@kensio/yulin 1.16.2 → 1.17.0

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js

@@ -0,0 +1,95 @@
+import { SimSsmParameterVersionNotFound } from "../../error/sim-ssm.error.js";
+/** The characters CloudFormation documents a referenced parameter name as. */
+const ssmReferenceName = /^[a-zA-Z0-9_.\-/]+$/;
+/** The version selector, which CloudFormation documents as an integer. */
+const ssmReferenceVersion = /^\d+$/;
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ */
+function parseSsmReferenceBody(body) {
+    const colon = body.lastIndexOf(":");
+    if (colon === -1) {
+        return ssmReferenceName.test(body)
+            ? { name: body, version: undefined }
+            : undefined;
+    }
+    const name = body.slice(0, colon);
+    const version = body.slice(colon + 1);
+    if (!ssmReferenceName.test(name) || !ssmReferenceVersion.test(version)) {
+        return undefined;
+    }
+    return { name, version };
+}
+/**
+ * Answers `{{resolve:ssm:...}}` references from the simulated Parameter Store.
+ *
+ * A reference is read as the caller deploying the Stack would read it, at the
+ * point the Resource holding it is created. Real CloudFormation makes no
+ * dependency out of a dynamic reference, so a parameter another Resource of
+ * the same Stack creates is only there in time if the template says
+ * `DependsOn`.
+ *
+ * Anything Parameter Store cannot answer becomes a stand-in value carrying a
+ * reason. A template naming parameters a test never created still deploys, and
+ * the Resource records what it was given instead.
+ */
+export class SimCfnSsmDynamicReferenceResolver {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Resolve one reference to the parameter value it names.
+     */
+    resolve(reference) {
+        const parsed = parseSsmReferenceBody(reference.body);
+        if (parsed === undefined) {
+            return this.standIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
+                `version, that an ssm dynamic reference takes`);
+        }
+        const { name, version } = parsed;
+        const parameter = this.ssm.findParameter(name);
+        if (parameter === undefined) {
+            return this.standIn(reference, name, `and simulated Parameter Store holds no parameter '${name}'`);
+        }
+        if (parameter.type.value === "SecureString") {
+            return this.standIn(reference, name, `and '${name}' is a SecureString, which real CloudFormation reads ` +
+                `through an ssm-secure reference`);
+        }
+        return this.parameterValue(reference, parameter, name, version);
+    }
+    /**
+     * Read the version the reference selects, or the current one.
+     */
+    parameterValue(reference, parameter, name, version) {
+        if (version === undefined) {
+            return { value: parameter.currentVersion.value.value };
+        }
+        try {
+            return { value: parameter.versionNumbered(Number(version)).value.value };
+        }
+        catch (error) {
+            /* v8 ignore next 3 -- defensive: only a missing version reaches here */
+            if (!(error instanceof SimSsmParameterVersionNotFound)) {
+                throw error;
+            }
+            return this.standIn(reference, name, `and '${name}' has no version ${version}`);
+        }
+    }
+    /**
+     * The value a reference Parameter Store could not answer resolves to.
+     *
+     * The shape follows CDK, which fills an unresolved context lookup with
+     * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+     */
+    standIn(reference, name, reason) {
+        return {
+            value: `dummy-value-for-${name}`,
+            reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
+                `with a stand-in value`,
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-dynamic-reference-resolver.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAI9E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAQpC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,GAAG,CAAS;IAE7B,YAAY,UAAuD;QACjE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiC;QACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,qDAAqD,IAAI,GAAG,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,uDAAuD;gBACjE,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,SAAiC,EACjC,SAA0B,EAC1B,IAAY,EACZ,OAA2B;QAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,oBAAoB,OAAO,EAAE,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,OAAO,CACb,SAAiC,EACjC,IAAY,EACZ,MAAc;QAEd,OAAO;YACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;YAChC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;gBACjE,uBAAuB;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.d.ts

