@kensio/yulin 1.15.1 → 1.16.1

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-input.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAEnF,OAAO,EACL,wCAAwC,EACxC,yBAAyB,GAC1B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAoC;IAEpC,wCAAwC,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,iBAAiB,GAAG,gCAAgC,CACxD,mBAAmB,EACnB,KAAK,CAAC,iBAAiB,CACxB,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,yBAAyB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;QAClE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,MAAM,EAAE;YACN,SAAS,EAAE,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1D,UAAU,EAAE,yBAAyB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;YACrE,UAAU,EAAE,+BAA+B,CAAC,KAAK,CAAC,UAAU,CAAC;SAC9D;QACD,SAAS,EAAE,8BAA8B,CACvC,0BAA0B,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CACzD;QACD,IAAI,EAAE,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC;QACjD,iBAAiB;QACjB,iBAAiB,EAAE,8BAA8B,CAC/C,KAAK,CAAC,iBAAiB,EACvB,iBAAiB,CAClB;QACD,SAAS,EAAE,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1D,kBAAkB,EAAE,uCAAuC,CACzD,KAAK,CAAC,kBAAkB,CACzB;QACD,gBAAgB,EAAE,iCAAiC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC3E,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;QAC5C,YAAY,EAAE,yBAAyB,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC;QAC3E,SAAS,EAAE,yBAAyB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;QAClE,uBAAuB,EAAE,yBAAyB,CAChD,yBAAyB,EACzB,KAAK,CAAC,uBAAuB,CAC9B;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.d.ts

@@ -0,0 +1,20 @@
+/**
+ * How many of the evaluated periods must breach for an alarm to fire.
+ *
+ * Left out, it is every one of them, which is what makes an alarm with three
+ * evaluation periods and no M-of-N fire only when all three breach.
+ */
+export declare function simCloudWatchDatapointsToAlarm(datapointsToAlarm: number | undefined, evaluationPeriods: number): number;
+/**
+ * Read the number an alarm compares its metric against.
+ */
+export declare function requiredSimCloudWatchThreshold(threshold: number | undefined): number;
+/**
+ * Read a count of periods, which is a whole number of one or more.
+ */
+export declare function requiredSimCloudWatchWholeNumber(field: string, value: number | undefined): number;
+/**
+ * Read a value the caller had to supply.
+ */
+export declare function requiredSimCloudWatchValue(field: string, value: string | undefined): string;
+//# sourceMappingURL=sim-cloudwatch-alarm-numbers.d.ts.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-numbers.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,iBAAiB,EAAE,MAAM,GACxB,MAAM,CAkBR;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAQR"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.js

