@kensio/yulin 1.15.1 → 1.16.0

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-dkim-tokens.js

@@ -0,0 +1,46 @@
+import { createHash } from "node:crypto";
+/** How long a real Easy DKIM token is. */
+const tokenLength = 32;
+/**
+ * The three DKIM tokens CloudFormation reports for an email identity.
+ *
+ * Real SES generates these when it sets up Easy DKIM, and a template publishes
+ * them as CNAME records so SES can find them. Nothing here signs or verifies
+ * anything, so there is no key to derive a token from and these are made up.
+ *
+ * They are made up deterministically, from the identity's own name, for the
+ * reason every generated name in this simulation is: a test that deploys the
+ * same template twice gets the same records, and two identities in one stack
+ * do not collide.
+ *
+ * Producing them at all is the deliberate part. The obvious alternative is to
+ * refuse a DKIM token attribute, but `ses.Identity.publicHostedZone()` in CDK
+ * emits three Route53 record sets reading exactly these, so refusing would
+ * take down an ordinary stack over records nothing in this simulation reads.
+ */
+export function simSesDkimTokens(emailIdentity) {
+    return [1, 2, 3].map((index) => createHash("sha256")
+        .update(`${emailIdentity}:dkim:${String(index)}`)
+        .digest("hex")
+        .slice(0, tokenLength));
+}
+/**
+ * The name of the CNAME record a DKIM token is published under.
+ */
+export function simSesDkimTokenName(emailIdentity, token) {
+    return `${token}._domainkey.${simSesDkimDomain(emailIdentity)}`;
+}
+/**
+ * What that record points at.
+ */
+export function simSesDkimTokenValue(token) {
+    return `${token}.dkim.amazonses.com`;
+}
+/**
+ * The domain the records belong to, which for an address identity is the
+ * domain the address is at.
+ */
+function simSesDkimDomain(emailIdentity) {
+    return emailIdentity.slice(emailIdentity.lastIndexOf("@") + 1);
+}
+//# sourceMappingURL=sim-ses-dkim-tokens.js.map

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-dkim-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-dkim-tokens.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ses/sim-ses-dkim-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,0CAA0C;AAC1C,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7B,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,GAAG,aAAa,SAAS,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,aAAqB,EACrB,KAAa;IAEb,OAAO,GAAG,KAAK,eAAe,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,GAAG,KAAK,qBAAqB,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,aAAqB;IAC7C,OAAO,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.d.ts

@@ -0,0 +1,33 @@
+import type { SimSesIdentity } from "../../../../ses/identity/sim-ses-identity.js";
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimSesIdentityCfnProperties {
+    readonly identity: SimSesIdentity;
+}
+/**
+ * CloudFormation-facing values for a simulated SES email identity.
+ */
+export declare class SimSesIdentityCfn implements SimCfnResourceValueAdapter {
+    #private;
+    constructor(properties: SimSesIdentityCfnProperties);
+    /**
+     * AWS::SES::EmailIdentity Ref returns the address or domain itself.
+     *
+     * SES has no identifier for an identity other than what it names, so a Ref
+     * is directly usable as the `FromEmailAddress` of a send or as the identity
+     * an IAM policy names.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * AWS::SES::EmailIdentity attributes, all six of which are DKIM tokens.
+     *
+     * The tokens are made up, deterministically, because nothing here signs a
+     * message and there is no key to derive a real one from. They exist so that
+     * the Route53 records CDK writes alongside an identity can be deployed: what
+     * a test gets is records of the right shape pointing at nothing, rather than
+     * a stack that will not deploy.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};
+//# sourceMappingURL=sim-ses-identity-cfn.d.ts.map

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-cfn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAYvF,UAAU,2BAA2B;IACnC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,0BAA0B;;IAGlE,YAAY,UAAU,EAAE,2BAA2B,EAElD;IAED;;;;;;OAMG;IACH,QAAQ,IAAI,mBAAmB,CAE9B;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAsBzD;CACF"}