@@ -0,0 +1,36 @@
+import type { SimCfnParameterStoreReader, SimCfnParameterStoreValue } from "../../../cloudformation/parameters/store/sim-cfn-parameter-store.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmParameterValueReaderProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers an `AWS::SSM::Parameter::Value<...>` template Parameter from the
+ * simulated Parameter Store.
+ *
+ * The Parameter is given a parameter name and resolves to the current value
+ * held under it, as real CloudFormation resolves one while it reads the
+ * template's `Parameters` section. Nothing in the Stack has been created at
+ * that point, so a name another Resource of the same Stack goes on to create
+ * is a name this cannot answer.
+ *
+ * A name with nothing behind it becomes a stand-in value carrying a reason,
+ * which the Stack records. A template reading configuration a test never
+ * created still deploys everything else in it.
+ */
+export declare class SimCfnSsmParameterValueReader implements SimCfnParameterStoreReader {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmParameterValueReaderProperties);
+    /**
+     * Read the current value of one parameter.
+     */
+    read(name: string): SimCfnParameterStoreValue;
+    /**
+     * The value a name Parameter Store could not answer resolves to.
+     *
+     * The shape follows the one a dynamic reference stands in with, so a test
+     * reading either back sees where the value came from.
+     */
+    private standIn;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-parameter-value-reader.d.ts.map

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-parameter-value-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,0EAA0E,CAAC;AAClF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,CAmB5C;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAQhB"}

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.js

@@ -0,0 +1,48 @@
+/**
+ * Answers an `AWS::SSM::Parameter::Value<...>` template Parameter from the
+ * simulated Parameter Store.
+ *
+ * The Parameter is given a parameter name and resolves to the current value
+ * held under it, as real CloudFormation resolves one while it reads the
+ * template's `Parameters` section. Nothing in the Stack has been created at
+ * that point, so a name another Resource of the same Stack goes on to create
+ * is a name this cannot answer.
+ *
+ * A name with nothing behind it becomes a stand-in value carrying a reason,
+ * which the Stack records. A template reading configuration a test never
+ * created still deploys everything else in it.
+ */
+export class SimCfnSsmParameterValueReader {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Read the current value of one parameter.
+     */
+    read(name) {
+        const parameter = this.ssm.findParameter(name);
+        if (parameter === undefined) {
+            return this.standIn(name, `which simulated Parameter Store holds no parameter of`);
+        }
+        if (parameter.type.value === "SecureString") {
+            return this.standIn(name, `which is a SecureString, a type real CloudFormation refuses to read ` +
+                `into a template Parameter`);
+        }
+        return { value: parameter.currentVersion.value.value };
+    }
+    /**
+     * The value a name Parameter Store could not answer resolves to.
+     *
+     * The shape follows the one a dynamic reference stands in with, so a test
+     * reading either back sees where the value came from.
+     */
+    standIn(name, reason) {
+        return {
+            value: `dummy-value-for-${name}`,
+            reason: `names the Parameter Store parameter '${name}', ${reason}, so the ` +
+                `Parameter resolves to a stand-in value`,
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-parameter-value-reader.js.map

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-parameter-value-reader.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,6BAA6B;IACvB,GAAG,CAAS;IAE7B,YAAY,UAAmD;QAC7D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,OAAO,CACjB,IAAI,EACJ,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,OAAO,CACjB,IAAI,EACJ,sEAAsE;gBACpE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACK,OAAO,CAAC,IAAY,EAAE,MAAc;QAC1C,OAAO;YACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;YAChC,MAAM,EACJ,wCAAwC,IAAI,MAAM,MAAM,WAAW;gBACnE,wCAAwC;SAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/sim-ssm.d.ts

