@kensio/yulin 1.15.1 → 1.16.1

package/dist/service/s3/index.js

@@ -1,2 +1,3 @@
 export { SimS3 } from "./sim-s3.js";
+export { s3NotificationEventFactory, s3NotificationEventRecordFactory, } from "./factory/s3-notification-event.factory.js";
 //# sourceMappingURL=index.js.map

package/dist/service/s3/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAqBpC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4CAA4C,CAAC"}

package/dist/service/s3/notification/event/sim-s3-event-records.d.ts

@@ -1,3 +1,4 @@
+import type { SimS3Event } from "./sim-s3-event.type.js";
 import type { SimS3ObjectEvent } from "./sim-s3-object-event.js";
 /**
  * The event structure version this simulator emits.
@@ -10,6 +11,11 @@ import type { SimS3ObjectEvent } from "./sim-s3-object-event.js";
  * https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-content-structure.html
  */
 export declare const SIM_S3_EVENT_VERSION = "2.5";
+/**
+ * The event schema version inside the `s3` block, which is separate from the
+ * message version and has not moved off 1.0.
+ */
+export declare const SIM_S3_EVENT_SCHEMA_VERSION = "1.0";
 /**
  * The `Records` document a destination receives for one Object event.
  *
@@ -17,5 +23,30 @@ export declare const SIM_S3_EVENT_VERSION = "2.5";
  * destination either: a function configured for a Bucket is invoked once per
  * event, with an array holding the single record.
  */
-export declare function simS3EventRecordsDocument(event: SimS3ObjectEvent, configurationId: string): object;
+export declare function simS3EventRecordsDocument(event: SimS3ObjectEvent, configurationId: string): SimS3Event;
+/**
+ * The address a simulated request came from.
+ *
+ * A request to simulated S3 is made in this process, so the loopback address
+ * is the honest answer. A test asserting on it is asserting on the simulator
+ * rather than on anything AWS would report, which is why the Limitations
+ * section says so.
+ */
+export declare const simS3EventSourceIpAddress = "127.0.0.1";
+/**
+ * A request id for one event.
+ *
+ * Real S3 puts the ids of the request that caused the event here, so AWS
+ * Support can trace it. The simulator has no such ids, so these are generated
+ * per event and match nothing: they are present because the field is, not
+ * because they mean anything.
+ */
+export declare function simS3EventRequestId(): string;
+/**
+ * The object key as a record carries it.
+ *
+ * Real S3 form-URL-encodes the key, so a space becomes a plus sign, while the
+ * slashes that make up a key prefix stay as they are.
+ */
+export declare function simS3EventObjectKey(key: string): string;
 //# sourceMappingURL=sim-s3-event-records.d.ts.map

package/dist/service/s3/notification/event/sim-s3-event-records.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-event-records.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAQ1C;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,gBAAgB,EACvB,eAAe,EAAE,MAAM,GACtB,MAAM,CAmCR"}
+{"version":3,"file":"sim-s3-event-records.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,gBAAgB,EACvB,eAAe,EAAE,MAAM,GACtB,UAAU,CAmCZ;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/service/s3/notification/event/sim-s3-event-records.js

@@ -14,7 +14,7 @@ export const SIM_S3_EVENT_VERSION = "2.5";
  * The event schema version inside the `s3` block, which is separate from the
  * message version and has not moved off 1.0.
  */
-const s3SchemaVersion = "1.0";
+export const SIM_S3_EVENT_SCHEMA_VERSION = "1.0";
 /**
  * The `Records` document a destination receives for one Object event.
  *
@@ -40,7 +40,7 @@ export function simS3EventRecordsDocument(event, configurationId) {
                     "x-amz-id-2": simS3EventRequestId(),
                 },
                 s3: {
-                    s3SchemaVersion,
+                    s3SchemaVersion: SIM_S3_EVENT_SCHEMA_VERSION,
                     configurationId,
                     bucket: {
                         name: event.bucketName,
@@ -66,7 +66,7 @@ export function simS3EventRecordsDocument(event, configurationId) {
  * rather than on anything AWS would report, which is why the Limitations
  * section says so.
  */
-const simS3EventSourceIpAddress = "127.0.0.1";
+export const simS3EventSourceIpAddress = "127.0.0.1";
 /**
  * A request id for one event.
  *
@@ -75,7 +75,7 @@ const simS3EventSourceIpAddress = "127.0.0.1";
  * per event and match nothing: they are present because the field is, not
  * because they mean anything.
  */
-function simS3EventRequestId() {
+export function simS3EventRequestId() {
     return randomUUID().replaceAll("-", "").toUpperCase();
 }
 /**
@@ -84,7 +84,7 @@ function simS3EventRequestId() {
  * Real S3 form-URL-encodes the key, so a space becomes a plus sign, while the
  * slashes that make up a key prefix stay as they are.
  */
-function simS3EventObjectKey(key) {
+export function simS3EventObjectKey(key) {
     return encodeURIComponent(key).replaceAll("%20", "+").replaceAll("%2F", "/");
 }
 //# sourceMappingURL=sim-s3-event-records.js.map