@@ -0,0 +1,52 @@
+import { SimCloudWatchInvalidParameterValueException, SimCloudWatchMissingRequiredParameterException, } from "../../error/sim-cloudwatch.error.js";
+/**
+ * How many of the evaluated periods must breach for an alarm to fire.
+ *
+ * Left out, it is every one of them, which is what makes an alarm with three
+ * evaluation periods and no M-of-N fire only when all three breach.
+ */
+export function simCloudWatchDatapointsToAlarm(datapointsToAlarm, evaluationPeriods) {
+    if (datapointsToAlarm === undefined) {
+        return evaluationPeriods;
+    }
+    const wanted = requiredSimCloudWatchWholeNumber("DatapointsToAlarm", datapointsToAlarm);
+    if (wanted > evaluationPeriods) {
+        throw new SimCloudWatchInvalidParameterValueException("The parameter DatapointsToAlarm must not be greater than " +
+            "EvaluationPeriods.");
+    }
+    return wanted;
+}
+/**
+ * Read the number an alarm compares its metric against.
+ */
+export function requiredSimCloudWatchThreshold(threshold) {
+    if (threshold === undefined) {
+        throw new SimCloudWatchMissingRequiredParameterException("The parameter Threshold must be present.");
+    }
+    if (!Number.isFinite(threshold)) {
+        throw new SimCloudWatchInvalidParameterValueException("The parameter Threshold must be a finite number.");
+    }
+    return threshold;
+}
+/**
+ * Read a count of periods, which is a whole number of one or more.
+ */
+export function requiredSimCloudWatchWholeNumber(field, value) {
+    if (value === undefined) {
+        throw new SimCloudWatchMissingRequiredParameterException(`The parameter ${field} must be present.`);
+    }
+    if (!Number.isSafeInteger(value) || value < 1) {
+        throw new SimCloudWatchInvalidParameterValueException(`The parameter ${field} must be a whole number of one or more.`);
+    }
+    return value;
+}
+/**
+ * Read a value the caller had to supply.
+ */
+export function requiredSimCloudWatchValue(field, value) {
+    if (value === undefined) {
+        throw new SimCloudWatchMissingRequiredParameterException(`The parameter ${field} must be present.`);
+    }
+    return value;
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-numbers.js.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-numbers.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-numbers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2CAA2C,EAC3C,8CAA8C,GAC/C,MAAM,qCAAqC,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,iBAAqC,EACrC,iBAAyB;IAEzB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,gCAAgC,CAC7C,mBAAmB,EACnB,iBAAiB,CAClB,CAAC;IAEF,IAAI,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,2CAA2C,CACnD,2DAA2D;YACzD,oBAAoB,CACvB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAA6B;IAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,8CAA8C,CACtD,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,2CAA2C,CACnD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAa,EACb,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,8CAA8C,CACtD,iBAAiB,KAAK,mBAAmB,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,2CAA2C,CACnD,iBAAiB,KAAK,yCAAyC,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,8CAA8C,CACtD,iBAAiB,KAAK,mBAAmB,CAC1C,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.d.ts

@@ -0,0 +1,25 @@
+import type { SimCloudWatchRequestOptions } from "../sim-cloudwatch-request-options.js";
+import type { SimDescribeAlarmHistoryCommand, SimDescribeAlarmHistoryCommandOutput, SimDescribeAlarmsCommand, SimDescribeAlarmsCommandOutput } from "./alarm.command.js";
+import type { SimCloudWatchAlarmContext } from "./sim-cloudwatch-alarm-context.js";
+/**
+ * The commands that report what alarms exist and what has happened to them.
+ *
+ * Neither takes a resource-level permission on real CloudWatch, so both
+ * authorize against every alarm rather than against each one they report.
+ */
+export declare class SimCloudWatchAlarmReads {
+    #private;
+    constructor(context: SimCloudWatchAlarmContext);
+    /**
+     * Describe the alarms a request selects, in the order each was created.
+     */
+    describeAlarms(command: SimDescribeAlarmsCommand, options?: SimCloudWatchRequestOptions): SimDescribeAlarmsCommandOutput;
+    /**
+     * Report what has happened to an alarm, newest first.
+     *
+     * Left without an alarm name, this reports across every alarm in the scope,
+     * as real CloudWatch does.
+     */
+    describeAlarmHistory(command: SimDescribeAlarmHistoryCommand, options?: SimCloudWatchRequestOptions): SimDescribeAlarmHistoryCommandOutput;
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-reads.d.ts.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-reads.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EACV,8BAA8B,EAC9B,oCAAoC,EACpC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAenF;;;;;GAKG;AACH,qBAAa,uBAAuB;;IAGlC,YAAY,OAAO,EAAE,yBAAyB,EAE7C;IAED;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,2BAA2B,GACpC,8BAA8B,CAqBhC;IAED;;;;;OAKG;IACH,oBAAoB,CAClB,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,2BAA2B,GACpC,oCAAoC,CAmBtC;CACF"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.js