@@ -5,6 +5,8 @@ import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-sco
 import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type * as simSsmCommands from "./command/sim-ssm-command.types.js";
 import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
+import { SimCfnSsmDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js";
+import { SimCfnSsmParameterValueReader } from "./cfn/parameter/sim-cfn-ssm-parameter-value-reader.js";
 import type { SimSsmParameter } from "./parameter/sim-ssm-parameter.js";
 import type { SimSsmKmsCrypto } from "./parameter/sim-ssm-kms-crypto.js";
 export interface SimSsmRequestOptions {
@@ -81,6 +83,14 @@ export declare class SimSsm {
      * Get the CloudFormation Resource factory for AWS::SSM::* Resources.
      */
     cfnResourceFactory(): SimSsmCfnResourceFactory;
+    /**
+     * Get the resolver for `{{resolve:ssm:...}}` dynamic references.
+     */
+    cfnDynamicReferenceResolver(): SimCfnSsmDynamicReferenceResolver;
+    /**
+     * Get the reader for `AWS::SSM::Parameter::Value<...>` template Parameters.
+     */
+    cfnParameterValueReader(): SimCfnSsmParameterValueReader;
     /**
      * Get this service's SDK Command router for SDK client interception.
      */

package/dist/service/ssm/sim-ssm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAQ1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EA4C5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAQ1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EA4C5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,2BAA2B,IAAI,iCAAiC,CAE/D;IAED;;OAEG;IACH,uBAAuB,IAAI,6BAA6B,CAEvD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/ssm/sim-ssm.js

@@ -9,6 +9,8 @@ import { SimSsmGetParameterCommands } from "./command/parameter/sim-ssm-get-para
 import { SimSsmGetParametersByPath } from "./command/parameter/sim-ssm-get-parameters-by-path.js";
 import { SimSsmPutParameter } from "./command/parameter/sim-ssm-put-parameter.js";
 import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
+import { SimCfnSsmDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js";
+import { SimCfnSsmParameterValueReader } from "./cfn/parameter/sim-cfn-ssm-parameter-value-reader.js";
 import { SimSsmParameterEncryption } from "./parameter/sim-ssm-parameter-encryption.js";
 import { SimSsmParameterStore } from "./parameter/sim-ssm-parameter-store.js";
 import { SimSsmParameterWriter } from "./parameter/sim-ssm-parameter-writer.js";
@@ -134,6 +136,18 @@ export class SimSsm {
     cfnResourceFactory() {
         return this.cfnFactory;
     }
+    /**
+     * Get the resolver for `{{resolve:ssm:...}}` dynamic references.
+     */
+    cfnDynamicReferenceResolver() {
+        return new SimCfnSsmDynamicReferenceResolver({ ssm: this });
+    }
+    /**
+     * Get the reader for `AWS::SSM::Parameter::Value<...>` template Parameters.
+     */
+    cfnParameterValueReader() {
+        return new SimCfnSsmParameterValueReader({ ssm: this });
+    }
     /**
      * Get this service's SDK Command router for SDK client interception.
      */

package/dist/service/ssm/sim-ssm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAmB7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,GACjE,UAAU,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAEtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAmB7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,GACjE,UAAU,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,2BAA2B;QACzB,OAAO,IAAI,iCAAiC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/sts/command/assume-role/assume-role.handler.d.ts

@@ -3,7 +3,7 @@ import type { SimIamAccountResolver } from "../../../iam/registry/sim-iam-accoun
 import type { SimAssumeRoleCommand, SimAssumeRoleCommandOutput } from "./assume-role.command.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
-import type { SimAwsPrincipal } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 interface AssumeRoleCommandHandlerProperties {
     readonly sourceAccountId: SimAwsAccountId;
     readonly iamResolver: SimIamAccountResolver;
@@ -33,7 +33,7 @@ export declare class AssumeRoleCommandHandler implements CommandHandler<SimAssum
      * coordinates authorization and temporary session creation.
      */
     handle(command: SimAssumeRoleCommand, options?: {
-        caller?: SimAwsPrincipal;
+        caller?: SimAwsCaller;
     }): Promise<SimAssumeRoleCommandOutput>;
 }
 export {};