package/dist/service/s3/notification/event/sim-s3-event-records.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-event-records.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C;;;GAGG;AACH,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAuB,EACvB,eAAuB;IAEvB,OAAO;QACL,OAAO,EAAE;YACP;gBACE,YAAY,EAAE,oBAAoB;gBAClC,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,+DAA+D;gBAC/D,sBAAsB;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7C,YAAY,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChD,iBAAiB,EAAE,EAAE,eAAe,EAAE,yBAAyB,EAAE;gBACjE,gBAAgB,EAAE;oBAChB,kBAAkB,EAAE,mBAAmB,EAAE;oBACzC,YAAY,EAAE,mBAAmB,EAAE;iBACpC;gBACD,EAAE,EAAE;oBACF,eAAe;oBACf,eAAe;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,KAAK,CAAC,UAAU;wBACtB,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE;wBACpD,GAAG,EAAE,KAAK,CAAC,SAAS;qBACrB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC;wBACnC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAE9C;;;;;;;GAOG;AACH,SAAS,mBAAmB;IAC1B,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"sim-s3-event-records.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAuB,EACvB,eAAuB;IAEvB,OAAO;QACL,OAAO,EAAE;YACP;gBACE,YAAY,EAAE,oBAAoB;gBAClC,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,+DAA+D;gBAC/D,sBAAsB;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7C,YAAY,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChD,iBAAiB,EAAE,EAAE,eAAe,EAAE,yBAAyB,EAAE;gBACjE,gBAAgB,EAAE;oBAChB,kBAAkB,EAAE,mBAAmB,EAAE;oBACzC,YAAY,EAAE,mBAAmB,EAAE;iBACpC;gBACD,EAAE,EAAE;oBACF,eAAe,EAAE,2BAA2B;oBAC5C,eAAe;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,KAAK,CAAC,UAAU;wBACtB,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE;wBACpD,GAAG,EAAE,KAAK,CAAC,SAAS;qBACrB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC;wBACnC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC"}

package/dist/service/s3/notification/event/sim-s3-event.type.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The `Records` document an S3 event notification is delivered as.
+ *
+ * One event produces one record. Real S3 batches nothing for a Lambda
+ * destination: a function configured for a Bucket is invoked once per event,
+ * with an array holding the single record.
+ *
+ * This is the document real S3 sends rather than the `aws-lambda` typings
+ * package's `S3Event`, and a handler typed against that one has to be given
+ * this as an `S3Event` rather than being assignable from it. That package
+ * declares `Records` mutable and requires `s3.object.size` and `eTag`, which a
+ * removal record does not carry: describing a removal truthfully and
+ * satisfying those declarations are not both possible, and the truthful shape
+ * is the one worth having.
+ *
+ * https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-content-structure.html
+ */
+export interface SimS3Event {
+    readonly Records: readonly SimS3EventRecord[];
+}
+/**
+ * One Object event as an S3 notification record.
+ */
+export interface SimS3EventRecord {
+    readonly eventVersion: string;
+    readonly eventSource: "aws:s3";
+    readonly awsRegion: string;
+    readonly eventTime: string;
+    /** The event type without the `s3:` prefix the configuration uses. */
+    readonly eventName: string;
+    readonly userIdentity: SimS3EventUserIdentity;
+    readonly requestParameters: SimS3EventRequestParameters;
+    readonly responseElements: SimS3EventResponseElements;
+    readonly s3: SimS3EventNotification;
+}
+/**
+ * Whoever a record names: the caller that caused the event, and the Bucket's
+ * owner.
+ */
+export interface SimS3EventUserIdentity {
+    readonly principalId: string;
+}
+export interface SimS3EventRequestParameters {
+    readonly sourceIPAddress: string;
+}
+/**
+ * The ids of the request that caused the event, for tracing it with AWS
+ * Support.
+ */
+export interface SimS3EventResponseElements {
+    readonly "x-amz-request-id": string;
+    readonly "x-amz-id-2": string;
+}
+/**
+ * What the event was about: the notification configuration that selected it,
+ * the Bucket, and the Object.
+ */
+export interface SimS3EventNotification {
+    readonly s3SchemaVersion: string;
+    readonly configurationId: string;
+    readonly bucket: SimS3EventBucket;
+    readonly object: SimS3EventObject;
+}
+export interface SimS3EventBucket {
+    readonly name: string;
+    readonly ownerIdentity: SimS3EventUserIdentity;
+    readonly arn: string;
+}
+/**
+ * The Object an event is about.
+ *
+ * `size` and `eTag` describe an Object that exists, so a removal record
+ * carries neither, as a real S3 removal record does not. The key is
+ * form-URL-encoded, as the record carries it: a space is a plus sign, while
+ * the slashes of a key prefix stay as they are.
+ */
+export interface SimS3EventObject {
+    readonly key: string;
+    readonly size?: number | undefined;
+    readonly eTag?: string | undefined;
+    readonly sequencer: string;
+}
+//# sourceMappingURL=sim-s3-event.type.d.ts.map

