@kensio/yulin 1.17.0 → 1.17.1

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js

@@ -0,0 +1,26 @@
+/** The characters CloudFormation documents a referenced parameter name as. */
+const ssmReferenceName = /^[a-zA-Z0-9_.\-/]+$/;
+/** The version selector, which CloudFormation documents as an integer. */
+const ssmReferenceVersion = /^\d+$/;
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ * `ssm` and `ssm-secure` references take the same body, and read it the same
+ * way.
+ */
+export function parseSimCfnSsmReferenceBody(body) {
+    const colon = body.lastIndexOf(":");
+    if (colon === -1) {
+        return ssmReferenceName.test(body)
+            ? { name: body, version: undefined }
+            : undefined;
+    }
+    const name = body.slice(0, colon);
+    const version = body.slice(colon + 1);
+    if (!ssmReferenceName.test(name) || !ssmReferenceVersion.test(version)) {
+        return undefined;
+    }
+    return { name, version };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-body.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-body.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAQpC;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts

@@ -0,0 +1,11 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export declare function simCfnSsmReferenceStandIn(reference: SimCfnDynamicReference, name: string, reason: string): SimCfnDynamicReferenceResolution;
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EACjC,MAAM,4EAA4E,CAAC;AAEpF;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,gCAAgC,CAOlC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js

@@ -0,0 +1,16 @@
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export function simCfnSsmReferenceStandIn(reference, name, reason) {
+    return {
+        value: `dummy-value-for-${name}`,
+        reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
+            `with a stand-in value`,
+    };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiC,EACjC,IAAY,EACZ,MAAc;IAEd,OAAO;QACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;QAChC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;YACjE,uBAAuB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts

@@ -0,0 +1,40 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution, SimCfnDynamicReferenceResolver, SimCfnDynamicReferenceSite } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmSecureDynamicReferenceResolverProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers `{{resolve:ssm-secure:...}}` references from the simulated Parameter
+ * Store.
+ *
+ * The parameter is read the way `GetParameter` with `WithDecryption` reads it,
+ * as the caller deploying the Stack, so the value comes back decrypted through
+ * the simulated KMS key it was written under. A caller the key does not admit
+ * is denied here, which is the failure a real deployment hits. Decrypting
+ * cannot be done synchronously, so the answer comes back as a promise for the
+ * CloudFormation engine to wait on.
+ *
+ * A reference the template had no business writing fails the Resource, which
+ * `sim-cfn-ssm-secure-refusals.ts` holds the rules for. Everything else
+ * Parameter Store cannot answer becomes a stand-in value carrying a reason. A
+ * template naming parameters a test never created still deploys, and the
+ * Resource records what it was given instead.
+ */
+export declare class SimCfnSsmSecureDynamicReferenceResolver implements SimCfnDynamicReferenceResolver {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmSecureDynamicReferenceResolverProperties);
+    /**
+     * Resolve one reference to the decrypted parameter value it names.
+     *
+     * Where the reference sits is checked before anything is read, so a template
+     * writing one somewhere CloudFormation refuses it fails without a parameter
+     * being touched.
+     */
+    resolve(reference: SimCfnDynamicReference, site: SimCfnDynamicReferenceSite): SimCfnDynamicReferenceResolution | Promise<SimCfnDynamicReferenceResolution>;
+    /**
+     * Read the version the reference selects, or the current one, decrypted.
+     */
+    private decrypted;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,0BAA0B,EAC3B,MAAM,4EAA4E,CAAC;AAEpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,UAAU,iDAAiD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uCAAwC,YAAW,8BAA8B;IAC5F,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,iDAAiD,EAExE;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,0BAA0B,GAE9B,gCAAgC,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAe5C;IAED;;OAEG;YACW,SAAS;CA+BxB"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js

