@kensio/yulin 1.17.0 → 1.17.1

package/dist/service/iam/cfn/user/sim-cfn-iam-user-deleter.js

@@ -0,0 +1,29 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Deletes simulated Users created from AWS::IAM::User Resources.
+ *
+ * DeleteUser refuses a User that still has policies on it, the way DeleteRole
+ * refuses a Role, so the User's policies come off first. Real CloudFormation
+ * does the same for the ones it put there itself: a `ManagedPolicyArns` entry
+ * is detached and a `Policies` entry removed as part of deleting the User.
+ *
+ * Sim IAM serves no DeleteUserPolicy or DetachUserPolicy, so both come off the
+ * User record here rather than through a command.
+ */
+export class SimCfnIamUserDeleter {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Delete the User a CloudFormation Resource created.
+     */
+    async delete(resource) {
+        const user = resource.simResource;
+        assertDefined(user, `sim IAM User for CloudFormation Resource ${resource.logicalId}`);
+        user.attachedPolicyArns.clear();
+        user.inlinePolicies.clear();
+        await this.iam.deleteUser({ input: { UserName: user.userName } });
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-user-deleter.js.map

package/dist/service/iam/cfn/user/sim-cfn-iam-user-deleter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-user-deleter.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/user/sim-cfn-iam-user-deleter.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IACd,GAAG,CAAS;IAE7B,YAAY,UAA0C;QACpD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAqC,CAAC;QAC5D,aAAa,CACX,IAAI,EACJ,4CAA4C,QAAQ,CAAC,SAAS,EAAE,CACjE,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAE5B,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.d.ts

@@ -0,0 +1,38 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { type SimCfnIamInlinePolicy } from "../sim-cfn-iam-policies-parser.js";
+export interface SimCfnIamUserLoginProfile {
+    readonly password: string;
+    readonly passwordResetRequired: boolean;
+}
+export interface SimCfnIamUserProperties {
+    readonly userName: string;
+    readonly path: string | undefined;
+    readonly inlinePolicies: readonly SimCfnIamInlinePolicy[];
+    readonly managedPolicyArns: readonly string[];
+    readonly loginProfile: SimCfnIamUserLoginProfile | undefined;
+}
+/**
+ * Parses and validates AWS::IAM::User CloudFormation properties into the shape
+ * the sim IAM User creator needs.
+ *
+ * Keeping the property-shape validation here keeps the creator focused on
+ * orchestrating IAM command calls.
+ */
+export declare class SimCfnIamUserPropertiesParser {
+    private readonly policiesParser;
+    /**
+     * Parse the resolved CloudFormation properties for an AWS::IAM::User.
+     */
+    parse(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCfnIamUserProperties;
+    /**
+     * Group membership is not simulated, and silently dropping it would be
+     * misleading, so naming a Group fails the Resource. CDK leaves `Groups` out
+     * of the template altogether for a User in no group, so an empty list still
+     * deploys.
+     */
+    private rejectGroups;
+    private loginProfile;
+    private optionalString;
+}
+//# sourceMappingURL=sim-cfn-iam-user-properties-parser.d.ts.map

package/dist/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-user-properties-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC9D;AAID;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE5B;IAEH;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,uBAAuB,CAezB;IAED;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,YAAY;IA6CpB,OAAO,CAAC,cAAc;CAiBvB"}