package/dist/service/s3/notification/event/sim-s3-event.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event.type.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,EAAE,EAAE,sBAAsB,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/service/s3/notification/event/sim-s3-event.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-event.type.js.map

package/dist/service/s3/notification/event/sim-s3-event.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event.type.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event.type.ts"],"names":[],"mappings":""}

package/dist/service/ses/account/sim-ses-account.d.ts

@@ -0,0 +1,59 @@
+/**
+ * How much an account may send, which is one of the two things leaving the
+ * sandbox changes.
+ */
+export interface SimSesSendQuota {
+    readonly max24HourSend: number;
+    readonly maxSendRate: number;
+}
+/**
+ * The contact details `PutAccountDetails` carries, kept so `GetAccount` can
+ * report them back.
+ */
+export interface SimSesAccountContactDetails {
+    readonly mailType: string;
+    readonly websiteUrl: string;
+    readonly contactLanguage: string | undefined;
+    readonly useCaseDescription: string | undefined;
+    readonly additionalContactEmailAddresses: readonly string[] | undefined;
+}
+/**
+ * The account-wide SES settings of one region.
+ *
+ * An account starts in the sandbox, which is where every real one starts and
+ * the state most tests should be written against: it is the configuration that
+ * refuses to mail an address nobody verified, and that refusal is the whole
+ * point of having identities at all.
+ *
+ * Neither quota is enforced. Simulating the daily cap would mean a test suite
+ * that sent two hundred messages started failing for a reason unrelated to
+ * what it asserts, and simulating the per-second rate would mean tests that
+ * take real time to run. The numbers are reported so a caller reading them
+ * gets the shape it expects, and the divergence is documented rather than
+ * quietly enforced.
+ */
+export declare class SimSesAccount {
+    #private;
+    /**
+     * Whether this account has left the sandbox.
+     */
+    get productionAccessEnabled(): boolean;
+    /**
+     * Whether the sandbox rules apply, which is the same question the other way
+     * round. Sending code reads it this way, so it is named this way too.
+     */
+    get isInSandbox(): boolean;
+    get sendQuota(): SimSesSendQuota;
+    get contactDetails(): SimSesAccountContactDetails | undefined;
+    /**
+     * Record the account details, and leave the sandbox if they ask to.
+     *
+     * Real SES treats `ProductionAccessEnabled` as a request that a human at AWS
+     * then reviews, so an account does not leave the sandbox the moment this
+     * returns. Granting it immediately is the divergence worth taking: the
+     * alternative is a simulator no test can get out of the sandbox in, and
+     * waiting for a review is not behaviour a test can assert on anyway.
+     */
+    putDetails(details: SimSesAccountContactDetails, productionAccessEnabled: boolean): void;
+}
+//# sourceMappingURL=sim-ses-account.d.ts.map