@@ -0,0 +1,60 @@
+import { SimCloudWatchPage } from "../sim-cloudwatch-page.js";
+import { selectsSimCloudWatchAlarm, simCloudWatchAlarmHistory, } from "./sim-cloudwatch-alarm-selection.js";
+import { simCloudWatchMetricAlarmDetail } from "./sim-cloudwatch-alarm-detail.js";
+const describeAlarmsAction = "cloudwatch:DescribeAlarms";
+const describeAlarmHistoryAction = "cloudwatch:DescribeAlarmHistory";
+/**
+ * How many alarms, and how many history items, one page reports.
+ */
+const alarmsPerPage = 100;
+/**
+ * The commands that report what alarms exist and what has happened to them.
+ *
+ * Neither takes a resource-level permission on real CloudWatch, so both
+ * authorize against every alarm rather than against each one they report.
+ */
+export class SimCloudWatchAlarmReads {
+    #context;
+    constructor(context) {
+        this.#context = context;
+    }
+    /**
+     * Describe the alarms a request selects, in the order each was created.
+     */
+    describeAlarms(command, options) {
+        const input = command.input;
+        this.#context.authorizer.authorize(describeAlarmsAction, options?.caller);
+        const page = new SimCloudWatchPage({
+            listed: this.#context.alarms.all.filter((alarm) => selectsSimCloudWatchAlarm(alarm, input)),
+            nextToken: input.NextToken,
+            pageSize: input.MaxRecords ?? alarmsPerPage,
+        });
+        return {
+            $metadata: {},
+            MetricAlarms: page.items.map((alarm) => simCloudWatchMetricAlarmDetail(alarm)),
+            CompositeAlarms: [],
+            NextToken: page.nextToken,
+        };
+    }
+    /**
+     * Report what has happened to an alarm, newest first.
+     *
+     * Left without an alarm name, this reports across every alarm in the scope,
+     * as real CloudWatch does.
+     */
+    describeAlarmHistory(command, options) {
+        const input = command.input;
+        this.#context.authorizer.authorize(describeAlarmHistoryAction, options?.caller);
+        const page = new SimCloudWatchPage({
+            listed: simCloudWatchAlarmHistory(this.#context.alarms.all, input),
+            nextToken: input.NextToken,
+            pageSize: input.MaxRecords ?? alarmsPerPage,
+        });
+        return {
+            $metadata: {},
+            AlarmHistoryItems: page.items,
+            NextToken: page.nextToken,
+        };
+    }
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-reads.js.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-reads.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-reads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAS9D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AACzD,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IACzB,QAAQ,CAA4B;IAE7C,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,OAAiC,EACjC,OAAqC;QAErC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChD,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CACxC;YACD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,UAAU,IAAI,aAAa;SAC5C,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACrC,8BAA8B,CAAC,KAAK,CAAC,CACtC;YACD,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAClB,OAAuC,EACvC,OAAqC;QAErC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAChC,0BAA0B,EAC1B,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;YAClE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,UAAU,IAAI,aAAa;SAC5C,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,iBAAiB,EAAE,IAAI,CAAC,KAAK;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.d.ts

@@ -0,0 +1,12 @@
+import type { SimCloudWatchAlarm } from "../../alarm/sim-cloudwatch-alarm.js";
+import type { SimCloudWatchAlarmHistoryItemDetail, SimDescribeAlarmHistoryCommand, SimDescribeAlarmsCommand } from "./alarm.command.js";
+/**
+ * Whether a DescribeAlarms request selects one alarm.
+ */
+export declare function selectsSimCloudWatchAlarm(alarm: SimCloudWatchAlarm, input: SimDescribeAlarmsCommand["input"]): boolean;
+/**
+ * The history items a DescribeAlarmHistory request selects, in the order it
+ * asked for.
+ */
+export declare function simCloudWatchAlarmHistory(alarms: readonly SimCloudWatchAlarm[], input: SimDescribeAlarmHistoryCommand["input"]): readonly SimCloudWatchAlarmHistoryItemDetail[];
+//# sourceMappingURL=sim-cloudwatch-alarm-selection.d.ts.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-selection.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,oBAAoB,CAAC;AAG5B;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,GACvC,OAAO,CAOT;AAwBD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,kBAAkB,EAAE,EACrC,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC7C,SAAS,mCAAmC,EAAE,CAoBhD"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.js

