@kensio/yulin 1.12.1 → 1.14.0

package/dist/service/cloudformation/stack/sim-cfn-stack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-stack.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/stack/sim-cfn-stack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,KAAK,2BAA2B,EACjC,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAEhG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAM1E,MAAM,MAAM,0BAA0B,GAAG,KAAK,CAC5C,MAAM,EACN,4BAA4B,CAC7B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,CAAC;AAEpB,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACvD;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAW;IACtB,SAAgB,SAAS,EAAE,8BAA8B,CAAC;IAC1D,SAAgB,QAAQ,EAAE,0BAA0B,CAAC;IACrD,SAAgB,QAAQ,EAAE,4BAA4B,CAAC;IACvD,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,iCAAwC;IAEtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO,CAAC,WAAW,CAAiB;IAEpC,YAAY,UAAU,EAAE,gCAAgC,EAmDvD;IAED,2CAA2C;IAC3C,IAAW,MAAM,IAAI,4BAA4B,CAEhD;IAED,4EAA4E;IAC5E,IAAW,KAAK,IAAI,KAAK,GAAG,SAAS,CAEpC;IAED;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5B;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,GAAE,2BAAgC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAyBf;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,UAAU,GAAE,2BAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAExE;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAE9B;IAED,0CAA0C;IAC1C,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEzD;IAED,2EAA2E;IAC3E,IAAW,gBAAgB,IAAI,SAAS,cAAc,EAAE,CAEvD;IAED,6EAA6E;IAC7E,IAAW,cAAc,IAAI,SAAS,cAAc,EAAE,CAErD;IAED,yDAAyD;IACzD,IAAW,wBAAwB,IAAI,SAAS,cAAc,EAAE,CAE/D;IAED,2EAA2E;IAC3E,IAAW,iBAAiB,IAAI,SAAS,cAAc,EAAE,CAExD;IAED,+DAA+D;IAC/D,IAAW,iBAAiB,IAAI,SAAS,qBAAqB,EAAE,CAE/D;IAED,OAAO,KAAK,MAAM,GAEjB;YAEa,eAAe;IAK7B,OAAO,CAAC,cAAc;CAMvB"}
+{"version":3,"file":"sim-cfn-stack.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/stack/sim-cfn-stack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,KAAK,2BAA2B,EACjC,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAEhG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAM1E,MAAM,MAAM,0BAA0B,GAAG,KAAK,CAC5C,MAAM,EACN,4BAA4B,CAC7B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,CAAC;AAEpB,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACvD;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;CAChE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAW;IACtB,SAAgB,SAAS,EAAE,8BAA8B,CAAC;IAC1D,SAAgB,QAAQ,EAAE,0BAA0B,CAAC;IACrD,SAAgB,QAAQ,EAAE,4BAA4B,CAAC;IACvD,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,iCAAwC;IAEtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO,CAAC,WAAW,CAAiB;IAEpC,YAAY,UAAU,EAAE,gCAAgC,EAmDvD;IAED,2CAA2C;IAC3C,IAAW,MAAM,IAAI,4BAA4B,CAEhD;IAED,4EAA4E;IAC5E,IAAW,KAAK,IAAI,KAAK,GAAG,SAAS,CAEpC;IAED;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5B;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,GAAE,2BAAgC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAyBf;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,UAAU,GAAE,2BAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAExE;IAED;;OAEG;IACG,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAE9B;IAED,0CAA0C;IAC1C,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEzD;IAED,2EAA2E;IAC3E,IAAW,gBAAgB,IAAI,SAAS,cAAc,EAAE,CAEvD;IAED,6EAA6E;IAC7E,IAAW,cAAc,IAAI,SAAS,cAAc,EAAE,CAErD;IAED,yDAAyD;IACzD,IAAW,wBAAwB,IAAI,SAAS,cAAc,EAAE,CAE/D;IAED,2EAA2E;IAC3E,IAAW,iBAAiB,IAAI,SAAS,cAAc,EAAE,CAExD;IAED,+DAA+D;IAC/D,IAAW,iBAAiB,IAAI,SAAS,qBAAqB,EAAE,CAE/D;IAED,OAAO,KAAK,MAAM,GAEjB;YAEa,eAAe;IAK7B,OAAO,CAAC,cAAc;CAMvB"}

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.d.ts

@@ -1,8 +1,9 @@
-import type { SimCfnCfBinding, SimCfnExecutableResourceBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
+import type { SimCfnDeployBinding } from "../../../cloudformation/bind/sim-cfn-deploy-binding.js";
+import type { SimCfnCfBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 interface SimCfnCffBindingLookupProperties {
     readonly resource: SimCfnResource;
-    readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
+    readonly bindings?: readonly SimCfnDeployBinding[] | undefined;
     readonly cffName: string;
 }
 /**

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cff-binding-lookup.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,+BAA+B,EAChC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAG3F,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,gCAAgC,GAC3C,eAAe,GAAG,SAAS,CAc7B"}
+{"version":3,"file":"sim-cfn-cff-binding-lookup.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AAEjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAG3F,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,gCAAgC,GAC3C,eAAe,GAAG,SAAS,CAc7B"}