package/dist/service/ses/account/sim-ses-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account.d.ts","sourceRoot":"","sources":["../../../../src/service/ses/account/sim-ses-account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAkBD;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,+BAA+B,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACzE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,aAAa;;IAIxB;;OAEG;IACH,IAAI,uBAAuB,IAAI,OAAO,CAErC;IAED;;;OAGG;IACH,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,IAAI,SAAS,IAAI,eAAe,CAE/B;IAED,IAAI,cAAc,IAAI,2BAA2B,GAAG,SAAS,CAE5D;IAED;;;;;;;;OAQG;IACH,UAAU,CACR,OAAO,EAAE,2BAA2B,EACpC,uBAAuB,EAAE,OAAO,GAC/B,IAAI,CAGN;CACF"}

package/dist/service/ses/account/sim-ses-account.js

@@ -0,0 +1,66 @@
+/**
+ * What a sandbox account may send. These are the real SES sandbox limits.
+ */
+const sandboxQuota = { max24HourSend: 200, maxSendRate: 1 };
+/**
+ * What an account with production access may send.
+ *
+ * Real SES sets these per account, raising them as sending reputation builds,
+ * so this is the starting point rather than a fixed ceiling.
+ */
+const productionQuota = {
+    max24HourSend: 50_000,
+    maxSendRate: 14,
+};
+/**
+ * The account-wide SES settings of one region.
+ *
+ * An account starts in the sandbox, which is where every real one starts and
+ * the state most tests should be written against: it is the configuration that
+ * refuses to mail an address nobody verified, and that refusal is the whole
+ * point of having identities at all.
+ *
+ * Neither quota is enforced. Simulating the daily cap would mean a test suite
+ * that sent two hundred messages started failing for a reason unrelated to
+ * what it asserts, and simulating the per-second rate would mean tests that
+ * take real time to run. The numbers are reported so a caller reading them
+ * gets the shape it expects, and the divergence is documented rather than
+ * quietly enforced.
+ */
+export class SimSesAccount {
+    #productionAccessEnabled = false;
+    #contactDetails;
+    /**
+     * Whether this account has left the sandbox.
+     */
+    get productionAccessEnabled() {
+        return this.#productionAccessEnabled;
+    }
+    /**
+     * Whether the sandbox rules apply, which is the same question the other way
+     * round. Sending code reads it this way, so it is named this way too.
+     */
+    get isInSandbox() {
+        return !this.#productionAccessEnabled;
+    }
+    get sendQuota() {
+        return this.#productionAccessEnabled ? productionQuota : sandboxQuota;
+    }
+    get contactDetails() {
+        return this.#contactDetails;
+    }
+    /**
+     * Record the account details, and leave the sandbox if they ask to.
+     *
+     * Real SES treats `ProductionAccessEnabled` as a request that a human at AWS
+     * then reviews, so an account does not leave the sandbox the moment this
+     * returns. Granting it immediately is the divergence worth taking: the
+     * alternative is a simulator no test can get out of the sandbox in, and
+     * waiting for a review is not behaviour a test can assert on anyway.
+     */
+    putDetails(details, productionAccessEnabled) {
+        this.#contactDetails = details;
+        this.#productionAccessEnabled = productionAccessEnabled;
+    }
+}
+//# sourceMappingURL=sim-ses-account.js.map

package/dist/service/ses/account/sim-ses-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account.js","sourceRoot":"","sources":["../../../../src/service/ses/account/sim-ses-account.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,MAAM,YAAY,GAAoB,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,eAAe,GAAoB;IACvC,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,EAAE;CAChB,CAAC;AAcF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,aAAa;IACxB,wBAAwB,GAAG,KAAK,CAAC;IACjC,eAAe,CAA0C;IAEzD;;OAEG;IACH,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC;IACxC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC;IACxE,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CACR,OAAoC,EACpC,uBAAgC;QAEhC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,IAAI,CAAC,wBAAwB,GAAG,uBAAuB,CAAC;IAC1D,CAAC;CACF"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-creator.d.ts