@@ -0,0 +1,59 @@
+import { simCloudWatchAlarmHistoryDetail } from "./sim-cloudwatch-alarm-detail.js";
+/**
+ * Whether a DescribeAlarms request selects one alarm.
+ */
+export function selectsSimCloudWatchAlarm(alarm, input) {
+    return ((input.AlarmNames === undefined || input.AlarmNames.includes(alarm.name)) &&
+        alarm.name.startsWith(input.AlarmNamePrefix ?? "") &&
+        (input.StateValue === undefined || alarm.state === input.StateValue) &&
+        usesAction(alarm, input.ActionPrefix));
+}
+/**
+ * Whether an alarm carries an action starting with a prefix, in any of its
+ * three lists. Real CloudWatch filters on the actions an alarm uses, not on
+ * the ones it uses for one state.
+ */
+function usesAction(alarm, actionPrefix) {
+    if (actionPrefix === undefined) {
+        return true;
+    }
+    const definition = alarm.definition;
+    return [
+        ...definition.alarmActions,
+        ...definition.okActions,
+        ...definition.insufficientDataActions,
+    ].some((action) => action.startsWith(actionPrefix));
+}
+/**
+ * The history items a DescribeAlarmHistory request selects, in the order it
+ * asked for.
+ */
+export function simCloudWatchAlarmHistory(alarms, input) {
+    const items = alarms
+        .filter((alarm) => input.AlarmName === undefined || alarm.name === input.AlarmName)
+        .flatMap((alarm) => alarm.history.all
+        .filter((item) => withinSimCloudWatchHistoryWindow(item.timestamp, input))
+        .map((item) => simCloudWatchAlarmHistoryDetail(alarm.name, item)))
+        .filter((item) => input.HistoryItemType === undefined ||
+        item.HistoryItemType === input.HistoryItemType);
+    return orderedByTime(items, input.ScanBy);
+}
+/**
+ * History newest first, which is how real CloudWatch answers unless a request
+ * asks the other way. Items come from each alarm already in order, so an
+ * unfiltered read across several alarms has to be merged rather than
+ * concatenated.
+ */
+function orderedByTime(items, scanBy) {
+    const ascending = items.toSorted((left, right) => left.Timestamp.getTime() - right.Timestamp.getTime());
+    return scanBy === "TimestampAscending" ? ascending : ascending.toReversed();
+}
+/**
+ * Whether one history item falls in the window a request asked about, which
+ * includes its start and excludes its end as CloudWatch reads a range.
+ */
+function withinSimCloudWatchHistoryWindow(timestamp, input) {
+    return ((input.StartDate === undefined || timestamp >= input.StartDate) &&
+        (input.EndDate === undefined || timestamp < input.EndDate));
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-selection.js.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-selection.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-selection.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAEnF;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,KAAwC;IAExC,OAAO,CACL,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QAClD,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC;QACpE,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,KAAyB,EACzB,YAAgC;IAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAEpC,OAAO;QACL,GAAG,UAAU,CAAC,YAAY;QAC1B,GAAG,UAAU,CAAC,SAAS;QACvB,GAAG,UAAU,CAAC,uBAAuB;KACtC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAqC,EACrC,KAA8C;IAE9C,MAAM,KAAK,GAAG,MAAM;SACjB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAClE;SACA,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK,CAAC,OAAO,CAAC,GAAG;SACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,gCAAgC,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CACxD;SACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACpE;SACA,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,CACjD,CAAC;IAEJ,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,KAAqD,EACrD,MAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAC9B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CACtE,CAAC;IAEF,OAAO,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CACvC,SAAe,EACf,KAA8C;IAE9C,OAAO,CACL,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;QAC/D,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAC3D,CAAC;AACJ,CAAC"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.d.ts