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cff-binding-lookup.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAU/G;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAA4C;IAE5C,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAC/C;QACE,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CACF,CAAC;IAEF,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAE7D,OAAO,aAAa,CAAC,WAAW,CAAC;QAC/B,YAAY,EAAE,UAAU,CAAC,OAAO;QAChC,GAAG,EAAE,uBAAuB,SAAS,aAAa,UAAU,CAAC,OAAO,EAAE;KACvE,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sim-cfn-cff-binding-lookup.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-binding-lookup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAU/G;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAA4C;IAE5C,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAC/C;QACE,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CACF,CAAC;IAEF,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAE7D,OAAO,aAAa,CAAC,WAAW,CAAC;QAC/B,YAAY,EAAE,UAAU,CAAC,OAAO;QAChC,GAAG,EAAE,uBAAuB,SAAS,aAAa,UAAU,CAAC,OAAO,EAAE;KACvE,CAAC,CAAC;AACL,CAAC"}

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.d.ts

@@ -1,4 +1,4 @@
-import type { SimCfnExecutableResourceBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
+import type { SimCfnDeployBinding } from "../../../cloudformation/bind/sim-cfn-deploy-binding.js";
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import { makeCffFunctionCodeInput } from "../../cff/function-code-input/cff-function-code-input.js";
@@ -6,7 +6,7 @@ import { type SimCfnCffFunctionConfig } from "./sim-cfn-cff-function-config.js";
 interface SimCfnCfFunctionCreateInputBuilderProperties {
     readonly resource: SimCfnResource;
     readonly properties: SimCfnTemplateValueRecord;
-    readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
+    readonly bindings?: readonly SimCfnDeployBinding[] | undefined;
 }
 interface SimCfnCfFunctionCreateInput {
     readonly Name: string;

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cff-create-input-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kCAAkC,CAAC;AAG1C,UAAU,4CAA4C;IACpD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEX;IAEd,YAAY,UAAU,EAAE,4CAA4C,EAInE;IAED;;;;;;;;OAQG;IACH,KAAK,IAAI,2BAA2B,CAmBnC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;CAOhB"}
+{"version":3,"file":"sim-cfn-cff-create-input-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kCAAkC,CAAC;AAG1C,UAAU,4CAA4C;IACpD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;CAChE;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IAEtE,YAAY,UAAU,EAAE,4CAA4C,EAInE;IAED;;;;;;;;OAQG;IACH,KAAK,IAAI,2BAA2B,CAmBnC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;CAOhB"}

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cff-create-input-builder.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAIhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EACL,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAcvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA2B;IACrB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,QAAQ,CAEX;IAEd,YAAY,UAAwD;QAClE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK;QACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;SACR,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,OAAO;YACb,YAAY,EACV,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAChC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/C,cAAc,EAAE,uBAAuB,CACrC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAClC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,YAAY;QAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE1D,aAAa,CACX,iBAAiB,EACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,eAAe,CACpE,CAAC;QACF,aAAa,CACX,iBAAiB,EACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,eAAe,CACpE,CAAC;QAEF,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,gCAAgC,CACrF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACK,OAAO;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAC1D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cff-create-input-builder.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/cff/sim-cfn-cff-create-input-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAIhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EACL,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAcvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA2B;IACrB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,QAAQ,CAA6C;IAEtE,YAAY,UAAwD;QAClE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK;QACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;SACR,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,OAAO;YACb,YAAY,EACV,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAChC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/C,cAAc,EAAE,uBAAuB,CACrC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAClC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,YAAY;QAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE1D,aAAa,CACX,iBAAiB,EACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,eAAe,CACpE,CAAC;QACF,aAAa,CACX,iBAAiB,EACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,eAAe,CACpE,CAAC;QAEF,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CACjB,6BAA6B,IAAI,CAAC,QAAQ,CAAC,SAAS,gCAAgC,CACrF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACK,OAAO;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAC1D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9B,CAAC;CACF"}

package/dist/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.d.ts

@@ -22,15 +22,16 @@ export declare class SimCfnCfOriginAccessControlConfig {
     build(): SimCloudFrontOriginAccessControl;
     private originAccessControlConfig;
     /**
-     * Refuse a config asking for anything but the one origin type and protocol a
-     * simulated origin access control signs.
+     * One field of the config naming a value from a fixed set.
+     *
+     * A value outside the set is refused by name, along with the set it should
+     * have come from, rather than stored and treated as one of them.
      */
-    private assertFixedValues;
+    private oneOf;
     /**
      * One string field of the config, or nothing when it is absent.
      */
     private text;
-    private signingBehavior;
     /**
      * Refuse this Resource, saying which part of it could not be read.
      */

