiB;gBACjB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,QAAQ,CACnB,OAA6B,EAC7B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,SAAS,CACpB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,mBAAmB;gBACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,UAAU,CACrB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,4BAA4B;gBAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,mBAAmB,CAC9B,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,0BAA0B;gBAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,iBAAiB,CAC5B,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,wBAAwB;gBACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,eAAe,CAC1B,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-kms-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/kms/sdk/sim-kms-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AA6B/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,SAAS,CACpB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,iBAAiB;gBACjB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,QAAQ,CACnB,OAA6B,EAC7B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,SAAS,CACpB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,mBAAmB;gBACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,UAAU,CACrB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,4BAA4B;gBAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,mBAAmB,CAC9B,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,0BAA0B;gBAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,iBAAiB,CAC5B,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,wBAAwB;gBACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,eAAe,CAC1B,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,aAAa;gBACb,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,IAAI,CACf,OAAyB,EACzB,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,eAAe;gBACf,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,MAAM,CACjB,OAA2B,EAC3B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/kms/sim-kms-commands.d.ts

@@ -8,6 +8,7 @@ import { SimKmsKeyCommands } from "./command/key/sim-kms-key-commands.js";
 import { SimKmsKeyLifecycleCommands } from "./command/key/sim-kms-key-lifecycle-commands.js";
 import { SimKmsKeyPolicyCommands } from "./command/key/sim-kms-key-policy-commands.js";
 import { SimKmsListKeys } from "./command/key/sim-kms-list-keys.js";
+import { SimKmsSignCommands } from "./command/sign/sim-kms-sign-commands.js";
 import { SimKmsKeyStore } from "./key/sim-kms-key-store.js";
 /**
  * How one simulated KMS is put together.
@@ -33,6 +34,7 @@ export declare class SimKmsCommands {
     readonly policies: SimKmsKeyPolicyCommands;
     readonly aliases: SimKmsAliasCommands;
     readonly crypto: SimKmsCryptoCommands;
+    readonly signing: SimKmsSignCommands;
     readonly generateDataKey: SimKmsGenerateDataKey;
     readonly background: BackgroundScheduler;
     constructor(properties?: SimKmsProperties);

package/dist/service/kms/sim-kms-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-commands.d.ts","sourceRoot":"","sources":["../../../src/service/kms/sim-kms-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEhF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,SAAgB,IAAI,EAAE,cAAc,CAAC;IACrC,SAAgB,GAAG,EAAE,iBAAiB,CAAC;IACvC,SAAgB,QAAQ,EAAE,cAAc,CAAC;IACzC,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,QAAQ,EAAE,uBAAuB,CAAC;IAClD,SAAgB,OAAO,EAAE,mBAAmB,CAAC;IAC7C,SAAgB,MAAM,EAAE,oBAAoB,CAAC;IAC7C,SAAgB,eAAe,EAAE,qBAAqB,CAAC;IACvD,SAAgB,UAAU,EAAE,mBAAmB,CAAC;IAEhD,YAAY,UAAU,GAAE,gBAAqB,EAqC5C;CACF"}
+{"version":3,"file":"sim-kms-commands.d.ts","sourceRoot":"","sources":["../../../src/service/kms/sim-kms-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEhF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAG7E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,SAAgB,IAAI,EAAE,cAAc,CAAC;IACrC,SAAgB,GAAG,EAAE,iBAAiB,CAAC;IACvC,SAAgB,QAAQ,EAAE,cAAc,CAAC;IACzC,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,QAAQ,EAAE,uBAAuB,CAAC;IAClD,SAAgB,OAAO,EAAE,mBAAmB,CAAC;IAC7C,SAAgB,MAAM,EAAE,oBAAoB,CAAC;IAC7C,SAAgB,OAAO,EAAE,kBAAkB,CAAC;IAC5C,SAAgB,eAAe,EAAE,qBAAqB,CAAC;IACvD,SAAgB,UAAU,EAAE,mBAAmB,CAAC;IAEhD,YAAY,UAAU,GAAE,gBAAqB,EAsC5C;CACF"}

package/dist/service/kms/sim-kms-commands.js

@@ -9,6 +9,7 @@ import { SimKmsKeyCommands } from "./command/key/sim-kms-key-commands.js";
 import { SimKmsKeyLifecycleCommands } from "./command/key/sim-kms-key-lifecycle-commands.js";
 import { SimKmsKeyPolicyCommands } from "./command/key/sim-kms-key-policy-commands.js";
 import { SimKmsListKeys } from "./command/key/sim-kms-list-keys.js";
+import { SimKmsSignCommands } from "./command/sign/sim-kms-sign-commands.js";
 import { SimKmsKeyFactory } from "./key/sim-kms-key-factory.js";
 import { SimKmsKeyMetadataView } from "./key/sim-kms-key-metadata.js";
 import { SimKmsKeyStore } from "./key/sim-kms-key-store.js";
@@ -28,6 +29,7 @@ export class SimKmsCommands {
     policies;
     aliases;
     crypto;
+    signing;
     generateDataKey;
     background;
     constructor(properties = {}) {
@@ -57,6 +59,7 @@ export class SimKmsCommands {
         });
         this.aliases = new SimKmsAliasCommands({ keys: this.keys, authorizer });
         this.crypto = new SimKmsCryptoCommands({ keys: this.keys, authorizer });
+        this.signing = new SimKmsSignCommands({ keys: this.keys, authorizer });
         this.generateDataKey = new SimKmsGenerateDataKey({
             keys: this.keys,
             authorizer,