@@ -0,0 +1,23 @@
+import type { SimCloudWatchRequestOptions } from "../sim-cloudwatch-request-options.js";
+import type { SimCloudWatchAlarmContext } from "./sim-cloudwatch-alarm-context.js";
+import type { SimDeleteAlarmsCommand, SimDeleteAlarmsCommandOutput, SimPutMetricAlarmCommand, SimPutMetricAlarmCommandOutput } from "./alarm.command.js";
+/**
+ * The commands that create and remove alarms.
+ */
+export declare class SimCloudWatchAlarmWrites {
+    #private;
+    constructor(context: SimCloudWatchAlarmContext);
+    /**
+     * Create an alarm, or take a new configuration for one that exists.
+     *
+     * An existing alarm keeps its state and history across the change, as it
+     * does on real CloudWatch: an alarm in ALARM stays there until it next
+     * evaluates against whatever it now watches.
+     */
+    putMetricAlarm(command: SimPutMetricAlarmCommand, options?: SimCloudWatchRequestOptions): SimPutMetricAlarmCommandOutput;
+    /**
+     * Remove alarms, and stop evaluating them.
+     */
+    deleteAlarms(command: SimDeleteAlarmsCommand, options?: SimCloudWatchRequestOptions): SimDeleteAlarmsCommandOutput;
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-writes.d.ts.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-writes.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,oBAAoB,CAAC;AAM5B;;GAEG;AACH,qBAAa,wBAAwB;;IAGnC,YAAY,OAAO,EAAE,yBAAyB,EAE7C;IAED;;;;;;OAMG;IACH,cAAc,CACZ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,2BAA2B,GACpC,8BAA8B,CA2BhC;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,2BAA2B,GACpC,4BAA4B,CAiB9B;CACF"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.js

@@ -0,0 +1,63 @@
+import { SimCloudWatchAlarm } from "../../alarm/sim-cloudwatch-alarm.js";
+import { SimCloudWatchMissingRequiredParameterException } from "../../error/sim-cloudwatch.error.js";
+import { requiredSimCloudWatchName } from "../../metric/sim-cloudwatch-name.js";
+import { readSimCloudWatchAlarmDefinition } from "./sim-cloudwatch-alarm-input.js";
+const putMetricAlarmAction = "cloudwatch:PutMetricAlarm";
+const deleteAlarmsAction = "cloudwatch:DeleteAlarms";
+/**
+ * The commands that create and remove alarms.
+ */
+export class SimCloudWatchAlarmWrites {
+    #context;
+    constructor(context) {
+        this.#context = context;
+    }
+    /**
+     * Create an alarm, or take a new configuration for one that exists.
+     *
+     * An existing alarm keeps its state and history across the change, as it
+     * does on real CloudWatch: an alarm in ALARM stays there until it next
+     * evaluates against whatever it now watches.
+     */
+    putMetricAlarm(command, options) {
+        const definition = readSimCloudWatchAlarmDefinition(command.input);
+        this.#context.authorizer.authorizeAlarm(putMetricAlarmAction, definition.alarmName, options?.caller);
+        const now = this.#context.clock.now();
+        const existing = this.#context.alarms.find(definition.alarmName);
+        if (existing === undefined) {
+            const alarm = new SimCloudWatchAlarm({
+                definition,
+                accountRegionScope: this.#context.accountRegionScope,
+                createdAt: now,
+            });
+            this.#context.alarms.put(alarm);
+            this.#context.schedule.start(alarm);
+        }
+        else {
+            existing.redefine(definition, now);
+            this.#context.schedule.start(existing);
+        }
+        return { $metadata: {} };
+    }
+    /**
+     * Remove alarms, and stop evaluating them.
+     */
+    deleteAlarms(command, options) {
+        const names = requiredAlarmNames(command.input.AlarmNames);
+        for (const alarmName of names) {
+            this.#context.authorizer.authorizeAlarm(deleteAlarmsAction, alarmName, options?.caller);
+        }
+        for (const alarmName of names) {
+            this.#context.schedule.stop(alarmName);
+            this.#context.alarms.delete(alarmName);
+        }
+        return { $metadata: {} };
+    }
+}
+function requiredAlarmNames(alarmNames) {
+    if (alarmNames === undefined || alarmNames.length === 0) {
+        throw new SimCloudWatchMissingRequiredParameterException("The parameter AlarmNames must be present and not empty.");
+    }
+    return alarmNames.map((alarmName) => requiredSimCloudWatchName("AlarmNames", alarmName));
+}
+//# sourceMappingURL=sim-cloudwatch-alarm-writes.js.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-alarm-writes.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-alarm-writes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,8CAA8C,EAAE,MAAM,qCAAqC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAShF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAEnF,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AACzD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAC1B,QAAQ,CAA4B;IAE7C,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CACZ,OAAiC,EACjC,OAAqC;QAErC,MAAM,UAAU,GAAG,gCAAgC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CACrC,oBAAoB,EACpB,UAAU,CAAC,SAAS,EACpB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAEjE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC;gBACnC,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;gBACpD,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAA+B,EAC/B,OAAqC;QAErC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE3D,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CACrC,kBAAkB,EAClB,SAAS,EACT,OAAO,EAAE,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,kBAAkB,CACzB,UAAyC;IAEzC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,8CAA8C,CACtD,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClC,yBAAyB,CAAC,YAAY,EAAE,SAAS,CAAC,CACnD,CAAC;AACJ,CAAC"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.d.ts