package/dist/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-oac-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EACL,gCAAgC,EAEjC,MAAM,6DAA6D,CAAC;AAkBrE;;;;;;;GAOG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IAEvD,YAAY,UAAU,EAAE;QACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;KAChD,EAGA;IAED;;OAEG;IACH,KAAK,IAAI,gCAAgC,CAcxC;IAED,OAAO,CAAC,yBAAyB;IAUjC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;IACH,OAAO,CAAC,IAAI;IAkBZ,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACH,OAAO,CAAC,MAAM;CAKf"}
+{"version":3,"file":"sim-cfn-cf-oac-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EACL,gCAAgC,EAGjC,MAAM,6DAA6D,CAAC;AAqBrE;;;;;;;GAOG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IAEvD,YAAY,UAAU,EAAE;QACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;KAChD,EAGA;IAED;;OAEG;IACH,KAAK,IAAI,gCAAgC,CAsBxC;IAED,OAAO,CAAC,yBAAyB;IAUjC;;;;;OAKG;IACH,OAAO,CAAC,KAAK;IAkBb;;OAEG;IACH,OAAO,CAAC,IAAI;IAkBZ;;OAEG;IACH,OAAO,CAAC,MAAM;CAKf"}

package/dist/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.js

@@ -1,17 +1,19 @@
 import { isRecord } from "../../../../util/type-guard/record.js";
 import { SimCloudFrontOriginAccessControl, } from "../../origin-access-control/sim-cf-origin-access-control.js";
 /**
- * The config values a simulated origin access control is fixed to.
+ * The values a simulated origin access control accepts for each field of the
+ * config that names one of a fixed set.
  *
- * CloudFront also signs for MediaStore, MediaPackage V2 and Lambda Function URL
- * Origins, and none of those is modelled. SigV4 is the only protocol CloudFront
- * offers. Anything else is refused by name rather than stored and treated as
- * though it behaved like these.
+ * CloudFront also signs for MediaStore and MediaPackage V2 Origins, and neither
+ * is modelled, so neither is an origin type here. SigV4 is the only protocol
+ * CloudFront offers. Anything else is refused by name rather than stored and
+ * treated as though it behaved like one of these.
  */
-const fixedValues = {
-    OriginAccessControlOriginType: "s3",
-    SigningProtocol: "sigv4",
-};
+const originTypes = [
+    "s3",
+    "lambda",
+];
+const signingProtocols = ["sigv4"];
 const signingBehaviors = ["always", "never", "no-override"];
 /**
  * Reads an AWS::CloudFront::OriginAccessControl Resource into a simulated
@@ -33,12 +35,16 @@ export class SimCfnCfOriginAccessControlConfig {
      */
     build() {
         const config = this.originAccessControlConfig();
-        this.assertFixedValues(config);
+        // The protocol is checked and then dropped: SigV4 is the only one
+        // CloudFront offers, so there is nothing for the origin access control to
+        // remember about it.
+        this.oneOf(config, "SigningProtocol", signingProtocols);
         const description = this.text(config, "Description");
         return new SimCloudFrontOriginAccessControl({
             name: this.text(config, "Name") ??
                 this.refuse("OriginAccessControlConfig Name must be a string"),
-            signingBehavior: this.signingBehavior(config),
+            originType: this.oneOf(config, "OriginAccessControlOriginType", originTypes),
+            signingBehavior: this.oneOf(config, "SigningBehavior", signingBehaviors),
             ...(description !== undefined && { description }),
         });
     }
@@ -50,18 +56,19 @@ export class SimCfnCfOriginAccessControlConfig {
         return config;
     }
     /**
-     * Refuse a config asking for anything but the one origin type and protocol a
-     * simulated origin access control signs.
+     * One field of the config naming a value from a fixed set.
+     *
+     * A value outside the set is refused by name, along with the set it should
+     * have come from, rather than stored and treated as one of them.
      */
-    assertFixedValues(config) {
-        for (const [key, fixed] of Object.entries(fixedValues)) {
-            // oxlint-disable-next-line security/detect-object-injection
-            const value = config[key];
-            if (value !== fixed) {
-                this.refuse(`${key} ${String(value)} is not modelled by simulated origin ` +
-                    `access controls, which only sign an ${fixedValues.OriginAccessControlOriginType} Origin with ${fixedValues.SigningProtocol}`);
-            }
+    oneOf(config, key, values) {
+        // oxlint-disable-next-line security/detect-object-injection
+        const value = config[key];
+        if (!values.includes(value)) {
+            this.refuse(`${key} ${String(value)} is not modelled by simulated origin access ` +
+                `controls, which accept ${values.join(", ")}`);
         }
+        return value;
     }
     /**
      * One string field of the config, or nothing when it is absent.
@@ -77,13 +84,6 @@ export class SimCfnCfOriginAccessControlConfig {
         }
         return value;
     }
-    signingBehavior(config) {
-        const value = config["SigningBehavior"];
-        if (!isSigningBehavior(value)) {
-            this.refuse(`SigningBehavior ${String(value)} is not one of ${signingBehaviors.join(", ")}`);
-        }
-        return value;
-    }
     /**
      * Refuse this Resource, saying which part of it could not be read.
      */
@@ -91,7 +91,4 @@ export class SimCfnCfOriginAccessControlConfig {
         throw new Error(`Invalid AWS::CloudFront::OriginAccessControl ${this.resource.logicalId}: ${detail}`);
     }
 }
-function isSigningBehavior(value) {
-    return signingBehaviors.includes(value);
-}
 //# sourceMappingURL=sim-cfn-cf-oac-config.js.map