package/dist/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.js

@@ -0,0 +1,80 @@
+import { SimCfnIamPoliciesParser, } from "../sim-cfn-iam-policies-parser.js";
+const resourceType = "AWS::IAM::User";
+/**
+ * Parses and validates AWS::IAM::User CloudFormation properties into the shape
+ * the sim IAM User creator needs.
+ *
+ * Keeping the property-shape validation here keeps the creator focused on
+ * orchestrating IAM command calls.
+ */
+export class SimCfnIamUserPropertiesParser {
+    policiesParser = new SimCfnIamPoliciesParser({
+        resourceType,
+    });
+    /**
+     * Parse the resolved CloudFormation properties for an AWS::IAM::User.
+     */
+    parse(resource, properties) {
+        this.rejectGroups(resource, properties);
+        return {
+            userName: this.optionalString(resource, properties["UserName"], "UserName") ??
+                resource.logicalId,
+            path: this.optionalString(resource, properties["Path"], "Path"),
+            inlinePolicies: this.policiesParser.inlinePolicies(resource, properties),
+            managedPolicyArns: this.policiesParser.managedPolicyArns(resource, properties),
+            loginProfile: this.loginProfile(resource, properties),
+        };
+    }
+    /**
+     * Group membership is not simulated, and silently dropping it would be
+     * misleading, so naming a Group fails the Resource. CDK leaves `Groups` out
+     * of the template altogether for a User in no group, so an empty list still
+     * deploys.
+     */
+    rejectGroups(resource, properties) {
+        const groups = properties["Groups"];
+        if (groups === undefined) {
+            return;
+        }
+        if (!Array.isArray(groups)) {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: Groups must be an array`);
+        }
+        if (groups.length > 0) {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: Groups are not simulated`);
+        }
+    }
+    loginProfile(resource, properties) {
+        const loginProfile = properties["LoginProfile"];
+        if (loginProfile === undefined) {
+            return undefined;
+        }
+        if (typeof loginProfile !== "object" ||
+            loginProfile === null ||
+            Array.isArray(loginProfile)) {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: LoginProfile must be an object`);
+        }
+        const password = loginProfile["Password"];
+        if (typeof password !== "string") {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: LoginProfile Password must be a string`);
+        }
+        const passwordResetRequired = loginProfile["PasswordResetRequired"];
+        if (passwordResetRequired !== undefined &&
+            typeof passwordResetRequired !== "boolean") {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: LoginProfile PasswordResetRequired must be a boolean`);
+        }
+        return {
+            password,
+            passwordResetRequired: passwordResetRequired ?? false,
+        };
+    }
+    optionalString(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "string") {
+            throw new TypeError(`Invalid ${resourceType} ${resource.logicalId}: ${label} must be a string`);
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-user-properties-parser.js.map

package/dist/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-user-properties-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/user/sim-cfn-iam-user-properties-parser.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,GAExB,MAAM,mCAAmC,CAAC;AAe3C,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,cAAc,GAAG,IAAI,uBAAuB,CAAC;QAC5D,YAAY;KACb,CAAC,CAAC;IAEH;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,UAAqC;QAErC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAExC,OAAO;YACL,QAAQ,EACN,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;gBACjE,QAAQ,CAAC,SAAS;YACpB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAC/D,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC;YACxE,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,iBAAiB,CACtD,QAAQ,EACR,UAAU,CACX;YACD,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;SACtD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAClB,QAAwB,EACxB,UAAqC;QAErC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,2BAA2B,CACzE,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,4BAA4B,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY,CAClB,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QAEhD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,OAAO,YAAY,KAAK,QAAQ;YAChC,YAAY,KAAK,IAAI;YACrB,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,kCAAkC,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAE1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,0CAA0C,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,qBAAqB,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;QAEpE,IACE,qBAAqB,KAAK,SAAS;YACnC,OAAO,qBAAqB,KAAK,SAAS,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,wDAAwD,CACtG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ;YACR,qBAAqB,EAAE,qBAAqB,IAAI,KAAK;SACtD,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,QAAwB,EACxB,KAAoD,EACpD,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,WAAW,YAAY,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,mBAAmB,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/service/iam/command/sim-iam-command.types.d.ts

@@ -17,6 +17,9 @@ export type { SimDeleteRoleCommand, SimDeleteRoleCommandOutput, } from "./role/d
 export type { SimDetachRolePolicyCommand, SimDetachRolePolicyCommandOutput, } from "./role/detach-role-policy/detach-role-policy.command.js";
 export type { SimGetRoleCommand, SimGetRoleCommandOutput, } from "./role/get-role/get-role.command.js";
 export type { SimListRolesCommand, SimListRolesCommandOutput, } from "./role/list-roles/list-roles.command.js";
+export type { SimAttachUserPolicyCommand, SimAttachUserPolicyCommandOutput, } from "./user/attach-user-policy/attach-user-policy.command.js";
 export type { SimCreateAccessKeyCommand, SimCreateAccessKeyCommandOutput, } from "./user/create-access-key/create-access-key.command.js";
+export type { SimCreateLoginProfileCommand, SimCreateLoginProfileCommandOutput, } from "./user/create-login-profile/create-login-profile.command.js";
 export type { SimCreateUserCommand, SimCreateUserCommandOutput, } from "./user/create-user/create-user.command.js";
+export type { SimDeleteUserCommand, SimDeleteUserCommandOutput, } from "./user/delete-user/delete-user.command.js";
 //# sourceMappingURL=sim-iam-command.types.d.ts.map