@@ -0,0 +1,19 @@
+import type { SimCloudWatchRequestOptions } from "../sim-cloudwatch-request-options.js";
+import type { SimCloudWatchAlarmContext } from "./sim-cloudwatch-alarm-context.js";
+import type { SimSetAlarmStateCommand, SimSetAlarmStateCommandOutput } from "./alarm.command.js";
+/**
+ * The command that forces an alarm into a state, firing that state's actions.
+ *
+ * This is how a test exercises a subscriber without publishing a metric at
+ * all, and it is temporary on real CloudWatch too: the next evaluation
+ * overwrites whatever was set here.
+ */
+export declare class SimCloudWatchSetAlarmState {
+    #private;
+    constructor(context: SimCloudWatchAlarmContext);
+    /**
+     * Move one alarm to a state, whatever its metric says.
+     */
+    handle(command: SimSetAlarmStateCommand, options?: SimCloudWatchRequestOptions): Promise<SimSetAlarmStateCommandOutput>;
+}
+//# sourceMappingURL=sim-cloudwatch-set-alarm-state.d.ts.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-set-alarm-state.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAI5B;;;;;;GAMG;AACH,qBAAa,0BAA0B;;IAGrC,YAAY,OAAO,EAAE,yBAAyB,EAE7C;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,6BAA6B,CAAC,CAuCxC;CACF"}

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.js

@@ -0,0 +1,47 @@
+import { simCloudWatchAlarmStates, } from "../../alarm/sim-cloudwatch-alarm-state.js";
+import { SimCloudWatchInvalidParameterValueException } from "../../error/sim-cloudwatch.error.js";
+import { requiredSimCloudWatchName } from "../../metric/sim-cloudwatch-name.js";
+import { requiredSimCloudWatchValue } from "./sim-cloudwatch-alarm-numbers.js";
+const setAlarmStateAction = "cloudwatch:SetAlarmState";
+/**
+ * The command that forces an alarm into a state, firing that state's actions.
+ *
+ * This is how a test exercises a subscriber without publishing a metric at
+ * all, and it is temporary on real CloudWatch too: the next evaluation
+ * overwrites whatever was set here.
+ */
+export class SimCloudWatchSetAlarmState {
+    #context;
+    constructor(context) {
+        this.#context = context;
+    }
+    /**
+     * Move one alarm to a state, whatever its metric says.
+     */
+    async handle(command, options) {
+        const alarmName = requiredSimCloudWatchName("AlarmName", command.input.AlarmName);
+        const state = requiredAlarmState(command.input.StateValue);
+        // Real SetAlarmState requires a reason, so an alarm here never carries one
+        // this simulation made up on the caller's behalf.
+        const stateReason = requiredSimCloudWatchValue("StateReason", command.input.StateReason);
+        this.#context.authorizer.authorizeAlarm(setAlarmStateAction, alarmName, options?.caller);
+        const alarm = this.#context.alarms.find(alarmName);
+        if (alarm === undefined) {
+            throw new SimCloudWatchInvalidParameterValueException(`The alarm ${alarmName} does not exist in this account and region.`);
+        }
+        const transition = alarm.moveTo(state, stateReason, this.#context.clock.now());
+        if (transition !== undefined) {
+            await this.#context.actions.fire(alarm, transition);
+        }
+        return { $metadata: {} };
+    }
+}
+function requiredAlarmState(state) {
+    const found = simCloudWatchAlarmStates.find((one) => one === state);
+    if (found === undefined) {
+        throw new SimCloudWatchInvalidParameterValueException(`The parameter StateValue must be one of ` +
+            `${simCloudWatchAlarmStates.join(", ")}.`);
+    }
+    return found;
+}
+//# sourceMappingURL=sim-cloudwatch-set-alarm-state.js.map