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.js

@@ -0,0 +1,48 @@
+import { assertDefined } from "../../../../../util/type-guard/defined.js";
+import { simSesDkimTokenName, simSesDkimTokens, simSesDkimTokenValue, } from "./sim-ses-dkim-tokens.js";
+/**
+ * The DKIM token attributes, and which of the three tokens each one reads.
+ */
+const dkimTokenAttribute = /^DkimDNSToken(?<part>Name|Value)(?<index>[123])$/;
+/**
+ * CloudFormation-facing values for a simulated SES email identity.
+ */
+export class SimSesIdentityCfn {
+    #identity;
+    constructor(properties) {
+        this.#identity = properties.identity;
+    }
+    /**
+     * AWS::SES::EmailIdentity Ref returns the address or domain itself.
+     *
+     * SES has no identifier for an identity other than what it names, so a Ref
+     * is directly usable as the `FromEmailAddress` of a send or as the identity
+     * an IAM policy names.
+     */
+    refValue() {
+        return this.#identity.emailIdentity;
+    }
+    /**
+     * AWS::SES::EmailIdentity attributes, all six of which are DKIM tokens.
+     *
+     * The tokens are made up, deterministically, because nothing here signs a
+     * message and there is no key to derive a real one from. They exist so that
+     * the Route53 records CDK writes alongside an identity can be deployed: what
+     * a test gets is records of the right shape pointing at nothing, rather than
+     * a stack that will not deploy.
+     */
+    attributeValue(attributeName) {
+        const groups = dkimTokenAttribute.exec(attributeName)?.groups;
+        if (!groups) {
+            throw new Error(`Unsupported AWS::SES::EmailIdentity attribute ${attributeName}`);
+        }
+        const index = groups["index"];
+        assertDefined(index, `DKIM token index in ${attributeName}`);
+        const token = simSesDkimTokens(this.#identity.emailIdentity)[Number(index) - 1];
+        assertDefined(token, `DKIM token ${index} for ${attributeName}`);
+        return groups["part"] === "Name"
+            ? simSesDkimTokenName(this.#identity.emailIdentity, token)
+            : simSesDkimTokenValue(token);
+    }
+}
+//# sourceMappingURL=sim-ses-identity-cfn.js.map

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-cfn.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ses/sim-ses-identity-cfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAI1E,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAM9E;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAiB;IAEnC,YAAY,UAAuC;QACjD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,aAAqB;QAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAE9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,iDAAiD,aAAa,EAAE,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAE9B,aAAa,CAAC,KAAK,EAAE,uBAAuB,aAAa,EAAE,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAClB,CAAC;QAEF,aAAa,CAAC,KAAK,EAAE,cAAc,KAAK,QAAQ,aAAa,EAAE,CAAC,CAAC;QAEjE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM;YAC9B,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC;YAC1D,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.d.ts

@@ -0,0 +1,27 @@
+import type { SimSesTemplate } from "../../../../ses/template/sim-ses-template.js";
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimSesTemplateCfnProperties {
+    readonly template: SimSesTemplate;
+}
+/**
+ * CloudFormation-facing values for a simulated SES email template.
+ */
+export declare class SimSesTemplateCfn implements SimCfnResourceValueAdapter {
+    #private;
+    constructor(properties: SimSesTemplateCfnProperties);
+    /**
+     * AWS::SES::Template Ref returns the template name.
+     *
+     * A template has no identifier apart from its name, so a Ref is directly
+     * usable as the `TemplateName` of a send. That is also what makes the `Id`
+     * attribute the same string.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * AWS::SES::Template attributes.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};
+//# sourceMappingURL=sim-ses-template-cfn.d.ts.map

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-template-cfn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,2BAA2B;IACnC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,0BAA0B;;IAGlE,YAAY,UAAU,EAAE,2BAA2B,EAElD;IAED;;;;;;OAMG;IACH,QAAQ,IAAI,mBAAmB,CAE9B;IAED;;OAEG;IACH,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAQzD;CACF"}