@@ -0,0 +1,67 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimSsmError } from "../../error/sim-ssm.error.js";
+import { parseSimCfnSsmReferenceBody } from "./sim-cfn-ssm-reference-body.js";
+import { simCfnSsmReferenceStandIn } from "./sim-cfn-ssm-reference-stand-in.js";
+import { requireSecureStringParameter, requireSsmSecureReferenceProperty, } from "./sim-cfn-ssm-secure-refusals.js";
+/**
+ * Answers `{{resolve:ssm-secure:...}}` references from the simulated Parameter
+ * Store.
+ *
+ * The parameter is read the way `GetParameter` with `WithDecryption` reads it,
+ * as the caller deploying the Stack, so the value comes back decrypted through
+ * the simulated KMS key it was written under. A caller the key does not admit
+ * is denied here, which is the failure a real deployment hits. Decrypting
+ * cannot be done synchronously, so the answer comes back as a promise for the
+ * CloudFormation engine to wait on.
+ *
+ * A reference the template had no business writing fails the Resource, which
+ * `sim-cfn-ssm-secure-refusals.ts` holds the rules for. Everything else
+ * Parameter Store cannot answer becomes a stand-in value carrying a reason. A
+ * template naming parameters a test never created still deploys, and the
+ * Resource records what it was given instead.
+ */
+export class SimCfnSsmSecureDynamicReferenceResolver {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Resolve one reference to the decrypted parameter value it names.
+     *
+     * Where the reference sits is checked before anything is read, so a template
+     * writing one somewhere CloudFormation refuses it fails without a parameter
+     * being touched.
+     */
+    resolve(reference, site) {
+        requireSsmSecureReferenceProperty(reference, site);
+        const parsed = parseSimCfnSsmReferenceBody(reference.body);
+        if (parsed === undefined) {
+            return simCfnSsmReferenceStandIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
+                `version, that an ssm-secure dynamic reference takes`);
+        }
+        return this.decrypted(reference, parsed.name, parsed.version);
+    }
+    /**
+     * Read the version the reference selects, or the current one, decrypted.
+     */
+    async decrypted(reference, name, version) {
+        const selector = version === undefined ? name : `${name}:${version}`;
+        try {
+            const read = await this.ssm.getParameter({
+                input: { Name: selector, WithDecryption: true },
+            });
+            const parameter = read.Parameter;
+            assertDefined(parameter, `the parameter read for '${name}'`);
+            requireSecureStringParameter(name, parameter);
+            assertDefined(parameter.Value, `the value read for '${name}'`);
+            return { value: parameter.Value };
+        }
+        catch (error) {
+            if (!(error instanceof SimSsmError)) {
+                throw error;
+            }
+            return simCfnSsmReferenceStandIn(reference, name, `and simulated Parameter Store could not read it (${error.message})`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-dynamic-reference-resolver.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAOvE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAM1C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,uCAAuC;IACjC,GAAG,CAAS;IAE7B,YAAY,UAA6D;QACvE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAiC,EACjC,IAAgC;QAIhC,iCAAiC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,yBAAyB,CAC9B,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CACrB,SAAiC,EACjC,IAAY,EACZ,OAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE;aAChD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAEjC,aAAa,CAAC,SAAS,EAAE,2BAA2B,IAAI,GAAG,CAAC,CAAC;YAC7D,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9C,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,uBAAuB,IAAI,GAAG,CAAC,CAAC;YAE/D,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,oDAAoD,KAAK,CAAC,OAAO,GAAG,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Whether an `ssm-secure` reference is accepted in one Resource property.
+ *
+ * A Resource with no type in its template accepts none, since there is nothing
+ * to match it against.
+ */
+export declare function acceptsSsmSecureReference(resourceType: string | undefined, propertyPath: string): boolean;
+//# sourceMappingURL=sim-cfn-ssm-secure-reference-properties.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-reference-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.ts"],"names":[],"mappings":"AAoCA;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,GACnB,OAAO,CAST"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.js