package/dist/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-set-alarm-state.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/alarm/sim-cloudwatch-set-alarm-state.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,2CAA2C,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAQ/E,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IAC5B,QAAQ,CAA4B;IAE7C,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAgC,EAChC,OAAqC;QAErC,MAAM,SAAS,GAAG,yBAAyB,CACzC,WAAW,EACX,OAAO,CAAC,KAAK,CAAC,SAAS,CACxB,CAAC;QACF,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE3D,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,WAAW,GAAG,0BAA0B,CAC5C,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAC1B,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CACrC,mBAAmB,EACnB,SAAS,EACT,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,2CAA2C,CACnD,aAAa,SAAS,6CAA6C,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,KAAK,EACL,WAAW,EACX,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAC1B,CAAC;QAEF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;IAEpE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,2CAA2C,CACnD,0CAA0C;YACxC,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.d.ts

@@ -0,0 +1,41 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+interface SimCloudWatchAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to CloudWatch metric requests.
+ *
+ * A policy written against a metric ARN is a policy that reaches nothing, here
+ * and in an account: teams reaching for one find out at this boundary rather
+ * than after a deployment.
+ */
+export declare class SimCloudWatchAuthorizer {
+    #private;
+    constructor(properties: SimCloudWatchAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on this scope's metrics.
+     */
+    authorize(action: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on one alarm.
+     *
+     * Alarms are the one thing in CloudWatch a policy can name, so these
+     * authorize against the alarm's ARN rather than against `*`. The alarm need
+     * not exist: real IAM evaluates a request before the service handles it, so
+     * PutMetricAlarm authorizes against the ARN the alarm is about to have.
+     */
+    authorizeAlarm(action: string, alarmName: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may write into a namespace.
+     *
+     * The namespace is supplied to IAM as `cloudwatch:namespace`, which is the
+     * condition key AWS's own documented publishing policies are written with.
+     */
+    authorizeNamespace(action: string, namespace: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+}
+export {};
+//# sourceMappingURL=sim-cloudwatch-authorizer.d.ts.map

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAa7F,UAAU,iCAAiC;IACzC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;;IAIlC,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,oBAAoB,CAMrE;IAED;;;;;;;OAOG;IACH,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAOtB;CACF"}

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.js

@@ -0,0 +1,65 @@
+import { simCloudWatchAlarmArn } from "../../alarm/sim-cloudwatch-alarm-arn.js";
+import { decideSimCloudWatchRequest } from "./sim-cloudwatch-decide.js";
+/**
+ * The resource every CloudWatch metric action authorizes against.
+ *
+ * Metrics have no ARN on real AWS. There is nothing for a policy to name, so
+ * every one of these actions is granted on `*` and narrowed, if at all, by
+ * condition rather than by resource.
+ */
+const metricResource = "*";
+/**
+ * Applies simulated IAM authorization to CloudWatch metric requests.
+ *
+ * A policy written against a metric ARN is a policy that reaches nothing, here
+ * and in an account: teams reaching for one find out at this boundary rather
+ * than after a deployment.
+ */
+export class SimCloudWatchAuthorizer {
+    #iam;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#iam = properties.iam;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may perform an action on this scope's metrics.
+     */
+    authorize(action, caller) {
+        return decideSimCloudWatchRequest(this.#iam, {
+            action,
+            resource: metricResource,
+            caller,
+        });
+    }
+    /**
+     * Ensure the caller may perform an action on one alarm.
+     *
+     * Alarms are the one thing in CloudWatch a policy can name, so these
+     * authorize against the alarm's ARN rather than against `*`. The alarm need
+     * not exist: real IAM evaluates a request before the service handles it, so
+     * PutMetricAlarm authorizes against the ARN the alarm is about to have.
+     */
+    authorizeAlarm(action, alarmName, caller) {
+        return decideSimCloudWatchRequest(this.#iam, {
+            action,
+            resource: simCloudWatchAlarmArn(this.#accountRegionScope, alarmName),
+            caller,
+        });
+    }
+    /**
+     * Ensure the caller may write into a namespace.
+     *
+     * The namespace is supplied to IAM as `cloudwatch:namespace`, which is the
+     * condition key AWS's own documented publishing policies are written with.
+     */
+    authorizeNamespace(action, namespace, caller) {
+        return decideSimCloudWatchRequest(this.#iam, {
+            action,
+            resource: metricResource,
+            caller,
+            namespace,
+        });
+    }
+}
+//# sourceMappingURL=sim-cloudwatch-authorizer.js.map