package/dist/service/iam/command/sim-iam-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/command/sim-iam-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,2DAA2D,CAAC;AACnE,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yDAAyD,CAAC;AACjE,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yDAAyD,CAAC;AACjE,YAAY,EACV,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,uDAAuD,CAAC;AAC/D,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC"}
+{"version":3,"file":"sim-iam-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/command/sim-iam-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,2DAA2D,CAAC;AACnE,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yDAAyD,CAAC;AACjE,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yDAAyD,CAAC;AACjE,YAAY,EACV,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yDAAyD,CAAC;AACjE,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,uDAAuD,CAAC;AAC/D,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,6DAA6D,CAAC;AACrE,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC"}

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.command.d.ts

@@ -0,0 +1,9 @@
+export interface SimAttachUserPolicyCommandInput {
+    readonly UserName?: string | undefined;
+    readonly PolicyArn?: string | undefined;
+}
+export interface SimAttachUserPolicyCommand {
+    readonly input: SimAttachUserPolicyCommandInput;
+}
+export type SimAttachUserPolicyCommandOutput = Record<string, never>;
+//# sourceMappingURL=attach-user-policy.command.d.ts.map

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-user-policy.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/attach-user-policy/attach-user-policy.command.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC"}

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attach-user-policy.command.js.map

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-user-policy.command.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/attach-user-policy/attach-user-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.handler.d.ts

@@ -0,0 +1,30 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimAttachUserPolicyCommand, SimAttachUserPolicyCommandOutput } from "./attach-user-policy.command.js";
+interface AttachUserPolicyCommandHandlerProperties {
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM AttachUserPolicyCommand handler.
+ *
+ * The user-side counterpart of AttachRolePolicy: the attachment records a
+ * managed policy ARN on the user, and authorization resolves the referenced
+ * policy from the account policy store when it evaluates a request. An ARN
+ * with no stored policy behind it, such as an AWS-managed one, attaches and
+ * contributes no statements.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/AttachUserPolicyCommand/
+ */
+export declare class AttachUserPolicyCommandHandler implements CommandHandler<SimAttachUserPolicyCommand, SimAttachUserPolicyCommandOutput> {
+    private readonly users;
+    private readonly background;
+    constructor(properties: AttachUserPolicyCommandHandlerProperties);
+    /**
+     * Handle an AttachUserPolicyCommand from the SDK.
+     */
+    handle(command: SimAttachUserPolicyCommand): Promise<SimAttachUserPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=attach-user-policy.handler.d.ts.map

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-user-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/attach-user-policy/attach-user-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAGtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AAEzC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAK/D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,gCAAgC,CAAC,CAuB3C;CACF"}

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.handler.js

@@ -0,0 +1,44 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamNoSuchEntity } from "../../../error/sim-iam.error.js";
+/**
+ * IAM AttachUserPolicyCommand handler.
+ *
+ * The user-side counterpart of AttachRolePolicy: the attachment records a
+ * managed policy ARN on the user, and authorization resolves the referenced
+ * policy from the account policy store when it evaluates a request. An ARN
+ * with no stored policy behind it, such as an AWS-managed one, attaches and
+ * contributes no statements.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/AttachUserPolicyCommand/
+ */
+export class AttachUserPolicyCommandHandler {
+    users;
+    background;
+    constructor(properties) {
+        const { users, background = new BackgroundTasks() } = properties;
+        this.users = users;
+        this.background = background;
+    }
+    /**
+     * Handle an AttachUserPolicyCommand from the SDK.
+     */
+    async handle(command) {
+        const username = command.input.UserName;
+        if (username === undefined || username.length === 0) {
+            throw new Error("UserName is required");
+        }
+        const policyArn = command.input.PolicyArn;
+        if (policyArn === undefined || policyArn.length === 0) {
+            throw new Error("PolicyArn is required");
+        }
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const user = this.users.get(username);
+        if (user === undefined) {
+            throw new SimIamNoSuchEntity(`No IAM User with name ${username}`);
+        }
+        user.attachedPolicyArns.add(policyArn);
+        return {};
+    }
+}
+//# sourceMappingURL=attach-user-policy.handler.js.map