package/dist/service/sts/command/assume-role/assume-role.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assume-role.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/sts/command/assume-role/assume-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAMvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAG7E,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAqC;IAC9E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiC;IAChE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAElD,YAAY,UAAU,EAAE,kCAAkC,EAiBzD;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,eAAe,CAAC;KAC1B,GACA,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;CACF"}
+{"version":3,"file":"assume-role.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/sts/command/assume-role/assume-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAMvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAqC;IAC9E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiC;IAChE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAElD,YAAY,UAAU,EAAE,kCAAkC,EAiBzD;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,YAAY,CAAC;KACvB,GACA,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;CACF"}

package/dist/service/sts/command/get-caller-identity/get-caller-identity.command.d.ts

@@ -0,0 +1,20 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim STS GetCallerIdentity command.
+ *
+ * The operation takes no input. Everything it answers with comes from who the
+ * request was made by.
+ */
+export interface SimGetCallerIdentityCommand {
+    readonly input?: Record<string, never> | undefined;
+}
+/**
+ * Minimal structural sim STS GetCallerIdentity output.
+ */
+export interface SimGetCallerIdentityCommandOutput {
+    readonly UserId?: string | undefined;
+    readonly Account?: string | undefined;
+    readonly Arn?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=get-caller-identity.command.d.ts.map

package/dist/service/sts/command/get-caller-identity/get-caller-identity.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-caller-identity.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/get-caller-identity.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/sts/command/get-caller-identity/get-caller-identity.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-caller-identity.command.js.map

package/dist/service/sts/command/get-caller-identity/get-caller-identity.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-caller-identity.command.js","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/get-caller-identity.command.ts"],"names":[],"mappings":""}

package/dist/service/sts/command/get-caller-identity/get-caller-identity.handler.d.ts

@@ -0,0 +1,37 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamAccountResolver } from "../../../iam/registry/sim-iam-account-resolver.js";
+import type { SimGetCallerIdentityCommand, SimGetCallerIdentityCommandOutput } from "./get-caller-identity.command.js";
+interface GetCallerIdentityCommandHandlerProperties {
+    readonly sourceAccountId: SimAwsAccountId;
+    readonly iamResolver: SimIamAccountResolver;
+}
+/**
+ * Simulated STS GetCallerIdentity handler.
+ *
+ * The operation reports who the simulator decided the caller is. Real STS
+ * needs no permission for it, which is what makes it the call people reach for
+ * to check that credentials and an endpoint are wired up correctly, so this
+ * authorizes nothing either.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sts/command/GetCallerIdentityCommand/
+ */
+export declare class GetCallerIdentityCommandHandler implements CommandHandler<SimGetCallerIdentityCommand, SimGetCallerIdentityCommandOutput> {
+    private readonly callerResolver;
+    private readonly sourceAccountId;
+    private readonly iamResolver;
+    constructor(properties: GetCallerIdentityCommandHandlerProperties);
+    /**
+     * Report the identity behind this request.
+     *
+     * A caller with no identity has none to report. Real STS answers an
+     * unsigned request by refusing the signature, and the simulator reaches the
+     * same place by way of the anonymous principal a served request resolves to.
+     */
+    handle(_command: SimGetCallerIdentityCommand, options?: {
+        caller?: SimAwsCaller;
+    }): Promise<SimGetCallerIdentityCommandOutput>;
+}
+export {};
+//# sourceMappingURL=get-caller-identity.handler.d.ts.map

package/dist/service/sts/command/get-caller-identity/get-caller-identity.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-caller-identity.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/get-caller-identity.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EACV,2BAA2B,EAC3B,iCAAiC,EAClC,MAAM,kCAAkC,CAAC;AAG1C,UAAU,yCAAyC;IACjD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,qBAAa,+BAAgC,YAAW,cAAc,CACpE,2BAA2B,EAC3B,iCAAiC,CAClC;IACC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAC7D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IAEpD,YAAY,UAAU,EAAE,yCAAyC,EAGhE;IAED;;;;;;OAMG;IAEG,MAAM,CACV,QAAQ,EAAE,2BAA2B,EACrC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAA;KAAE,GAClC,OAAO,CAAC,iCAAiC,CAAC,CAuB5C;CACF"}

package/dist/service/sts/command/get-caller-identity/get-caller-identity.handler.js