@@ -0,0 +1,61 @@
+/**
+ * The Resource properties real CloudFormation reads an `ssm-secure` dynamic
+ * reference in.
+ *
+ * Every other property refuses one, which is a rule worth keeping because a
+ * template breaking it is wrong wherever it deploys. The list is short and
+ * fixed, and AWS documents it in full:
+ * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references-ssm-secure-strings.html
+ *
+ * `AWS::IAM::User` `LoginProfile.Password` is the only pair a simulated
+ * Resource holds today. The other ten name Resource types nothing here
+ * simulates, and they are listed anyway so that the rule is the documented one
+ * rather than the part of it this simulation happens to reach.
+ */
+const acceptingProperties = new Map([
+    ["AWS::DirectoryService::MicrosoftAD", new Set(["Password"])],
+    ["AWS::DirectoryService::SimpleAD", new Set(["Password"])],
+    ["AWS::ElastiCache::ReplicationGroup", new Set(["AuthToken"])],
+    ["AWS::IAM::User", new Set(["LoginProfile.Password"])],
+    [
+        "AWS::KinesisFirehose::DeliveryStream",
+        new Set(["RedshiftDestinationConfiguration.Password"]),
+    ],
+    ["AWS::OpsWorks::App", new Set(["Source.Password"])],
+    [
+        "AWS::OpsWorks::Stack",
+        new Set(["CustomCookbooksSource.Password", "RdsDbInstances.DbPassword"]),
+    ],
+    ["AWS::RDS::DBCluster", new Set(["MasterUserPassword"])],
+    ["AWS::RDS::DBInstance", new Set(["MasterUserPassword"])],
+    ["AWS::Redshift::Cluster", new Set(["MasterUserPassword"])],
+]);
+/** A list position in a resolved property path, such as the `0` of `Tags.0`. */
+const listPosition = /^\d+$/;
+/**
+ * Whether an `ssm-secure` reference is accepted in one Resource property.
+ *
+ * A Resource with no type in its template accepts none, since there is nothing
+ * to match it against.
+ */
+export function acceptsSsmSecureReference(resourceType, propertyPath) {
+    if (resourceType === undefined) {
+        return false;
+    }
+    return (acceptingProperties.get(resourceType)?.has(namedProperty(propertyPath)) ===
+        true);
+}
+/**
+ * The property a resolved path names, with the list positions taken out.
+ *
+ * `RdsDbInstances` holds a list, so the path to a password inside it reads
+ * `RdsDbInstances.0.DbPassword` while the documented property is
+ * `RdsDbInstances.DbPassword`.
+ */
+function namedProperty(propertyPath) {
+    return propertyPath
+        .split(".")
+        .filter((segment) => !listPosition.test(segment))
+        .join(".");
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-reference-properties.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-reference-properties.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC;IAC5E,CAAC,oCAAoC,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC,iCAAiC,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC,oCAAoC,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACtD;QACE,sCAAsC;QACtC,IAAI,GAAG,CAAC,CAAC,2CAA2C,CAAC,CAAC;KACvD;IACD,CAAC,oBAAoB,EAAE,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpD;QACE,sBAAsB;QACtB,IAAI,GAAG,CAAC,CAAC,gCAAgC,EAAE,2BAA2B,CAAC,CAAC;KACzE;IACD,CAAC,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACxD,CAAC,sBAAsB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACzD,CAAC,wBAAwB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;CAC5D,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAAgC,EAChC,YAAoB;IAEpB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,YAAoB;IACzC,OAAO,YAAY;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAChD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.d.ts

@@ -0,0 +1,19 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceSite } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsmParameterOutput } from "../../command/parameter/parameter.command.js";
+/**
+ * Fail a reference written into a property CloudFormation does not read one
+ * in.
+ *
+ * This fails the Resource rather than resolving to a stand-in value. A
+ * template breaking the rule is wrong wherever it deploys, so saying so is
+ * more use than deploying something that was never the secret.
+ */
+export declare function requireSsmSecureReferenceProperty(reference: SimCfnDynamicReference, site: SimCfnDynamicReferenceSite): void;
+/**
+ * Fail a reference naming a parameter stored in the clear.
+ *
+ * Real CloudFormation refuses one the same way. The plain `ssm` reference
+ * beside it is what reads a `String` or a `StringList`.
+ */
+export declare function requireSecureStringParameter(name: string, parameter: SimSsmParameterOutput): void;
+//# sourceMappingURL=sim-cfn-ssm-secure-refusals.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-refusals.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAS1F;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,0BAA0B,GAC/B,IAAI,CAUN;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,GAC/B,IAAI,CAUN"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.js