package/dist/service/iam/command/user/attach-user-policy/attach-user-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-user-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/attach-user-policy/attach-user-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAYrE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,8BAA8B;IAIxB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAAoD;QAC9D,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC;QAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAA+B,CAAC;QAChE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvC,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}

package/dist/service/iam/command/user/create-login-profile/create-login-profile.command.d.ts

@@ -0,0 +1,16 @@
+export interface SimCreateLoginProfileCommandInput {
+    readonly UserName?: string | undefined;
+    readonly Password?: string | undefined;
+    readonly PasswordResetRequired?: boolean | undefined;
+}
+export interface SimCreateLoginProfileCommand {
+    readonly input: SimCreateLoginProfileCommandInput;
+}
+export interface SimCreateLoginProfileCommandOutput {
+    readonly LoginProfile: {
+        readonly UserName: string;
+        readonly CreateDate: Date;
+        readonly PasswordResetRequired: boolean;
+    };
+}
+//# sourceMappingURL=create-login-profile.command.d.ts.map

package/dist/service/iam/command/user/create-login-profile/create-login-profile.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-login-profile.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-login-profile/create-login-profile.command.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;KACzC,CAAC;CACH"}

package/dist/service/iam/command/user/create-login-profile/create-login-profile.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=create-login-profile.command.js.map

package/dist/service/iam/command/user/create-login-profile/create-login-profile.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-login-profile.command.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-login-profile/create-login-profile.command.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/user/create-login-profile/create-login-profile.handler.d.ts

@@ -0,0 +1,32 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimCreateLoginProfileCommand, SimCreateLoginProfileCommandOutput } from "./create-login-profile.command.js";
+interface CreateLoginProfileCommandHandlerProperties {
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM CreateLoginProfileCommand handler.
+ *
+ * A login profile is the console password of a user. The response describes
+ * the profile without the password, which is how real IAM behaves: a password
+ * goes in and is never read back out. A test asserting on one reads it from
+ * the user record in `SimIam.users`.
+ *
+ * No password policy is applied. Real IAM validates the password against the
+ * account password policy, which the simulator does not model.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/CreateLoginProfileCommand/
+ */
+export declare class CreateLoginProfileCommandHandler implements CommandHandler<SimCreateLoginProfileCommand, SimCreateLoginProfileCommandOutput> {
+    private readonly users;
+    private readonly background;
+    constructor(properties: CreateLoginProfileCommandHandlerProperties);
+    /**
+     * Handle a CreateLoginProfileCommand from the SDK.
+     */
+    handle(command: SimCreateLoginProfileCommand): Promise<SimCreateLoginProfileCommandOutput>;
+}
+export {};
+//# sourceMappingURL=create-login-profile.handler.d.ts.map

package/dist/service/iam/command/user/create-login-profile/create-login-profile.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-login-profile.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-login-profile/create-login-profile.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAKtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAKjE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,kCAAkC,CAAC,CAuC7C;CACF"}

package/dist/service/iam/command/user/create-login-profile/create-login-profile.handler.js