@@ -0,0 +1,50 @@
+import { SimAwsCallerResolver } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import { makeSimAwsAccountRootPrincipal } from "../../../aws/caller/sim-aws-account-root-principal.js";
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simStsCallerUserId } from "./sim-sts-caller-user-id.js";
+/**
+ * Simulated STS GetCallerIdentity handler.
+ *
+ * The operation reports who the simulator decided the caller is. Real STS
+ * needs no permission for it, which is what makes it the call people reach for
+ * to check that credentials and an endpoint are wired up correctly, so this
+ * authorizes nothing either.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sts/command/GetCallerIdentityCommand/
+ */
+export class GetCallerIdentityCommandHandler {
+    callerResolver = new SimAwsCallerResolver();
+    sourceAccountId;
+    iamResolver;
+    constructor(properties) {
+        this.sourceAccountId = properties.sourceAccountId;
+        this.iamResolver = properties.iamResolver;
+    }
+    /**
+     * Report the identity behind this request.
+     *
+     * A caller with no identity has none to report. Real STS answers an
+     * unsigned request by refusing the signature, and the simulator reaches the
+     * same place by way of the anonymous principal a served request resolves to.
+     */
+    // oxlint-disable-next-line require-await -- the handler contract is asynchronous
+    async handle(_command, options) {
+        const caller = this.callerResolver.resolve(options?.caller, makeSimAwsAccountRootPrincipal(this.sourceAccountId));
+        if (caller.principal.kind !== "arn") {
+            throw new SimIamAccessDenied({
+                principal: caller.principal,
+                action: "sts:GetCallerIdentity",
+                resource: "*",
+            });
+        }
+        const accountId = (caller.accountId ??
+            this.sourceAccountId);
+        return {
+            Arn: caller.arn,
+            Account: accountId,
+            ...simStsCallerUserId(caller.arn, accountId, this.iamResolver),
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=get-caller-identity.handler.js.map

package/dist/service/sts/command/get-caller-identity/get-caller-identity.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-caller-identity.handler.js","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/get-caller-identity.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAGtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,uDAAuD,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAOjE;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IAIzB,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC5C,eAAe,CAAkB;IACjC,WAAW,CAAwB;IAEpD,YAAY,UAAqD;QAC/D,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,iFAAiF;IACjF,KAAK,CAAC,MAAM,CACV,QAAqC,EACrC,OAAmC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CACxC,OAAO,EAAE,MAAM,EACf,8BAA8B,CAAC,IAAI,CAAC,eAAe,CAAC,CACrD,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS;YACjC,IAAI,CAAC,eAAe,CAAoB,CAAC;QAE3C,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,SAAS;YAClB,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC9D,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sts/command/get-caller-identity/sim-sts-caller-user-id.d.ts

@@ -0,0 +1,15 @@
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamAccountResolver } from "../../../iam/registry/sim-iam-account-resolver.js";
+/**
+ * The unique id STS reports for a caller, which differs by what the caller is.
+ *
+ * Real STS answers the Account id for the Account root, the user's own id for
+ * an IAM user, and the Role's id joined to the session name for an
+ * assumed-role session. Each one is looked up rather than invented, so a
+ * caller with no simulated record behind it gets no id at all instead of a
+ * plausible-looking one.
+ */
+export declare function simStsCallerUserId(arn: string | undefined, accountId: SimAwsAccountId, iamResolver: SimIamAccountResolver): {
+    UserId?: string;
+};
+//# sourceMappingURL=sim-sts-caller-user-id.d.ts.map

package/dist/service/sts/command/get-caller-identity/sim-sts-caller-user-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sts-caller-user-id.d.ts","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/sim-sts-caller-user-id.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAI/F;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,qBAAqB,GACjC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA+CrB"}