package/dist/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-oac-config.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAGjE,OAAO,EACL,gCAAgC,GAEjC,MAAM,6DAA6D,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG;IAClB,6BAA6B,EAAE,IAAI;IACnC,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,MAAM,gBAAgB,GACpB,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IAEvD,YAAY,UAGX;QACC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAEhD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAErD,OAAO,IAAI,gCAAgC,CAAC;YAC1C,IAAI,EACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,iDAAiD,CAAC;YAChE,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC7C,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,yBAAyB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,MAA+B;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAE1B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,uCAAuC;oBAC5D,uCAAuC,WAAW,CAAC,6BAA6B,gBAAgB,WAAW,CAAC,eAAe,EAAE,CAChI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,IAAI,CACV,MAA+B,EAC/B,GAAW;QAEX,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,6BAA6B,GAAG,mBAAmB,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CACrB,MAA+B;QAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAExC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CACT,mBAAmB,MAAM,CAAC,KAAK,CAAC,kBAAkB,gBAAgB,CAAC,IAAI,CACrE,IAAI,CACL,EAAE,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,MAAc;QAC3B,MAAM,IAAI,KAAK,CACb,gDAAgD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,EAAE,CACrF,CAAC;IACJ,CAAC;CACF;AAED,SAAS,iBAAiB,CACxB,KAAc;IAEd,OAAO,gBAAgB,CAAC,QAAQ,CAC9B,KAAwD,CACzD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cfn-cf-oac-config.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/origin-access-control/sim-cfn-cf-oac-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAGjE,OAAO,EACL,gCAAgC,GAGjC,MAAM,6DAA6D,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,WAAW,GAA0D;IACzE,IAAI;IACJ,QAAQ;CACT,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAU,CAAC;AAE5C,MAAM,gBAAgB,GACpB,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IAEvD,YAAY,UAGX;QACC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAEhD,kEAAkE;QAClE,0EAA0E;QAC1E,qBAAqB;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAExD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAErD,OAAO,IAAI,gCAAgC,CAAC;YAC1C,IAAI,EACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,iDAAiD,CAAC;YAChE,UAAU,EAAE,IAAI,CAAC,KAAK,CACpB,MAAM,EACN,+BAA+B,EAC/B,WAAW,CACZ;YACD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;YACxE,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,yBAAyB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CACX,MAA+B,EAC/B,GAAW,EACX,MAAwB;QAExB,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,8CAA8C;gBACnE,0BAA0B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChD,CAAC;QACJ,CAAC;QAED,OAAO,KAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,IAAI,CACV,MAA+B,EAC/B,GAAW;QAEX,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,6BAA6B,GAAG,mBAAmB,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,MAAc;QAC3B,MAAM,IAAI,KAAK,CACb,gDAAgD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,EAAE,CACrF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.d.ts

@@ -31,12 +31,5 @@ export declare class SimCloudFrontOriginConfigurator {
      * control, which is how the CloudFront API says an Origin has none.
      */
     private originAccessControl;
-    /**
-     * Refuse an origin access control on a custom Origin.
-     *
-     * Every origin access control here signs for an S3 Origin, and CloudFront
-     * refuses one whose origin type does not match the Origin it is attached to.
-     */
-    private assertNoOriginAccessControl;
 }
 //# sourceMappingURL=sim-cloud-front-origin-configurator.d.ts.map

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-origin-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,6CAA6C,CAAC;AAErD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAG1G,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AAGrI;;;;;;;;;GASG;AACH,qBAAa,+BAA+B;IAExC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAH1C,YACmB,gBAAgB,EAAE,6BAA6B,EAC/C,oBAAoB,EAAE,wCAAwC,EAC9D,sBAAsB,CAAC,EAAE,2BAA2B,YAAA,EACnE;IAEJ;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,MAAM,EAAE,yBAAyB,GAChC,IAAI,CAqDN;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IA2B3B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;CAcpC"}
+{"version":3,"file":"sim-cloud-front-origin-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,6CAA6C,CAAC;AAErD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAG1G,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AAIrI;;;;;;;;;GASG;AACH,qBAAa,+BAA+B;IAExC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAH1C,YACmB,gBAAgB,EAAE,6BAA6B,EAC/C,oBAAoB,EAAE,wCAAwC,EAC9D,sBAAsB,CAAC,EAAE,2BAA2B,YAAA,EACnE;IAEJ;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,MAAM,EAAE,yBAAyB,GAChC,IAAI,CAyDN;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;CA0B5B"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.js