@@ -0,0 +1,35 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimSesIdentity } from "../../identity/sim-ses-identity.js";
+import type { SimSesV2 } from "../../sim-ses-v2.js";
+interface SimCfnSesIdentityCreatorProperties {
+    readonly ses: SimSesV2;
+}
+/**
+ * Creates simulated email identities from AWS::SES::EmailIdentity Resources.
+ *
+ * The identity is created through the ordinary CreateEmailIdentity command
+ * rather than constructed directly, so one a template deployed is the same
+ * thing an SDK caller would have got: the same validation of what an identity
+ * may be named, and the same refusal of a name that is neither an address nor
+ * a domain.
+ *
+ * It deploys unverified, which is what real CloudFormation leaves behind: the
+ * confirmation link or the DKIM records still have to be dealt with out of
+ * band. A test verifies it afterwards with `verifyIdentity`, which finds the
+ * one the stack made rather than creating a second.
+ */
+export declare class SimCfnSesIdentityCreator {
+    #private;
+    constructor(properties: SimCfnSesIdentityCreatorProperties);
+    /**
+     * Create an identity from an AWS::SES::EmailIdentity Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSesIdentity>;
+    /**
+     * Delete an identity created from an AWS::SES::EmailIdentity Resource.
+     */
+    delete(identity: SimSesIdentity): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ses-identity-creator.d.ts.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAKpD,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAwB;;IAGnC,YAAY,UAAU,EAAE,kCAAkC,EAEzD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,cAAc,CAAC,CA2BzB;IAED;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpD;CACF"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-creator.js

@@ -0,0 +1,52 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnSesResourceCreation } from "../sim-cfn-ses-resource-error.js";
+import { sesEmailIdentityResourceType } from "../sim-cfn-ses-resource-types.js";
+import { SimCfnSesIdentityProperties } from "./sim-cfn-ses-identity-properties.js";
+/**
+ * Creates simulated email identities from AWS::SES::EmailIdentity Resources.
+ *
+ * The identity is created through the ordinary CreateEmailIdentity command
+ * rather than constructed directly, so one a template deployed is the same
+ * thing an SDK caller would have got: the same validation of what an identity
+ * may be named, and the same refusal of a name that is neither an address nor
+ * a domain.
+ *
+ * It deploys unverified, which is what real CloudFormation leaves behind: the
+ * confirmation link or the DKIM records still have to be dealt with out of
+ * band. A test verifies it afterwards with `verifyIdentity`, which finds the
+ * one the stack made rather than creating a second.
+ */
+export class SimCfnSesIdentityCreator {
+    #ses;
+    constructor(properties) {
+        this.#ses = properties.ses;
+    }
+    /**
+     * Create an identity from an AWS::SES::EmailIdentity Resource.
+     */
+    async create(resource, properties) {
+        const identityProperties = new SimCfnSesIdentityProperties({
+            resource,
+            properties,
+        });
+        const emailIdentity = identityProperties.emailIdentity();
+        identityProperties.recordIgnoredProperties();
+        return await simCfnSesResourceCreation(sesEmailIdentityResourceType, resource.logicalId, async () => {
+            await this.#ses.createEmailIdentity({
+                input: { EmailIdentity: emailIdentity },
+            });
+            const identity = this.#ses.findIdentity(emailIdentity);
+            assertDefined(identity, `sim SES identity ${emailIdentity} after CloudFormation creation`);
+            return identity;
+        });
+    }
+    /**
+     * Delete an identity created from an AWS::SES::EmailIdentity Resource.
+     */
+    async delete(identity) {
+        await this.#ses.deleteEmailIdentity({
+            input: { EmailIdentity: identity.emailIdentity },
+        });
+    }
+}
+//# sourceMappingURL=sim-cfn-ses-identity-creator.js.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-creator.js","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAMnF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,wBAAwB;IAC1B,IAAI,CAAW;IAExB,YAAY,UAA8C;QACxD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,kBAAkB,GAAG,IAAI,2BAA2B,CAAC;YACzD,QAAQ;YACR,UAAU;SACX,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAEzD,kBAAkB,CAAC,uBAAuB,EAAE,CAAC;QAE7C,OAAO,MAAM,yBAAyB,CACpC,4BAA4B,EAC5B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAClC,KAAK,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE;aACxC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAEvD,aAAa,CACX,QAAQ,EACR,oBAAoB,aAAa,gCAAgC,CAClE,CAAC;YAEF,OAAO,QAAQ,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB;QACnC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAClC,KAAK,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE;SACjD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-properties.d.ts