@@ -0,0 +1,37 @@
+import { SimCloudFormationValidationError } from "../../../cloudformation/error/sim-cloudformation.error.js";
+import { acceptsSsmSecureReference } from "./sim-cfn-ssm-secure-reference-properties.js";
+/** What a Resource carrying no `Type` is called in a refusal. */
+const untypedResource = "A Resource with no Type";
+/** The parameter type an `ssm-secure` reference reads. */
+const secureString = "SecureString";
+/**
+ * Fail a reference written into a property CloudFormation does not read one
+ * in.
+ *
+ * This fails the Resource rather than resolving to a stand-in value. A
+ * template breaking the rule is wrong wherever it deploys, so saying so is
+ * more use than deploying something that was never the secret.
+ */
+export function requireSsmSecureReferenceProperty(reference, site) {
+    if (acceptsSsmSecureReference(site.resourceType, site.propertyPath)) {
+        return;
+    }
+    throw new SimCloudFormationValidationError(`${site.resourceType ?? untypedResource} holds ${reference.text}. ` +
+        `CloudFormation reads an ssm-secure dynamic reference in eleven ` +
+        `Resource properties, and this is not one of them.`);
+}
+/**
+ * Fail a reference naming a parameter stored in the clear.
+ *
+ * Real CloudFormation refuses one the same way. The plain `ssm` reference
+ * beside it is what reads a `String` or a `StringList`.
+ */
+export function requireSecureStringParameter(name, parameter) {
+    if (parameter.Type === secureString) {
+        return;
+    }
+    throw new SimCloudFormationValidationError(`'${name}' is a ${parameter.Type ?? "typeless"} parameter, and an ` +
+        `ssm-secure dynamic reference reads a ${secureString}. Read a plain ` +
+        `parameter with an ssm reference instead.`);
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-refusals.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-refusals.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2DAA2D,CAAC;AAM7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,iEAAiE;AACjE,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD,0DAA0D;AAC1D,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAiC,EACjC,IAAgC;IAEhC,IAAI,yBAAyB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CACxC,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,UAAU,SAAS,CAAC,IAAI,IAAI;QACjE,iEAAiE;QACjE,mDAAmD,CACtD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,SAAgC;IAEhC,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CACxC,IAAI,IAAI,UAAU,SAAS,CAAC,IAAI,IAAI,UAAU,qBAAqB;QACjE,wCAAwC,YAAY,iBAAiB;QACrE,0CAA0C,CAC7C,CAAC;AACJ,CAAC"}

package/dist/service/ssm/sim-ssm.d.ts

@@ -6,6 +6,7 @@ import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-ser
 import type * as simSsmCommands from "./command/sim-ssm-command.types.js";
 import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
 import { SimCfnSsmDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js";
+import { SimCfnSsmSecureDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js";
 import { SimCfnSsmParameterValueReader } from "./cfn/parameter/sim-cfn-ssm-parameter-value-reader.js";
 import type { SimSsmParameter } from "./parameter/sim-ssm-parameter.js";
 import type { SimSsmKmsCrypto } from "./parameter/sim-ssm-kms-crypto.js";
@@ -87,6 +88,10 @@ export declare class SimSsm {
      * Get the resolver for `{{resolve:ssm:...}}` dynamic references.
      */
     cfnDynamicReferenceResolver(): SimCfnSsmDynamicReferenceResolver;
+    /**
+     * Get the resolver for `{{resolve:ssm-secure:...}}` dynamic references.
+     */
+    cfnSecureDynamicReferenceResolver(): SimCfnSsmSecureDynamicReferenceResolver;
     /**
      * Get the reader for `AWS::SSM::Parameter::Value<...>` template Parameters.
      */

package/dist/service/ssm/sim-ssm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAQ1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EA4C5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,2BAA2B,IAAI,iCAAiC,CAE/D;IAED;;OAEG;IACH,uBAAuB,IAAI,6BAA6B,CAEvD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-ssm.d.ts","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAQ1D,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,uCAAuC,EAAE,MAAM,gEAAgE,CAAC;AACzH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EA4C5C;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,cAAc,CAAC,uBAAuB,EAC/C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAGvD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,cAAc,CAAC,6BAA6B,EACrD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAG7D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,cAAc,CAAC,0BAA0B,EAClD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAG1D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,2BAA2B,IAAI,iCAAiC,CAE/D;IAED;;OAEG;IACH,iCAAiC,IAAI,uCAAuC,CAE3E;IAED;;OAEG;IACH,uBAAuB,IAAI,6BAA6B,CAEvD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/ssm/sim-ssm.js