@@ -2,6 +2,7 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCloudFrontS3Origin, } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import { assertNoSimCfS3OriginAccessIdentity } from "../../origin/s3/sim-cf-s3-origin-access-identity.js";
 import { SimCloudFrontCustomOrigin } from "../../origin/custom/sim-cloudfront-custom-origin.js";
+import { assertSimCfOacOriginType } from "../../origin-access-control/sim-cf-oac-origin-type.js";
 import { SimCloudFrontInvalidOriginAccessControl } from "../../error/sim-cloudfront.error.js";
 /**
  * Applies Origin configuration to a sim CloudFront Distribution.
@@ -31,6 +32,7 @@ export class SimCloudFrontOriginConfigurator {
         const originAccessControl = this.originAccessControl(origin.Id, origin.OriginAccessControlId);
         if (origin.S3OriginConfig !== undefined) {
             assertNoSimCfS3OriginAccessIdentity(origin.Id, origin.S3OriginConfig);
+            assertSimCfOacOriginType(origin.Id, "s3", originAccessControl);
             const originBucket = this.s3OriginResolver(origin.DomainName);
             assertDefined(originBucket, `Sim S3 Bucket for CloudFront Origin ${origin.DomainName}`);
             distribution.addOrigin(origin.Id, new SimCloudFrontS3Origin({
@@ -41,13 +43,16 @@ export class SimCloudFrontOriginConfigurator {
             return;
         }
         if (origin.CustomOriginConfig !== undefined) {
-            this.assertNoOriginAccessControl(origin.Id, originAccessControl);
+            // A custom Origin is reached over HTTP, so the only origin access control
+            // that can sign for one is the Lambda Function URL type.
+            assertSimCfOacOriginType(origin.Id, "lambda", originAccessControl);
             assertDefined(this.customOriginDispatcher, `Simulated AWS environment for sim CloudFront custom Origin ${origin.Id}, which a standalone SimCloudFront has no way to reach`);
             distribution.addOrigin(origin.Id, new SimCloudFrontCustomOrigin({
                 originId: origin.Id,
                 domainName: origin.DomainName,
                 originPath: origin.OriginPath,
                 dispatcher: this.customOriginDispatcher,
+                ...(originAccessControl !== undefined && { originAccessControl }),
             }));
             return;
         }
@@ -75,19 +80,5 @@ export class SimCloudFrontOriginConfigurator {
         }
         return originAccessControl;
     }
-    /**
-     * Refuse an origin access control on a custom Origin.
-     *
-     * Every origin access control here signs for an S3 Origin, and CloudFront
-     * refuses one whose origin type does not match the Origin it is attached to.
-     */
-    assertNoOriginAccessControl(originId, originAccessControl) {
-        if (originAccessControl === undefined) {
-            return;
-        }
-        throw new SimCloudFrontInvalidOriginAccessControl(`Sim CloudFront custom Origin ${originId} names origin access control ` +
-            `${originAccessControl.name}, which signs for an ` +
-            `${originAccessControl.originType} Origin`);
-    }
 }
 //# sourceMappingURL=sim-cloud-front-origin-configurator.js.map

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-origin-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,qBAAqB,GAEtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,mCAAmC,EAAE,MAAM,qDAAqD,CAAC;AAE1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAGhG,OAAO,EAAE,uCAAuC,EAAE,MAAM,qCAAqC,CAAC;AAE9F;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IAEvB,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IAHzC,YACmB,gBAA+C,EAC/C,oBAA8D,EAC9D,sBAAoD;gCAFpD,gBAAgB;oCAChB,oBAAoB;sCACpB,sBAAsB;IACtC,CAAC;IAEJ;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,MAAiC;QAEjC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACjD,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAEjE,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAClD,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,qBAAqB,CAC7B,CAAC;QAEF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,mCAAmC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAEtE,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAE9D,aAAa,CACX,YAAY,EACZ,uCAAuC,MAAM,CAAC,UAAU,EAAE,CAC3D,CAAC;YAEF,YAAY,CAAC,SAAS,CACpB,MAAM,CAAC,EAAE,EACT,IAAI,qBAAqB,CAAC;gBACxB,YAAY;gBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;YAEjE,aAAa,CACX,IAAI,CAAC,sBAAsB,EAC3B,8DAA8D,MAAM,CAAC,EAAE,wDAAwD,CAChI,CAAC;YAEF,YAAY,CAAC,SAAS,CACpB,MAAM,CAAC,EAAE,EACT,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI,CAAC,sBAAsB;aACxC,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,CAAC,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CACzB,QAAgB,EAChB,qBAAyC;QAEzC,IACE,qBAAqB,KAAK,SAAS;YACnC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CACxD,qBAAqB,CACtB,CAAC;QAEF,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,uCAAuC,CAC/C,yBAAyB,QAAQ,+BAA+B;gBAC9D,GAAG,qBAAqB,yCAAyC;gBACjE,kEAAkE;gBAClE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACK,2BAA2B,CACjC,QAAgB,EAChB,mBAAiE;QAEjE,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,uCAAuC,CAC/C,gCAAgC,QAAQ,+BAA+B;YACrE,GAAG,mBAAmB,CAAC,IAAI,uBAAuB;YAClD,GAAG,mBAAmB,CAAC,UAAU,SAAS,CAC7C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cloud-front-origin-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-origin-configurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,qBAAqB,GAEtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,mCAAmC,EAAE,MAAM,qDAAqD,CAAC;AAE1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAGhG,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,uCAAuC,EAAE,MAAM,qCAAqC,CAAC;AAE9F;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IAEvB,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IAHzC,YACmB,gBAA+C,EAC/C,oBAA8D,EAC9D,sBAAoD;gCAFpD,gBAAgB;oCAChB,oBAAoB;sCACpB,sBAAsB;IACtC,CAAC;IAEJ;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,MAAiC;QAEjC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACjD,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAEjE,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAClD,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,qBAAqB,CAC7B,CAAC;QAEF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,mCAAmC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YACtE,wBAAwB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAE/D,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAE9D,aAAa,CACX,YAAY,EACZ,uCAAuC,MAAM,CAAC,UAAU,EAAE,CAC3D,CAAC;YAEF,YAAY,CAAC,SAAS,CACpB,MAAM,CAAC,EAAE,EACT,IAAI,qBAAqB,CAAC;gBACxB,YAAY;gBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC5C,0EAA0E;YAC1E,yDAAyD;YACzD,wBAAwB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAEnE,aAAa,CACX,IAAI,CAAC,sBAAsB,EAC3B,8DAA8D,MAAM,CAAC,EAAE,wDAAwD,CAChI,CAAC;YAEF,YAAY,CAAC,SAAS,CACpB,MAAM,CAAC,EAAE,EACT,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI,CAAC,sBAAsB;gBACvC,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,CAAC,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CACzB,QAAgB,EAChB,qBAAyC;QAEzC,IACE,qBAAqB,KAAK,SAAS;YACnC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CACxD,qBAAqB,CACtB,CAAC;QAEF,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,uCAAuC,CAC/C,yBAAyB,QAAQ,+BAA+B;gBAC9D,GAAG,qBAAqB,yCAAyC;gBACjE,kEAAkE;gBAClE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;CACF"}