package/dist/service/kms/sim-kms-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-commands.js","sourceRoot":"","sources":["../../../src/service/kms/sim-kms-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAW5D;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACT,IAAI,CAAiB;IACrB,GAAG,CAAoB;IACvB,QAAQ,CAAiB;IACzB,SAAS,CAA6B;IACtC,QAAQ,CAA0B;IAClC,OAAO,CAAsB;IAC7B,MAAM,CAAuB;IAC7B,eAAe,CAAwB;IACvC,UAAU,CAAsB;IAEhD,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC;YACtC,kBAAkB;YAClB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,IAAI,iBAAiB,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;YACV,UAAU;YACV,QAAQ,EAAE,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,SAAS,CAAC;SAClE,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;YACV,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,IAAI,qBAAqB,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-kms-commands.js","sourceRoot":"","sources":["../../../src/service/kms/sim-kms-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAW5D;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACT,IAAI,CAAiB;IACrB,GAAG,CAAoB;IACvB,QAAQ,CAAiB;IACzB,SAAS,CAA6B;IACtC,QAAQ,CAA0B;IAClC,OAAO,CAAsB;IAC7B,MAAM,CAAuB;IAC7B,OAAO,CAAqB;IAC5B,eAAe,CAAwB;IACvC,UAAU,CAAsB;IAEhD,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC;YACtC,kBAAkB;YAClB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,IAAI,iBAAiB,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;YACV,UAAU;YACV,QAAQ,EAAE,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,SAAS,CAAC;SAClE,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;YACV,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,eAAe,GAAG,IAAI,qBAAqB,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/kms/sim-kms.d.ts

@@ -92,6 +92,18 @@ export declare class SimKms {
      * Handle a GenerateDataKey Command from the SDK.
      */
     generateDataKey(command: simKmsCommands.SimGenerateDataKeyCommand, options?: SimKmsRequestOptions): Promise<simKmsCommands.SimGenerateDataKeyCommandOutput>;
+    /**
+     * Handle a Sign Command from the SDK.
+     */
+    sign(command: simKmsCommands.SimSignCommand, options?: SimKmsRequestOptions): Promise<simKmsCommands.SimSignCommandOutput>;
+    /**
+     * Handle a Verify Command from the SDK.
+     */
+    verify(command: simKmsCommands.SimVerifyCommand, options?: SimKmsRequestOptions): Promise<simKmsCommands.SimVerifyCommandOutput>;
+    /**
+     * Handle a GetPublicKey Command from the SDK.
+     */
+    getPublicKey(command: simKmsCommands.SimGetPublicKeyCommand, options?: SimKmsRequestOptions): Promise<simKmsCommands.SimGetPublicKeyCommandOutput>;
     /**
      * Get this service's CloudFormation Resource factory, which creates
      * simulated keys and aliases from AWS::KMS::* Resources.

package/dist/service/kms/sim-kms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms.d.ts","sourceRoot":"","sources":["../../../src/service/kms/sim-kms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9E;;;;;;;GAOG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EAE5C;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE5C;IAED;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEpD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,cAAc,CAAC,kBAAkB,EAC1C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAGlD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,cAAc,CAAC,oBAAoB,EAC5C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAGpD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,cAAc,CAAC,2BAA2B,EACnD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,iCAAiC,CAAC,CAG3D;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,cAAc,CAAC,iBAAiB,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAGjD;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,cAAc,CAAC,iBAAiB,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAGjD;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;;OAGG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-kms.d.ts","sourceRoot":"","sources":["../../../src/service/kms/sim-kms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9E;;;;;;;GAOG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EAE5C;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE5C;IAED;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEpD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,cAAc,CAAC,kBAAkB,EAC1C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAGlD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,cAAc,CAAC,oBAAoB,EAC5C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAGpD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,cAAc,CAAC,2BAA2B,EACnD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,iCAAiC,CAAC,CAG3D;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,cAAc,CAAC,iBAAiB,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAGjD;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,cAAc,CAAC,iBAAiB,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAGjD;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,cAAc,CAAC,cAAc,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAG9C;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,cAAc,CAAC,gBAAgB,EACxC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAGhD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;;OAGG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/kms/sim-kms.js

@@ -139,6 +139,27 @@ export class SimKms {
         await this.commands.background.sequence();
         return this.commands.generateDataKey.handle(command, options);
     }
+    /**
+     * Handle a Sign Command from the SDK.
+     */
+    async sign(command, options) {
+        await this.commands.background.sequence();
+        return this.commands.signing.sign(command, options);
+    }
+    /**
+     * Handle a Verify Command from the SDK.
+     */
+    async verify(command, options) {
+        await this.commands.background.sequence();
+        return this.commands.signing.verify(command, options);
+    }
+    /**
+     * Handle a GetPublicKey Command from the SDK.
+     */
+    async getPublicKey(command, options) {
+        await this.commands.background.sequence();
+        return this.commands.signing.getPublicKey(command, options);
+    }
     /**
      * Get this service's CloudFormation Resource factory, which creates
      * simulated keys and aliases from AWS::KMS::* Resources.