package/dist/service/sts/command/get-caller-identity/sim-sts-caller-user-id.js

@@ -0,0 +1,47 @@
+/**
+ * The unique id STS reports for a caller, which differs by what the caller is.
+ *
+ * Real STS answers the Account id for the Account root, the user's own id for
+ * an IAM user, and the Role's id joined to the session name for an
+ * assumed-role session. Each one is looked up rather than invented, so a
+ * caller with no simulated record behind it gets no id at all instead of a
+ * plausible-looking one.
+ */
+export function simStsCallerUserId(arn, accountId, iamResolver) {
+    if (arn === undefined) {
+        return {};
+    }
+    const resource = arn.split(":").slice(5).join(":");
+    if (resource === "root") {
+        return { UserId: accountId };
+    }
+    const iam = iamResolver.findIamForAccount(accountId);
+    if (iam === undefined) {
+        return {};
+    }
+    const [kind, ...segments] = resource.split("/");
+    if (kind === "user") {
+        // A User ARN carries the User's path before its name, so the name is the
+        // last segment rather than the first. `user/engineering/Widgets` is the
+        // User `Widgets` at path `/engineering/`, and simulated IAM keys Users by
+        // name alone.
+        const username = segments.at(-1);
+        const userId = username === undefined
+            ? undefined
+            : iam.users.get(username)?.userId;
+        return userId === undefined ? {} : { UserId: userId };
+    }
+    if (kind === "assumed-role") {
+        // A session ARN names the Role and then the session, and carries no path,
+        // which is why these two are read by position.
+        const [roleName, sessionName] = segments;
+        const roleId = roleName === undefined
+            ? undefined
+            : iam.roles.get(roleName)?.roleId;
+        return roleId === undefined
+            ? {}
+            : { UserId: `${roleId}:${sessionName ?? ""}` };
+    }
+    return {};
+}
+//# sourceMappingURL=sim-sts-caller-user-id.js.map

package/dist/service/sts/command/get-caller-identity/sim-sts-caller-user-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sts-caller-user-id.js","sourceRoot":"","sources":["../../../../../src/service/sts/command/get-caller-identity/sim-sts-caller-user-id.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAuB,EACvB,SAA0B,EAC1B,WAAkC;IAElC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,cAAc;QACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAA0B,CAAC,EAAE,MAAM,CAAC;QAExD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC;QACzC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAA0B,CAAC,EAAE,MAAM,CAAC;QAExD,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,WAAW,IAAI,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/service/sts/sdk/sim-sts-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sts-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/sts/sdk/sim-sts-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EAWzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-sts-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/sts/sdk/sim-sts-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EAmBzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/sts/sdk/sim-sts-sdk-command-router.js

@@ -6,6 +6,10 @@ export class SimStsSdkCommandRouter {
     routes;
     constructor(simSts) {
         this.routes = new Map([
+            [
+                "GetCallerIdentityCommand",
+                async (command, context) => await simSts.getCallerIdentity(command, simSdkCallerOptions(context)),
+            ],
             [
                 "AssumeRoleCommand",
                 async (command, context) => await simSts.assumeRole(command, simSdkCallerOptions(context)),

package/dist/service/sts/sdk/sim-sts-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sts-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/sts/sdk/sim-sts-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAI/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,mBAAmB;gBACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,UAAU,CACrB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-sts-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/sts/sdk/sim-sts-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAK/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,0BAA0B;gBAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,iBAAiB,CAC5B,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,mBAAmB;gBACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,UAAU,CACrB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/sts/serve/sim-sts-api.d.ts