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.d.ts

@@ -2,6 +2,11 @@ interface SimCfCustomOriginRequestProperties {
     readonly domainName: string;
     readonly originPath: string;
     readonly request: Request;
+    /**
+     * Headers stating who the Origin request is from, which an Origin whose
+     * origin access control signs carries and an anonymous one does not.
+     */
+    readonly signingHeaders?: Readonly<Record<string, string>> | undefined;
 }
 /**
  * Build the request sim CloudFront sends on to a custom Origin.

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-custom-origin-request.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-request.ts"],"names":[],"mappings":"AAEA,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,kCAAkC,GAC7C,OAAO,CA0BT"}
+{"version":3,"file":"sim-cf-custom-origin-request.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-request.ts"],"names":[],"mappings":"AAGA,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,kCAAkC,GAC7C,OAAO,CAuCT"}

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.js

@@ -1,4 +1,5 @@
 import { SimAwsLocalUrl } from "../../../../serve/http/url/sim-aws-local-url.js";
+import { stripSimAwsControlHeaders } from "../../../iam/request/sim-aws-control-headers.js";
 /**
  * Build the request sim CloudFront sends on to a custom Origin.
  *
@@ -18,6 +19,16 @@ export function simCfCustomOriginRequest(properties) {
     originUrl.search = viewerUrl.search;
     const headers = new Headers(request.headers);
     headers.set("host", originUrl.host);
+    // Who the Origin request is from is the Origin's business, not the viewer's,
+    // so a viewer's own control headers are dropped before the Origin's are
+    // applied. A viewer reaching a Distribution through the HTTP boundary has
+    // had them stripped already; one reaching a controller in process has not,
+    // and either way an unsigned Origin should state nothing.
+    stripSimAwsControlHeaders(headers);
+    const signingHeaders = Object.entries(properties.signingHeaders ?? {});
+    for (const [name, value] of signingHeaders) {
+        headers.set(name, value);
+    }
     const isBodyAllowed = !/^(?:get|head)$/iu.test(request.method);
     return new Request(originUrl, {
         method: request.method,

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-custom-origin-request.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAA8C;IAE9C,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;QACnC,KAAK,EAAE,WAAW,UAAU,CAAC,UAAU,EAAE;KAC1C,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,SAAS,CAAC,QAAQ,GAAG,iBAAiB,CACpC,UAAU,CAAC,UAAU,EACrB,SAAS,CAAC,QAAQ,CACnB,CAAC;IACF,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,UAAkB;IAC/D,OAAO,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC"}
+{"version":3,"file":"sim-cf-custom-origin-request.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAa5F;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAA8C;IAE9C,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;QACnC,KAAK,EAAE,WAAW,UAAU,CAAC,UAAU,EAAE;KAC1C,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,SAAS,CAAC,QAAQ,GAAG,iBAAiB,CACpC,UAAU,CAAC,UAAU,EACrB,SAAS,CAAC,QAAQ,CACnB,CAAC;IACF,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,0DAA0D;IAC1D,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,UAAkB;IAC/D,OAAO,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC"}