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.js

@@ -0,0 +1,29 @@
+/**
+ * CloudFormation-facing values for a simulated SES email template.
+ */
+export class SimSesTemplateCfn {
+    #template;
+    constructor(properties) {
+        this.#template = properties.template;
+    }
+    /**
+     * AWS::SES::Template Ref returns the template name.
+     *
+     * A template has no identifier apart from its name, so a Ref is directly
+     * usable as the `TemplateName` of a send. That is also what makes the `Id`
+     * attribute the same string.
+     */
+    refValue() {
+        return this.#template.templateName;
+    }
+    /**
+     * AWS::SES::Template attributes.
+     */
+    attributeValue(attributeName) {
+        if (attributeName === "Id") {
+            return this.#template.templateName;
+        }
+        throw new Error(`Unsupported AWS::SES::Template attribute ${attributeName}`);
+    }
+}
+//# sourceMappingURL=sim-ses-template-cfn.js.map

package/dist/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-template-cfn.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ses/sim-ses-template-cfn.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAiB;IAEnC,YAAY,UAAuC;QACjD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,aAAqB;QAClC,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,KAAK,CACb,4CAA4C,aAAa,EAAE,CAC5D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-value-adapters.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,CAAC,CACjD,UAAU,EAAE,oCAAoC,KAC7C,yBAAyB,CAAC,EAqB9B,CAAC"}
+{"version":3,"file":"sim-cfn-service-value-adapters.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,CAAC,CACjD,UAAU,EAAE,oCAAoC,KAC7C,yBAAyB,CAAC,EAuB9B,CAAC"}

package/dist/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.js

@@ -1,6 +1,7 @@
 import { acmValueAdapter } from "./acm/sim-acm-cfn-value-adapter.js";
 import { apiGatewayV2ValueAdapter } from "./apigatewayv2/sim-api-gateway-v2-cfn-value-adapter.js";
 import { cloudFrontValueAdapter } from "./cloudfront/sim-cloudfront-cfn-value-adapter.js";
+import { cloudWatchValueAdapter } from "./cloudwatch/sim-cloudwatch-cfn-value-adapter.js";
 import { cognitoValueAdapter } from "./cognito/sim-cognito-cfn-value-adapter.js";
 import { dynamoDbValueAdapter } from "./dynamodb/sim-dynamodb-cfn-value-adapter.js";
 import { ecrValueAdapter } from "./ecr/sim-ecr-cfn-value-adapter.js";
@@ -15,6 +16,7 @@ import { route53ValueAdapter } from "./route53/sim-route53-cfn-value-adapter.js"
 import { s3ValueAdapter } from "./s3/sim-s3-cfn-value-adapter.js";
 import { schedulerValueAdapter } from "./scheduler/sim-scheduler-cfn-value-adapter.js";
 import { secretsManagerValueAdapter } from "./secretsmanager/sim-secrets-manager-cfn-value-adapter.js";
+import { sesValueAdapter } from "./ses/sim-ses-cfn-value-adapter.js";
 import { snsValueAdapter } from "./sns/sim-sns-cfn-value-adapter.js";
 import { sqsValueAdapter } from "./sqs/sim-sqs-cfn-value-adapter.js";
 import { ssmValueAdapter } from "./ssm/sim-ssm-cfn-value-adapter.js";
@@ -31,6 +33,7 @@ export const simCfnServiceValueAdapters = [
     acmValueAdapter,
     apiGatewayV2ValueAdapter,
     cloudFrontValueAdapter,
+    cloudWatchValueAdapter,
     cognitoValueAdapter,
     dynamoDbValueAdapter,
     ecrValueAdapter,
@@ -45,6 +48,7 @@ export const simCfnServiceValueAdapters = [
     s3ValueAdapter,
     schedulerValueAdapter,
     secretsManagerValueAdapter,
+    sesValueAdapter,
     snsValueAdapter,
     sqsValueAdapter,
     ssmValueAdapter,