@@ -0,0 +1,59 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamEntityAlreadyExists, SimIamNoSuchEntity, } from "../../../error/sim-iam.error.js";
+/**
+ * IAM CreateLoginProfileCommand handler.
+ *
+ * A login profile is the console password of a user. The response describes
+ * the profile without the password, which is how real IAM behaves: a password
+ * goes in and is never read back out. A test asserting on one reads it from
+ * the user record in `SimIam.users`.
+ *
+ * No password policy is applied. Real IAM validates the password against the
+ * account password policy, which the simulator does not model.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/CreateLoginProfileCommand/
+ */
+export class CreateLoginProfileCommandHandler {
+    users;
+    background;
+    constructor(properties) {
+        const { users, background = new BackgroundTasks() } = properties;
+        this.users = users;
+        this.background = background;
+    }
+    /**
+     * Handle a CreateLoginProfileCommand from the SDK.
+     */
+    async handle(command) {
+        const username = command.input.UserName;
+        if (username === undefined || username.length === 0) {
+            throw new Error("UserName is required");
+        }
+        const password = command.input.Password;
+        if (password === undefined || password.length === 0) {
+            throw new Error("Password is required");
+        }
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const user = this.users.get(username);
+        if (user === undefined) {
+            throw new SimIamNoSuchEntity(`No IAM User with name ${username}`);
+        }
+        if (user.loginProfile !== undefined) {
+            throw new SimIamEntityAlreadyExists(`Sim IAM User ${username} already has a login profile`);
+        }
+        user.loginProfile = {
+            password,
+            createDate: this.background.now(),
+            passwordResetRequired: command.input.PasswordResetRequired ?? false,
+        };
+        return {
+            LoginProfile: {
+                UserName: user.userName,
+                CreateDate: user.loginProfile.createDate,
+                PasswordResetRequired: user.loginProfile.passwordResetRequired,
+            },
+        };
+    }
+}
+//# sourceMappingURL=create-login-profile.handler.js.map

package/dist/service/iam/command/user/create-login-profile/create-login-profile.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-login-profile.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-login-profile/create-login-profile.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAYzC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,gCAAgC;IAI1B,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC;QAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,yBAAyB,CACjC,gBAAgB,QAAQ,8BAA8B,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,GAAG;YAClB,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YACjC,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,KAAK;SACpE,CAAC;QAEF,OAAO;YACL,YAAY,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;gBACxC,qBAAqB,EAAE,IAAI,CAAC,YAAY,CAAC,qBAAqB;aAC/D;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-user-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAcnD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAUvD;CACF"}
+{"version":3,"file":"create-user-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,UAAU,CAenD;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAUvD;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.js

@@ -19,6 +19,7 @@ export class CreateUserRecordFactory {
             accessKeys: new Map(),
             inlinePolicies: new Map(),
             attachedPolicyArns: new Set(),
+            loginProfile: undefined,
         };
     }
     /**

package/dist/service/iam/command/user/create-user/create-user-record-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-user-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAWpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,UAAU,CAAC,QAAQ;YACzB,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-user-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAWpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,UAAU,CAAC,QAAQ;YACzB,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;YAC7B,YAAY,EAAE,SAAS;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/delete-user/delete-user.command.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Minimal structural sim IAM DeleteUser command.
+ */
+export interface SimDeleteUserCommand {
+    readonly input: SimDeleteUserCommandInput;
+}
+/**
+ * Minimal structural sim IAM DeleteUser input.
+ */
+export interface SimDeleteUserCommandInput {
+    readonly UserName?: string | undefined;
+}
+/**
+ * Minimal structural sim IAM DeleteUser output.
+ *
+ * Real IAM answers a successful DeleteUser with an empty response body.
+ */
+export type SimDeleteUserCommandOutput = Record<string, never>;
+//# sourceMappingURL=delete-user.command.d.ts.map

package/dist/service/iam/command/user/delete-user/delete-user.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/delete-user/delete-user.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC"}

package/dist/service/iam/command/user/delete-user/delete-user.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-user.command.js.map

package/dist/service/iam/command/user/delete-user/delete-user.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.command.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/delete-user/delete-user.command.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/user/delete-user/delete-user.handler.d.ts