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.d.ts

@@ -0,0 +1,29 @@
+import type { SimCloudFrontOriginAccessControl } from "../../origin-access-control/sim-cf-origin-access-control.js";
+import type { SimCloudFrontOriginRequest } from "../sim-cloudfront-request-response.js";
+/**
+ * Who a CloudFront custom Origin is reached as.
+ *
+ * An origin access control that signs makes the Origin request one from the
+ * CloudFront service principal carrying the Distribution's ARN, which is the
+ * pair a Function URL's `lambda:InvokeFunctionUrl` permission for CloudFront is
+ * written against. Without one, or with a `SigningBehavior` of `never`, the
+ * Origin is reached anonymously, so a Function URL with `AWS_IAM` refuses it.
+ *
+ * Real CloudFront states that by signing the request with SigV4. Nothing here
+ * computes a signature, so it is stated at the simulated HTTP boundary instead,
+ * the same way anything else calling into simulated AWS in process says who it
+ * is.
+ *
+ * Which Distribution the request belongs to is only known per request, so this
+ * answers per fetch rather than when the Origin is built.
+ */
+export declare class SimCfCustomOriginSigner {
+    private readonly originAccessControl;
+    constructor(originAccessControl?: SimCloudFrontOriginAccessControl);
+    /**
+     * The headers stating who one Origin request is from, which are none when the
+     * Origin is reached anonymously.
+     */
+    forRequest(request: SimCloudFrontOriginRequest): Record<string, string>;
+}
+//# sourceMappingURL=sim-cf-custom-origin-signer.d.ts.map

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-custom-origin-signer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6DAA6D,CAAC;AAEpH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAExF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAEtB;IAEd,YAAY,mBAAmB,CAAC,EAAE,gCAAgC,EAEjE;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAetE;CACF"}

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.js

@@ -0,0 +1,45 @@
+import { simAwsCallerHeaderName, simAwsCallerHeaderValue, } from "../../../iam/request/sim-aws-caller-header.js";
+import { simAwsSourceAccountHeaderName, simAwsSourceArnHeaderName, } from "../../../iam/request/sim-aws-request-source.js";
+import { simCloudFrontDistributionArn } from "../../distribution/sim-cf-distribution-view.js";
+import { simCloudFrontServicePrincipal } from "../../sim-cloudfront-service-principal.js";
+/**
+ * Who a CloudFront custom Origin is reached as.
+ *
+ * An origin access control that signs makes the Origin request one from the
+ * CloudFront service principal carrying the Distribution's ARN, which is the
+ * pair a Function URL's `lambda:InvokeFunctionUrl` permission for CloudFront is
+ * written against. Without one, or with a `SigningBehavior` of `never`, the
+ * Origin is reached anonymously, so a Function URL with `AWS_IAM` refuses it.
+ *
+ * Real CloudFront states that by signing the request with SigV4. Nothing here
+ * computes a signature, so it is stated at the simulated HTTP boundary instead,
+ * the same way anything else calling into simulated AWS in process says who it
+ * is.
+ *
+ * Which Distribution the request belongs to is only known per request, so this
+ * answers per fetch rather than when the Origin is built.
+ */
+export class SimCfCustomOriginSigner {
+    originAccessControl;
+    constructor(originAccessControl) {
+        this.originAccessControl = originAccessControl;
+    }
+    /**
+     * The headers stating who one Origin request is from, which are none when the
+     * Origin is reached anonymously.
+     */
+    forRequest(request) {
+        if (this.originAccessControl?.signs !== true) {
+            return {};
+        }
+        return {
+            [simAwsCallerHeaderName]: simAwsCallerHeaderValue({
+                kind: "service",
+                service: simCloudFrontServicePrincipal,
+            }),
+            [simAwsSourceArnHeaderName]: simCloudFrontDistributionArn(request.distribution),
+            [simAwsSourceAccountHeaderName]: request.distribution.accountId,
+        };
+    }
+}
+//# sourceMappingURL=sim-cf-custom-origin-signer.js.map

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-custom-origin-signer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-custom-origin-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAE9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,uBAAuB;IACjB,mBAAmB,CAEtB;IAEd,YAAY,mBAAsD;QAChE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,OAAmC;QAC5C,IAAI,IAAI,CAAC,mBAAmB,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,CAAC,sBAAsB,CAAC,EAAE,uBAAuB,CAAC;gBAChD,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,6BAA6B;aACvC,CAAC;YACF,CAAC,yBAAyB,CAAC,EAAE,4BAA4B,CACvD,OAAO,CAAC,YAAY,CACrB;YACD,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS;SAChE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.d.ts

@@ -0,0 +1,43 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+/**
+ * What a test asks for when it wants the template CDK synthesizes for
+ * `origins.FunctionUrlOrigin.withOriginAccessControl()`.
+ *
+ * Five Resources stand between a test and a Function URL served through a
+ * Distribution, and each test about that shape is about one of them being
+ * wrong, so each field here is one thing a template can get wrong on its own.
+ */
+export interface SimCfFunctionUrlOriginTemplateInput {
+    /** How the origin access control signs, which is `always` in what CDK emits. */
+    readonly signingBehavior: string;
+    /**
+     * Whether the Origin has an origin access control at all, since an Origin
+     * without one is reached anonymously.
+     */
+    readonly originAccessControl: boolean;
+    /**
+     * Whether the template grants CloudFront the Function URL, which CDK always
+     * does alongside the Distribution.
+     */
+    readonly permitted: boolean;
+    /** The Distribution the permission is granted for. */
+    readonly permissionSourceArn: SimCfnTemplateValue;
+}
+/**
+ * The parts of the template a template can leave out.
+ *
+ * Each is a Resource, or a property of one, that CDK always writes and that a
+ * hand-written template can forget. The origin access control contributes two,
+ * which are both there or both absent, since an Origin naming one nothing
+ * created would be refused rather than reached.
+ */
+export interface SimCfFunctionUrlOriginParts {
+    readonly originAccessControl: SimCfnTemplateValueRecord;
+    readonly originAccessControlId: SimCfnTemplateValueRecord;
+    readonly invokePermission: SimCfnTemplateValueRecord;
+}
+/**
+ * Build the optional parts of a Function URL Origin template.
+ */
+export declare function simCfFunctionUrlOriginParts(input: SimCfFunctionUrlOriginTemplateInput): SimCfFunctionUrlOriginParts;
+//# sourceMappingURL=sim-cf-function-url-origin-fragments.d.ts.map