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/authorize/sim-cloudwatch-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAO3B;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACzB,IAAI,CAA0B;IAC9B,mBAAmB,CAA2B;IAEvD,YAAY,UAA6C;QACvD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc,EAAE,MAAqB;QAC7C,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE;YAC3C,MAAM;YACN,QAAQ,EAAE,cAAc;YACxB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CACZ,MAAc,EACd,SAAiB,EACjB,MAAqB;QAErB,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE;YAC3C,MAAM;YACN,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC;YACpE,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,MAAc,EACd,SAAiB,EACjB,MAAqB;QAErB,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE;YAC3C,MAAM;YACN,QAAQ,EAAE,cAAc;YACxB,MAAM;YACN,SAAS;SACV,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-decide.d.ts

@@ -0,0 +1,23 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+/**
+ * One authorization question: what is being done, to what, by whom, and in
+ * which namespace where that narrows it.
+ */
+export interface SimCloudWatchAuthorization {
+    readonly action: string;
+    readonly resource: string;
+    readonly caller: SimAwsCaller | undefined;
+    readonly namespace?: string | undefined;
+}
+/**
+ * Put one CloudWatch request to simulated IAM, refusing it if the answer is no.
+ *
+ * The namespace, where there is one, goes in as `cloudwatch:namespace`, which
+ * is the condition key AWS's own documented publishing policies are written
+ * with and the only way a policy can narrow an action with no resource to
+ * name.
+ */
+export declare function decideSimCloudWatchRequest(iam: SimIamInterServiceAuthZ, request: SimCloudWatchAuthorization): SimAwsResolvedCaller;
+//# sourceMappingURL=sim-cloudwatch-decide.d.ts.map

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-decide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-decide.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/authorize/sim-cloudwatch-decide.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAItG;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,uBAAuB,EAC5B,OAAO,EAAE,0BAA0B,GAClC,oBAAoB,CAqBtB"}

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-decide.js

@@ -0,0 +1,30 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simCloudWatchNamespaceConditionKey } from "../sim-cloudwatch-request-options.js";
+/**
+ * Put one CloudWatch request to simulated IAM, refusing it if the answer is no.
+ *
+ * The namespace, where there is one, goes in as `cloudwatch:namespace`, which
+ * is the condition key AWS's own documented publishing policies are written
+ * with and the only way a policy can narrow an action with no resource to
+ * name.
+ */
+export function decideSimCloudWatchRequest(iam, request) {
+    const { action, resource, namespace } = request;
+    const decision = iam.authorize({
+        action,
+        resource,
+        caller: request.caller,
+        conditionContext: namespace === undefined
+            ? undefined
+            : { [simCloudWatchNamespaceConditionKey]: namespace },
+    });
+    if (decision.isDenied) {
+        throw new SimIamAccessDenied({
+            principal: decision.caller.principal,
+            action,
+            resource,
+        });
+    }
+    return decision.caller;
+}
+//# sourceMappingURL=sim-cloudwatch-decide.js.map

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-decide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cloudwatch-decide.js","sourceRoot":"","sources":["../../../../../src/service/cloudwatch/command/authorize/sim-cloudwatch-decide.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAa1F;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAA4B,EAC5B,OAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC;QAC7B,MAAM;QACN,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EACd,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE;KAC1D,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAAC;YAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;YACpC,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC"}