package/dist/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-value-adapters.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAMrE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAEH;IAClC,eAAe;IACf,wBAAwB;IACxB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,uBAAuB;IACvB,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,cAAc;IACd,qBAAqB;IACrB,0BAA0B;IAC1B,eAAe;IACf,eAAe;IACf,eAAe;CAChB,CAAC"}
+{"version":3,"file":"sim-cfn-service-value-adapters.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAMrE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAEH;IAClC,eAAe;IACf,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,uBAAuB;IACvB,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,cAAc;IACd,qBAAqB;IACrB,0BAA0B;IAC1B,eAAe;IACf,eAAe;IACf,eAAe;IACf,eAAe;CAChB,CAAC"}

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-factories.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AACpG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAGnG;;;GAGG;AACH,KAAK,0BAA0B,GAAG,CAChC,SAAS,EAAE,4BAA4B,KACpC,4BAA4B,CAAC;AAWlC;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CACtD,MAAM,EACN,0BAA0B,CAuG1B,CAAC"}
+{"version":3,"file":"sim-cfn-service-factories.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AACpG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAGnG;;;GAGG;AACH,KAAK,0BAA0B,GAAG,CAChC,SAAS,EAAE,4BAA4B,KACpC,4BAA4B,CAAC;AAWlC;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CACtD,MAAM,EACN,0BAA0B,CAiH1B,CAAC"}

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.js

@@ -30,6 +30,10 @@ export const simCfnServiceResourceFactories = new Map([
         "CloudFront",
         (scopedAws) => scopedAws.cloudFront().cfnResourceFactory(),
     ],
+    [
+        "CloudWatch",
+        (scopedAws) => scopedAws.cloudWatch().cfnResourceFactory(),
+    ],
     [
         "Cognito",
         (scopedAws) => scopedAws.cognitoIdentityProvider().cfnResourceFactory(),
@@ -86,6 +90,10 @@ export const simCfnServiceResourceFactories = new Map([
         "Scheduler",
         (scopedAws) => scopedAws.scheduler().cfnResourceFactory(),
     ],
+    [
+        "SES",
+        (scopedAws) => scopedAws.sesV2().cfnResourceFactory(),
+    ],
     [
         "SNS",
         (scopedAws) => scopedAws.sns().cfnResourceFactory(),