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-function-url-origin-fragments.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,gFAAgF;IAChF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;IACxD,QAAQ,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mCAAmC,GACzC,2BAA2B,CAgC7B"}

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.js

@@ -0,0 +1,46 @@
+/**
+ * Build the optional parts of a Function URL Origin template.
+ */
+export function simCfFunctionUrlOriginParts(input) {
+    return {
+        originAccessControl: included(input.originAccessControl, {
+            SiteOac: {
+                Type: "AWS::CloudFront::OriginAccessControl",
+                Properties: {
+                    OriginAccessControlConfig: {
+                        Name: "site-oac",
+                        OriginAccessControlOriginType: "lambda",
+                        SigningBehavior: input.signingBehavior,
+                        SigningProtocol: "sigv4",
+                    },
+                },
+            },
+        }),
+        originAccessControlId: included(input.originAccessControl, {
+            OriginAccessControlId: { Ref: "SiteOac" },
+        }),
+        // The permission CDK writes beside the Distribution, letting CloudFront
+        // invoke the Function URL for that Distribution alone.
+        invokePermission: included(input.permitted, {
+            InvokeFromCloudFront: {
+                Type: "AWS::Lambda::Permission",
+                Properties: {
+                    FunctionName: { "Fn::GetAtt": ["GreeterFunction", "Arn"] },
+                    Action: "lambda:InvokeFunctionUrl",
+                    Principal: "cloudfront.amazonaws.com",
+                    SourceArn: input.permissionSourceArn,
+                },
+            },
+        }),
+    };
+}
+/**
+ * One fragment of the template, or nothing where the template omits it.
+ */
+function included(present, fragment) {
+    if (!present) {
+        return {};
+    }
+    return fragment;
+}
+//# sourceMappingURL=sim-cf-function-url-origin-fragments.js.map

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-function-url-origin-fragments.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-function-url-origin-fragments.ts"],"names":[],"mappings":"AA4CA;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA0C;IAE1C,OAAO;QACL,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACvD,OAAO,EAAE;gBACP,IAAI,EAAE,sCAAsC;gBAC5C,UAAU,EAAE;oBACV,yBAAyB,EAAE;wBACzB,IAAI,EAAE,UAAU;wBAChB,6BAA6B,EAAE,QAAQ;wBACvC,eAAe,EAAE,KAAK,CAAC,eAAe;wBACtC,eAAe,EAAE,OAAO;qBACzB;iBACF;aACF;SACF,CAAC;QACF,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACzD,qBAAqB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;SAC1C,CAAC;QACF,wEAAwE;QACxE,uDAAuD;QACvD,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE;YAC1C,oBAAoB,EAAE;gBACpB,IAAI,EAAE,yBAAyB;gBAC/B,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;oBAC1D,MAAM,EAAE,0BAA0B;oBAClC,SAAS,EAAE,0BAA0B;oBACrC,SAAS,EAAE,KAAK,CAAC,mBAAmB;iBACrC;aACF;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CACf,OAAgB,EAChB,QAAmC;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-template.factory.d.ts

@@ -0,0 +1,25 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { CfnTemplateBodyRecord } from "../../../cloudformation/template/sim-cfn-template.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { type SimCfFunctionUrlOriginTemplateInput } from "./sim-cf-function-url-origin-fragments.js";
+/**
+ * The ARN of the Distribution the template creates, written the way CDK writes
+ * it.
+ */
+export declare const simCfDistributionArn: SimCfnTemplateValue;
+/**
+ * Builds the template for a Lambda Function URL served through a Distribution
+ * with an origin access control.
+ *
+ * ```typescript
+ * const stack = await simAws.cloudFormation().deployTemplate({
+ *   stackName: "site-stack",
+ *   template: simCfFunctionUrlOriginTemplateFactory.make({ permitted: false }),
+ * });
+ * ```
+ *
+ * The Function URL authorizes with `AWS_IAM`, which is the whole point of the
+ * shape: the endpoint exists, and only the Distribution may use it.
+ */
+export declare const simCfFunctionUrlOriginTemplateFactory: MappedFactory<SimCfFunctionUrlOriginTemplateInput, CfnTemplateBodyRecord, undefined>;
+//# sourceMappingURL=sim-cf-function-url-origin-template.factory.d.ts.map

package/dist/service/cloudfront/origin/custom/sim-cf-function-url-origin-template.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-function-url-origin-template.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/origin/custom/sim-cf-function-url-origin-template.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,2CAA2C,CAAC;AAanD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,mBAUlC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC,sFAkFjD,CAAC"}