@@ -0,0 +1,12 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import { SimQueryApiEndpoint } from "../../../serve/http/api/query/sim-query-endpoint.js";
+/**
+ * Serve the STS Query API to a client given an endpoint URL.
+ *
+ * The two operations simulated STS implements are both served.
+ * `GetCallerIdentity` is the one a person reaches for to check that an
+ * endpoint and a set of credentials are wired up as expected, and `AssumeRole`
+ * hands back credentials that sign the requests the caller makes next.
+ */
+export declare function simStsApiEndpoint(simAws: SimAws): SimQueryApiEndpoint;
+//# sourceMappingURL=sim-sts-api.d.ts.map

package/dist/service/sts/serve/sim-sts-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sts-api.d.ts","sourceRoot":"","sources":["../../../../src/service/sts/serve/sim-sts-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAY1F;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAOrE"}

package/dist/service/sts/serve/sim-sts-api.js

@@ -0,0 +1,52 @@
+import { SimQueryApiEndpoint } from "../../../serve/http/api/query/sim-query-endpoint.js";
+import { queryMembers, queryStructure, } from "../../../serve/http/api/query/sim-query-result.js";
+/**
+ * The XML namespace real STS stamps on every response it sends.
+ */
+const stsNamespace = "https://sts.amazonaws.com/doc/2011-06-15/";
+/**
+ * Serve the STS Query API to a client given an endpoint URL.
+ *
+ * The two operations simulated STS implements are both served.
+ * `GetCallerIdentity` is the one a person reaches for to check that an
+ * endpoint and a set of credentials are wired up as expected, and `AssumeRole`
+ * hands back credentials that sign the requests the caller makes next.
+ */
+export function simStsApiEndpoint(simAws) {
+    return new SimQueryApiEndpoint({
+        simAws,
+        serviceId: "STS",
+        namespace: stsNamespace,
+        operations: simStsQueryOperations(),
+    });
+}
+function simStsQueryOperations() {
+    return new Map([
+        [
+            "GetCallerIdentity",
+            {
+                input: () => ({}),
+                result: (output) => queryMembers(output, ["UserId", "Account", "Arn"]),
+            },
+        ],
+        [
+            "AssumeRole",
+            {
+                input: (fields) => ({
+                    RoleArn: fields.text("RoleArn"),
+                    RoleSessionName: fields.text("RoleSessionName"),
+                    DurationSeconds: fields.number("DurationSeconds"),
+                    ExternalId: fields.text("ExternalId"),
+                }),
+                result: (output) => queryStructure(output, "Credentials", (credentials) => queryMembers(credentials, [
+                    "AccessKeyId",
+                    "SecretAccessKey",
+                    "SessionToken",
+                    "Expiration",
+                ])) +
+                    queryStructure(output, "AssumedRoleUser", (user) => queryMembers(user, ["Arn", "AssumedRoleId"])),
+            },
+        ],
+    ]);
+}
+//# sourceMappingURL=sim-sts-api.js.map

package/dist/service/sts/serve/sim-sts-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sts-api.js","sourceRoot":"","sources":["../../../../src/service/sts/serve/sim-sts-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE1F,OAAO,EACL,YAAY,EACZ,cAAc,GACf,MAAM,mDAAmD,CAAC;AAE3D;;GAEG;AACH,MAAM,YAAY,GAAG,2CAA2C,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,IAAI,mBAAmB,CAAC;QAC7B,MAAM;QACN,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,qBAAqB,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,GAAG,CAAC;QACb;YACE,mBAAmB;YACnB;gBACE,KAAK,EAAE,GAA4B,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,EAAE,CAAC,MAAM,EAAU,EAAE,CACzB,YAAY,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;aACrD;SACF;QACD;YACE,YAAY;YACZ;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;oBAC/C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;oBACjD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;iBACtC,CAAC;gBACF,MAAM,EAAE,CAAC,MAAM,EAAU,EAAE,CACzB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,WAAW,EAAE,EAAE,CACpD,YAAY,CAAC,WAAW,EAAE;oBACxB,aAAa;oBACb,iBAAiB;oBACjB,cAAc;oBACd,YAAY;iBACb,CAAC,CACH;oBACD,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CACjD,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAC7C;aACJ;SACF;KACF,CAAC,CAAC;AACL,CAAC"}