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-factories.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAUzF;;;;GAIG;AACH,MAAM,kBAAkB,GAA+B,CACrD,SAAS,EACqB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAGvC,IAAI,GAAG,CAAC;IACV,CAAC,KAAK,EAAE,kBAAkB,CAAC;IAC3B,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C;QACE,cAAc;QACd,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,YAAY,EAAE,CAAC,kBAAkB,EAAE;KAChD;IACD;QACE,gBAAgB;QAChB,GAAiC,EAAE,CAAC,IAAI,wBAAwB,EAAE;KACnE;IACD;QACE,YAAY;QACZ,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE;KAC9C;IACD;QACE,SAAS;QACT,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,uBAAuB,EAAE,CAAC,kBAAkB,EAAE;KAC3D;IACD;QACE,UAAU;QACV,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,QAAQ,EAAE,CAAC,kBAAkB,EAAE;KAC5C;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,wBAAwB;QACxB,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE;KACzC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,QAAQ;QACR,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,MAAM,EAAE,CAAC,kBAAkB,EAAE;KAC1C;IACD;QACE,MAAM;QACN,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,IAAI,EAAE,CAAC,kBAAkB,EAAE;KACxC;IACD;QACE,SAAS;QACT,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE;KAC3C;IACD;QACE,IAAI;QACJ,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,EAAE,EAAE,CAAC,kBAAkB,EAAE;KACtC;IACD;QACE,gBAAgB;QAChB,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,cAAc,EAAE,CAAC,kBAAkB,EAAE;KAClD;IACD;QACE,QAAQ;QACR,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE;KAC/C;IACD;QACE,WAAW;QACX,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,EAAE;KAC7C;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;CACF,CAAC,CAAC"}
+{"version":3,"file":"sim-cfn-service-factories.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAUzF;;;;GAIG;AACH,MAAM,kBAAkB,GAA+B,CACrD,SAAS,EACqB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAGvC,IAAI,GAAG,CAAC;IACV,CAAC,KAAK,EAAE,kBAAkB,CAAC;IAC3B,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAC1C;QACE,cAAc;QACd,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,YAAY,EAAE,CAAC,kBAAkB,EAAE;KAChD;IACD;QACE,gBAAgB;QAChB,GAAiC,EAAE,CAAC,IAAI,wBAAwB,EAAE;KACnE;IACD;QACE,YAAY;QACZ,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE;KAC9C;IACD;QACE,YAAY;QACZ,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE;KAC9C;IACD;QACE,SAAS;QACT,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,uBAAuB,EAAE,CAAC,kBAAkB,EAAE;KAC3D;IACD;QACE,UAAU;QACV,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,QAAQ,EAAE,CAAC,kBAAkB,EAAE;KAC5C;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,wBAAwB;QACxB,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE;KACzC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,QAAQ;QACR,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,MAAM,EAAE,CAAC,kBAAkB,EAAE;KAC1C;IACD;QACE,MAAM;QACN,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,IAAI,EAAE,CAAC,kBAAkB,EAAE;KACxC;IACD;QACE,SAAS;QACT,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE;KAC3C;IACD;QACE,IAAI;QACJ,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,EAAE,EAAE,CAAC,kBAAkB,EAAE;KACtC;IACD;QACE,gBAAgB;QAChB,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,cAAc,EAAE,CAAC,kBAAkB,EAAE;KAClD;IACD;QACE,QAAQ;QACR,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE;KAC/C;IACD;QACE,WAAW;QACX,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,EAAE;KAC7C;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE;KACzC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;IACD;QACE,KAAK;QACL,CAAC,SAAS,EAAgC,EAAE,CAC1C,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE;KACvC;CACF,CAAC,CAAC"}

package/dist/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.d.ts

@@ -0,0 +1,34 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimCloudWatchAlarmNotification, SimCloudWatchAlarmTargets } from "./sim-cloudwatch-alarm-targets.js";
+interface SimAwsCloudWatchAlarmTopicsProperties {
+    readonly simAws: SimAws;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The simulated SNS topics an alarm's actions reach.
+ *
+ * Real CloudWatch requires an alarm's SNS topic to be in the same Account and
+ * Region as the alarm, so a topic ARN naming another one reaches nothing here
+ * either, and says so rather than passing quietly.
+ *
+ * The topic is resolved when the alarm fires rather than when it is created,
+ * so a topic made after the alarm is one the alarm can still reach.
+ */
+export declare class SimAwsCloudWatchAlarmTopics implements SimCloudWatchAlarmTargets {
+    #private;
+    constructor(properties: SimAwsCloudWatchAlarmTopicsProperties);
+    /**
+     * Publish one notification to the topic an action names.
+     *
+     * It goes through the ordinary Publish path so a notification fans out to
+     * the topic's subscriptions exactly as an SDK caller's message would, and
+     * with no caller, so it arrives as the Account root. Real CloudWatch
+     * publishes as a service principal that a same-Account topic's default
+     * policy already admits; authorizing here as a principal that policy says
+     * nothing about would fail for requests an account takes.
+     */
+    notify(notification: SimCloudWatchAlarmNotification): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-aws-cloudwatch-alarm-topics.d.ts.map

package/dist/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-cloudwatch-alarm-topics.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EACV,8BAA8B,EAC9B,yBAAyB,EAC1B,MAAM,mCAAmC,CAAC;AAE3C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA4B,YAAW,yBAAyB;;IAI3E,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;;;;;;;;OASG;IACG,MAAM,CAAC,YAAY,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BxE;CACF"}