@@ -10,6 +10,7 @@ import { SimSsmGetParametersByPath } from "./command/parameter/sim-ssm-get-param
 import { SimSsmPutParameter } from "./command/parameter/sim-ssm-put-parameter.js";
 import { SimSsmCfnResourceFactory } from "./cfn/sim-cfn-ssm-resource-factory.js";
 import { SimCfnSsmDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js";
+import { SimCfnSsmSecureDynamicReferenceResolver } from "./cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js";
 import { SimCfnSsmParameterValueReader } from "./cfn/parameter/sim-cfn-ssm-parameter-value-reader.js";
 import { SimSsmParameterEncryption } from "./parameter/sim-ssm-parameter-encryption.js";
 import { SimSsmParameterStore } from "./parameter/sim-ssm-parameter-store.js";
@@ -142,6 +143,12 @@ export class SimSsm {
     cfnDynamicReferenceResolver() {
         return new SimCfnSsmDynamicReferenceResolver({ ssm: this });
     }
+    /**
+     * Get the resolver for `{{resolve:ssm-secure:...}}` dynamic references.
+     */
+    cfnSecureDynamicReferenceResolver() {
+        return new SimCfnSsmSecureDynamicReferenceResolver({ ssm: this });
+    }
     /**
      * Get the reader for `AWS::SSM::Parameter::Value<...>` template Parameters.
      */

package/dist/service/ssm/sim-ssm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAEtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAmB7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,GACjE,UAAU,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,2BAA2B;QACzB,OAAO,IAAI,iCAAiC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-ssm.js","sourceRoot":"","sources":["../../../src/service/ssm/sim-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AAC5G,OAAO,EAAE,uCAAuC,EAAE,MAAM,gEAAgE,CAAC;AACzH,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAEtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAmB7E;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,UAAU,CAAuB;IACjC,mBAAmB,CAAqB;IACxC,YAAY,CAA6B;IACzC,WAAW,CAA4B;IACvC,gBAAgB,CAAgC;IAChD,yBAAyB,CAA2B;IACpD,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,GACjE,UAAU,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;YAChD,MAAM,EAAE,IAAI,qBAAqB,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU;gBACV,kBAAkB;gBAClB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,0BAA0B,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,6BAA6B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,wBAAwB,CAAC;YAC5D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAA+C,EAC/C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAqD,EACrD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAkD,EAClD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,2BAA2B;QACzB,OAAO,IAAI,iCAAiC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,iCAAiC;QAC/B,OAAO,IAAI,uCAAuC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "1.17.0",
+  "version": "1.17.1",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": "https://github.com/KensioSoftware/yulin",
   "homepage": "https://yulinsim.dev/",

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.d.ts

@@ -1,25 +0,0 @@
-import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
-import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
-export interface SimCfnIamRoleInlinePolicy {
-    readonly policyName: string;
-    readonly policyDocument: string;
-}
-/**
- * Parses the AWS::IAM::Role policy collection properties: the inline `Policies`
- * list and the attached `ManagedPolicyArns` list.
- *
- * These list-shaped properties carry the bulk of the Role property validation,
- * so grouping them here keeps the main Role props parser small.
- */
-export declare class SimCfnIamRolePoliciesParser {
-    /**
-     * Parse the inline `Policies` property into normalised inline policies.
-     */
-    inlinePolicies(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): readonly SimCfnIamRoleInlinePolicy[];
-    /**
-     * Parse the attached `ManagedPolicyArns` property into policy ARN strings.
-     */
-    managedPolicyArns(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): readonly string[];
-    private inlinePolicy;
-}
-//# sourceMappingURL=sim-cfn-iam-role-policies-parser.d.ts.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-cfn-iam-role-policies-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,SAAS,yBAAyB,EAAE,CActC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,SAAS,MAAM,EAAE,CAsBnB;IAED,OAAO,CAAC,YAAY;CAuCrB"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-cfn-iam-role-policies-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-policies-parser.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACtC;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,UAAqC;QAErC,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,6BAA6B,CAC1E,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAwB,EACxB,UAAqC;QAErC,MAAM,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAE1D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,sCAAsC,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,iDAAiD,CAC9F,CAAC;YACJ,CAAC;YAED,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,QAAwB,EACxB,MAAqD;QAErD,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,yCAAyC,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QAExC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,8CAA8C,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEhD,IACE,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,KAAK,IAAI;YACvB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,0BAA0B,QAAQ,CAAC,SAAS,mDAAmD,CAChG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU;YACV,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF"}