@@ -0,0 +1,37 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+interface SimCfnSesIdentityPropertiesProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * Reads AWS::SES::EmailIdentity CloudFormation properties.
+ *
+ * There is only one property to read. Everything else an identity Resource can
+ * say is about DKIM, a MAIL FROM domain, a configuration set or feedback
+ * forwarding, none of which this simulation acts on, so each is recorded as
+ * ignored and the identity is created without it.
+ */
+export declare class SimCfnSesIdentityProperties {
+    #private;
+    constructor(properties: SimCfnSesIdentityPropertiesProperties);
+    /**
+     * The address or domain the identity names.
+     *
+     * Required, and with no name to fall back on: unlike a topic or a log group,
+     * an identity is the thing it names, so CloudFormation cannot make one up.
+     */
+    emailIdentity(): string;
+    /**
+     * Record the properties the identity is created without acting on.
+     *
+     * A property this Resource type does not have is recorded too, rather than
+     * refused. Real CloudFormation refuses one, but the alternative here is a
+     * stack that fails on a property AWS added after this was written, which is
+     * a worse way to find out.
+     */
+    recordIgnoredProperties(): void;
+    private propertyError;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ses-identity-properties.d.ts.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-properties.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAQlH,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA2B;;IAKtC,YAAY,UAAU,EAAE,qCAAqC,EAI5D;IAED;;;;;OAKG;IACH,aAAa,IAAI,MAAM,CAetB;IAED;;;;;;;OAOG;IACH,uBAAuB,IAAI,IAAI,CAc9B;IAED,OAAO,CAAC,aAAa;CAOtB"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-properties.js

@@ -0,0 +1,61 @@
+import { simCfnSesResourceError } from "../sim-cfn-ses-resource-error.js";
+import { sesEmailIdentityResourceType } from "../sim-cfn-ses-resource-types.js";
+import { unsimulatedIdentityPropertyReasons } from "./sim-cfn-ses-identity-unsimulated-properties.js";
+/** The one property an identity Resource is actually created from. */
+const emailIdentityPropertyName = "EmailIdentity";
+/**
+ * Reads AWS::SES::EmailIdentity CloudFormation properties.
+ *
+ * There is only one property to read. Everything else an identity Resource can
+ * say is about DKIM, a MAIL FROM domain, a configuration set or feedback
+ * forwarding, none of which this simulation acts on, so each is recorded as
+ * ignored and the identity is created without it.
+ */
+export class SimCfnSesIdentityProperties {
+    #resource;
+    #properties;
+    #ignorer;
+    constructor(properties) {
+        this.#resource = properties.resource;
+        this.#properties = properties.properties;
+        this.#ignorer = properties.resource;
+    }
+    /**
+     * The address or domain the identity names.
+     *
+     * Required, and with no name to fall back on: unlike a topic or a log group,
+     * an identity is the thing it names, so CloudFormation cannot make one up.
+     */
+    emailIdentity() {
+        const emailIdentity = this.#properties["EmailIdentity"];
+        if (emailIdentity === undefined) {
+            throw this.propertyError(`${emailIdentityPropertyName} is required, and there is no name ` +
+                `CloudFormation could generate for an identity`);
+        }
+        if (typeof emailIdentity !== "string") {
+            throw this.propertyError(`${emailIdentityPropertyName} must be a string`);
+        }
+        return emailIdentity;
+    }
+    /**
+     * Record the properties the identity is created without acting on.
+     *
+     * A property this Resource type does not have is recorded too, rather than
+     * refused. Real CloudFormation refuses one, but the alternative here is a
+     * stack that fails on a property AWS added after this was written, which is
+     * a worse way to find out.
+     */
+    recordIgnoredProperties() {
+        for (const name of Object.keys(this.#properties)) {
+            if (name === emailIdentityPropertyName) {
+                continue;
+            }
+            this.#ignorer.ignoreProperty(name, unsimulatedIdentityPropertyReasons.get(name) ??
+                `${name} is not a property simulated SES reads from ${sesEmailIdentityResourceType}`);
+        }
+    }
+    propertyError(reason) {
+        return simCfnSesResourceError(sesEmailIdentityResourceType, this.#resource.logicalId, reason);
+    }
+}
+//# sourceMappingURL=sim-cfn-ses-identity-properties.js.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-properties.js","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-properties.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,kCAAkC,EAAE,MAAM,kDAAkD,CAAC;AAEtG,sEAAsE;AACtE,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAOlD;;;;;;;GAOG;AACH,MAAM,OAAO,2BAA2B;IAC7B,SAAS,CAAiB;IAC1B,WAAW,CAA4B;IACvC,QAAQ,CAAwB;IAEzC,YAAY,UAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,yBAAyB,qCAAqC;gBAC/D,+CAA+C,CAClD,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,yBAAyB,mBAAmB,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB;QACrB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,cAAc,CAC1B,IAAI,EACJ,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC1C,GAAG,IAAI,+CACL,4BACF,EAAE,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,OAAO,sBAAsB,CAC3B,4BAA4B,EAC5B,IAAI,CAAC,SAAS,CAAC,SAAS,EACxB,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The AWS::SES::EmailIdentity properties this simulation has nothing to act
+ * on, and why.
+ *
+ * They are recorded as ignored rather than refused, because an identity
+ * without any of them still does the one thing an identity does here: exist to
+ * be verified, and let a send from it through. Refusing would take a whole
+ * stack down over a property that changes nothing about what a test is
+ * checking, and every one of these is something CDK writes readily.
+ *
+ * The SDK path is stricter, and deliberately so: `CreateEmailIdentity` refuses
+ * `DkimSigningAttributes` outright, because a caller reaching for it directly
+ * is asking for that behaviour and should be told it is not there. A template
+ * is a whole document, and one property in it should not sink the deploy.
+ */
+export declare const unsimulatedIdentityPropertyReasons: ReadonlyMap<string, string>;
+//# sourceMappingURL=sim-cfn-ses-identity-unsimulated-properties.d.ts.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-unsimulated-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kCAAkC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAgCvE,CAAC"}