package/dist/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.js

@@ -0,0 +1,51 @@
+import { parseSnsTopicArn } from "../../../sns/topic/sim-sns-topic-arn.js";
+/**
+ * The simulated SNS topics an alarm's actions reach.
+ *
+ * Real CloudWatch requires an alarm's SNS topic to be in the same Account and
+ * Region as the alarm, so a topic ARN naming another one reaches nothing here
+ * either, and says so rather than passing quietly.
+ *
+ * The topic is resolved when the alarm fires rather than when it is created,
+ * so a topic made after the alarm is one the alarm can still reach.
+ */
+export class SimAwsCloudWatchAlarmTopics {
+    #simAws;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#simAws = properties.simAws;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Publish one notification to the topic an action names.
+     *
+     * It goes through the ordinary Publish path so a notification fans out to
+     * the topic's subscriptions exactly as an SDK caller's message would, and
+     * with no caller, so it arrives as the Account root. Real CloudWatch
+     * publishes as a service principal that a same-Account topic's default
+     * policy already admits; authorizing here as a principal that policy says
+     * nothing about would fail for requests an account takes.
+     */
+    async notify(notification) {
+        const scope = this.#accountRegionScope;
+        const location = parseSnsTopicArn(notification.topicArn);
+        if (location === undefined ||
+            location.regionName !== scope.regionName ||
+            location.accountId !== scope.accountId) {
+            throw new Error(`${notification.topicArn} is not a simulated SNS topic in ` +
+                `${scope.accountId} ${scope.regionName}: an alarm can only notify a ` +
+                `topic in its own Account and Region.`);
+        }
+        await this.#simAws
+            .accountRegionScope(scope.accountId, scope.regionName)
+            .sns()
+            .publish({
+            input: {
+                TopicArn: notification.topicArn,
+                Subject: notification.subject,
+                Message: notification.message,
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-cloudwatch-alarm-topics.js.map

package/dist/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-cloudwatch-alarm-topics.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-aws-cloudwatch-alarm-topics.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAW3E;;;;;;;;;GASG;AACH,MAAM,OAAO,2BAA2B;IAC7B,OAAO,CAAS;IAChB,mBAAmB,CAA2B;IAEvD,YAAY,UAAiD;QAC3D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,YAA4C;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEzD,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACxC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,CAAC,QAAQ,mCAAmC;gBACzD,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,+BAA+B;gBACrE,sCAAsC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,OAAO;aACf,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;aACrD,GAAG,EAAE;aACL,OAAO,CAAC;YACP,KAAK,EAAE;gBACL,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,OAAO,EAAE,YAAY,CAAC,OAAO;aAC9B;SACF,CAAC,CAAC;IACP,CAAC;CACF"}

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.d.ts

@@ -0,0 +1,54 @@
+/**
+ * What one alarm action could not do.
+ */
+export interface SimCloudWatchAlarmActionFailureProperties {
+    readonly alarmName: string;
+    readonly alarmArn: string;
+    readonly actionArn: string;
+    readonly error: unknown;
+}
+/**
+ * One notification an alarm could not send.
+ */
+export declare class SimCloudWatchAlarmActionFailure {
+    readonly alarmName: string;
+    readonly alarmArn: string;
+    readonly actionArn: string;
+    readonly error: unknown;
+    constructor(properties: SimCloudWatchAlarmActionFailureProperties);
+    /**
+     * What went wrong, in one line.
+     */
+    get reason(): string;
+}
+/**
+ * What became of the notifications a simulated CloudWatch scope could not
+ * send.
+ *
+ * Real CloudWatch tells nobody when an alarm action fails: the alarm changes
+ * state either way and the failure is visible only in the absence of the
+ * notification. Neither does this, because a failing action must not stop an
+ * alarm evaluating. Swallowing it entirely would leave a queue mysteriously
+ * empty, which is the hardest kind of test to debug, so every failure is kept
+ * for inspection and warned about once.
+ */
+export declare class SimCloudWatchAlarmActionFailures {
+    #private;
+    /**
+     * Every notification this scope could not send, oldest first.
+     */
+    get all(): readonly SimCloudWatchAlarmActionFailure[];
+    /**
+     * Record a failed action.
+     */
+    record(properties: SimCloudWatchAlarmActionFailureProperties): void;
+    /**
+     * Warn about an action that failed, once per action and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    private warn;
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-action-failures.d.ts.map

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-action-failures.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,+BAA+B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAExB,YAAY,UAAU,EAAE,yCAAyC,EAKhE;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,MAAM,CAInB;CACF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gCAAgC;;IAI3C;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,+BAA+B,EAAE,CAEpD;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,yCAAyC,GAAG,IAAI,CAKlE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,IAAI;CAeb"}

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.js

@@ -0,0 +1,70 @@
+/**
+ * One notification an alarm could not send.
+ */
+export class SimCloudWatchAlarmActionFailure {
+    alarmName;
+    alarmArn;
+    actionArn;
+    error;
+    constructor(properties) {
+        this.alarmName = properties.alarmName;
+        this.alarmArn = properties.alarmArn;
+        this.actionArn = properties.actionArn;
+        this.error = properties.error;
+    }
+    /**
+     * What went wrong, in one line.
+     */
+    get reason() {
+        return this.error instanceof Error
+            ? this.error.message
+            : String(this.error);
+    }
+}
+/**
+ * What became of the notifications a simulated CloudWatch scope could not
+ * send.
+ *
+ * Real CloudWatch tells nobody when an alarm action fails: the alarm changes
+ * state either way and the failure is visible only in the absence of the
+ * notification. Neither does this, because a failing action must not stop an
+ * alarm evaluating. Swallowing it entirely would leave a queue mysteriously
+ * empty, which is the hardest kind of test to debug, so every failure is kept
+ * for inspection and warned about once.
+ */
+export class SimCloudWatchAlarmActionFailures {
+    #failures = [];
+    #warned = new Set();
+    /**
+     * Every notification this scope could not send, oldest first.
+     */
+    get all() {
+        return this.#failures;
+    }
+    /**
+     * Record a failed action.
+     */
+    record(properties) {
+        const failure = new SimCloudWatchAlarmActionFailure(properties);
+        this.#failures.push(failure);
+        this.warn(failure);
+    }
+    /**
+     * Warn about an action that failed, once per action and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    warn(failure) {
+        const key = `${failure.actionArn}:${failure.reason}`;
+        if (this.#warned.has(key)) {
+            return;
+        }
+        this.#warned.add(key);
+        // oxlint-disable-next-line no-console
+        console.warn(`Simulated CloudWatch alarm ${failure.alarmName} could not notify ` +
+            `${failure.actionArn}: ${failure.reason}`);
+    }
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-action-failures.js.map

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-action-failures.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-action-failures.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,OAAO,+BAA+B;IACjC,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,KAAK,CAAU;IAExB,YAAY,UAAqD;QAC/D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gCAAgC;IAClC,SAAS,GAAsC,EAAE,CAAC;IAClD,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAqD;QAC1D,MAAM,OAAO,GAAG,IAAI,+BAA+B,CAAC,UAAU,CAAC,CAAC;QAEhE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,OAAwC;QACnD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAErD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,8BAA8B,OAAO,CAAC,SAAS,oBAAoB;YACjE,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,CAC5C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimCloudWatchAlarm, SimCloudWatchAlarmTransition } from "../sim-cloudwatch-alarm.js";
+import { SimCloudWatchAlarmActionFailures } from "./sim-cloudwatch-alarm-action-failures.js";
+import type { SimCloudWatchAlarmTargets } from "./sim-cloudwatch-alarm-targets.js";
+interface SimCloudWatchAlarmActionsProperties {
+    readonly targets: SimCloudWatchAlarmTargets;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Fires an alarm's actions when it changes state.
+ *
+ * Only a change fires anything. An alarm that evaluates ten periods and stays
+ * in ALARM throughout notifies once, at the transition, which is what real
+ * CloudWatch does and what stops a test's queue filling with duplicates.
+ */
+export declare class SimCloudWatchAlarmActions {
+    #private;
+    readonly failures: SimCloudWatchAlarmActionFailures;
+    constructor(properties: SimCloudWatchAlarmActionsProperties);
+    /**
+     * Notify everything the alarm's new state names.
+     *
+     * A failing action never stops the others, and never stops the alarm: the
+     * state has already changed by the time this runs, and real CloudWatch does
+     * not roll one back because a topic was missing.
+     */
+    fire(alarm: SimCloudWatchAlarm, transition: SimCloudWatchAlarmTransition): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cloudwatch-alarm-actions.d.ts.map