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.js

@@ -0,0 +1,48 @@
+/**
+ * The AWS::SES::EmailIdentity properties this simulation has nothing to act
+ * on, and why.
+ *
+ * They are recorded as ignored rather than refused, because an identity
+ * without any of them still does the one thing an identity does here: exist to
+ * be verified, and let a send from it through. Refusing would take a whole
+ * stack down over a property that changes nothing about what a test is
+ * checking, and every one of these is something CDK writes readily.
+ *
+ * The SDK path is stricter, and deliberately so: `CreateEmailIdentity` refuses
+ * `DkimSigningAttributes` outright, because a caller reaching for it directly
+ * is asking for that behaviour and should be told it is not there. A template
+ * is a whole document, and one property in it should not sink the deploy.
+ */
+export const unsimulatedIdentityPropertyReasons = new Map([
+    [
+        "DkimAttributes",
+        "DKIM is not simulated, so nothing signs a message and nothing checks a " +
+            "signature on one",
+    ],
+    [
+        "DkimSigningAttributes",
+        "DKIM signing is not simulated, so no key here signs anything and no " +
+            "selector is ever published",
+    ],
+    [
+        "ConfigurationSetAttributes",
+        "configuration sets are not simulated, so naming a default one changes " +
+            "nothing about a send from this identity",
+    ],
+    [
+        "MailFromAttributes",
+        "a custom MAIL FROM domain only changes the envelope sender, which no " +
+            "recorded send here carries",
+    ],
+    [
+        "FeedbackAttributes",
+        "bounce and complaint forwarding is not simulated, because nothing here " +
+            "bounces or complains",
+    ],
+    [
+        "Tags",
+        "email identity tags are not simulated, so nothing reads them back and " +
+            "nothing is billed or grouped by them",
+    ],
+]);
+//# sourceMappingURL=sim-cfn-ses-identity-unsimulated-properties.js.map

package/dist/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ses-identity-unsimulated-properties.js","sourceRoot":"","sources":["../../../../../src/service/ses/cfn/identity/sim-cfn-ses-identity-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,GAAG,CAAC;IACN;QACE,gBAAgB;QAChB,yEAAyE;YACvE,kBAAkB;KACrB;IACD;QACE,uBAAuB;QACvB,sEAAsE;YACpE,4BAA4B;KAC/B;IACD;QACE,4BAA4B;QAC5B,wEAAwE;YACtE,yCAAyC;KAC5C;IACD;QACE,oBAAoB;QACpB,uEAAuE;YACrE,4BAA4B;KAC/B;IACD;QACE,oBAAoB;QACpB,yEAAyE;YACvE,sBAAsB;KACzB;IACD;QACE,MAAM;QACN,wEAAwE;YACtE,sCAAsC;KACzC;CACF,CAAC,CAAC"}