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-actions.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EACV,kBAAkB,EAClB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAK7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;;IACpC,QAAQ,CAAC,QAAQ,mCAA0C;IAK3D,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;;;;;OAMG;IACG,IAAI,CACR,KAAK,EAAE,kBAAkB,EACzB,UAAU,EAAE,4BAA4B,GACvC,OAAO,CAAC,IAAI,CAAC,CAkCf;CACF"}

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.js

@@ -0,0 +1,58 @@
+import { simCloudWatchActionsFieldFor } from "../sim-cloudwatch-alarm-state.js";
+import { SimCloudWatchAlarmActionFailures } from "./sim-cloudwatch-alarm-action-failures.js";
+import { simCloudWatchAlarmMessage, simCloudWatchAlarmSubject, } from "./sim-cloudwatch-alarm-notification.js";
+/**
+ * Fires an alarm's actions when it changes state.
+ *
+ * Only a change fires anything. An alarm that evaluates ten periods and stays
+ * in ALARM throughout notifies once, at the transition, which is what real
+ * CloudWatch does and what stops a test's queue filling with duplicates.
+ */
+export class SimCloudWatchAlarmActions {
+    failures = new SimCloudWatchAlarmActionFailures();
+    #targets;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#targets = properties.targets;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Notify everything the alarm's new state names.
+     *
+     * A failing action never stops the others, and never stops the alarm: the
+     * state has already changed by the time this runs, and real CloudWatch does
+     * not roll one back because a topic was missing.
+     */
+    async fire(alarm, transition) {
+        if (!alarm.definition.actionsEnabled) {
+            return;
+        }
+        const actions = alarm.definition[simCloudWatchActionsFieldFor(transition.state)];
+        const message = {
+            subject: simCloudWatchAlarmSubject({
+                alarm,
+                transition,
+                accountRegionScope: this.#accountRegionScope,
+            }),
+            message: simCloudWatchAlarmMessage({
+                alarm,
+                transition,
+                accountRegionScope: this.#accountRegionScope,
+            }),
+        };
+        await Promise.all(actions.map(async (actionArn) => {
+            try {
+                await this.#targets.notify({ ...message, topicArn: actionArn });
+            }
+            catch (error) {
+                this.failures.record({
+                    alarmName: alarm.name,
+                    alarmArn: alarm.arn,
+                    actionArn,
+                    error,
+                });
+            }
+        }));
+    }
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-actions.js.map

package/dist/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-actions.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/alarm/action/sim-cloudwatch-alarm-actions.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,wCAAwC,CAAC;AAQhD;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IAC3B,QAAQ,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAElD,QAAQ,CAA4B;IACpC,mBAAmB,CAA2B;IAEvD,YAAY,UAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CACR,KAAyB,EACzB,UAAwC;QAExC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,CAAC,4BAA4B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,yBAAyB,CAAC;gBACjC,KAAK;gBACL,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;aAC7C,CAAC;YACF,OAAO,EAAE,yBAAyB,CAAC;gBACjC,KAAK;gBACL,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;aAC7C,CAAC;SACH,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,QAAQ,EAAE,KAAK,CAAC,GAAG;oBACnB,SAAS;oBACT,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}