@@ -0,0 +1,34 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimDeleteUserCommand, SimDeleteUserCommandOutput } from "./delete-user.command.js";
+interface DeleteUserCommandHandlerProperties {
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM DeleteUserCommand handler.
+ *
+ * Real IAM only deletes a User nothing is hanging off, the way DeleteRole
+ * refuses a Role still carrying policies. A User with inline policies or
+ * attached managed policies is refused here too, which is why a CloudFormation
+ * Stack takes a User's policies off before deleting it.
+ *
+ * Real IAM also refuses a User that still has access keys, a login profile or
+ * an MFA device. The simulator serves no way to remove any of those, so
+ * refusing on them would leave a User that could never be deleted.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/DeleteUserCommand/
+ */
+export declare class DeleteUserCommandHandler implements CommandHandler<SimDeleteUserCommand, SimDeleteUserCommandOutput> {
+    private readonly users;
+    private readonly background;
+    constructor(properties: DeleteUserCommandHandlerProperties);
+    /**
+     * Handle a DeleteUserCommand from the SDK.
+     */
+    handle(command: SimDeleteUserCommand): Promise<SimDeleteUserCommandOutput>;
+    private assertNothingAttached;
+}
+export {};
+//# sourceMappingURL=delete-user.handler.d.ts.map

package/dist/service/iam/command/user/delete-user/delete-user.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/delete-user/delete-user.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAKtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAElC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,kCAAkC,EAKzD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAoBrC;IAED,OAAO,CAAC,qBAAqB;CAU9B"}

package/dist/service/iam/command/user/delete-user/delete-user.handler.js

@@ -0,0 +1,51 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamDeleteConflict, SimIamNoSuchEntity, } from "../../../error/sim-iam.error.js";
+/**
+ * IAM DeleteUserCommand handler.
+ *
+ * Real IAM only deletes a User nothing is hanging off, the way DeleteRole
+ * refuses a Role still carrying policies. A User with inline policies or
+ * attached managed policies is refused here too, which is why a CloudFormation
+ * Stack takes a User's policies off before deleting it.
+ *
+ * Real IAM also refuses a User that still has access keys, a login profile or
+ * an MFA device. The simulator serves no way to remove any of those, so
+ * refusing on them would leave a User that could never be deleted.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/DeleteUserCommand/
+ */
+export class DeleteUserCommandHandler {
+    users;
+    background;
+    constructor(properties) {
+        const { users, background = new BackgroundTasks() } = properties;
+        this.users = users;
+        this.background = background;
+    }
+    /**
+     * Handle a DeleteUserCommand from the SDK.
+     */
+    async handle(command) {
+        const username = command.input.UserName;
+        if (username === undefined || username.length === 0) {
+            throw new Error("UserName is required");
+        }
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const user = this.users.get(username);
+        if (user === undefined) {
+            throw new SimIamNoSuchEntity(`No IAM User with name ${username}`);
+        }
+        this.assertNothingAttached(user);
+        this.users.delete(username);
+        return {};
+    }
+    assertNothingAttached(user) {
+        const attached = user.inlinePolicies.size + user.attachedPolicyArns.size;
+        if (attached > 0) {
+            throw new SimIamDeleteConflict(`Cannot delete entity, must detach all policies first: ` +
+                `IAM User ${user.userName}`);
+        }
+    }
+}
+//# sourceMappingURL=delete-user.handler.js.map

package/dist/service/iam/command/user/delete-user/delete-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/delete-user/delete-user.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAYzC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,wBAAwB;IAIlB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAA8C;QACxD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAsC,CAAC;QAEtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,qBAAqB,CAAC,IAAgB;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAEzE,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAC5B,wDAAwD;gBACtD,YAAY,IAAI,CAAC,QAAQ,EAAE,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/command/user/sim-iam-user-command-handlers.d.ts

@@ -6,7 +6,10 @@ import type { SimIamCredentialRegistry } from "../../credential/sim-iam-credenti
 import type { SimIamUserCredentialGenerator } from "../../credential/user/sim-iam-user-credential-generator.js";
 import type { SimIamUser, SimIamUsername } from "../../user/sim-iam-user.js";
 import type { SimCreateAccessKeyCommand, SimCreateAccessKeyCommandOutput } from "./create-access-key/create-access-key.command.js";
+import type { SimAttachUserPolicyCommand, SimAttachUserPolicyCommandOutput } from "./attach-user-policy/attach-user-policy.command.js";
+import type { SimCreateLoginProfileCommand, SimCreateLoginProfileCommandOutput } from "./create-login-profile/create-login-profile.command.js";
 import type { SimCreateUserCommand, SimCreateUserCommandOutput } from "./create-user/create-user.command.js";
+import type { SimDeleteUserCommand, SimDeleteUserCommandOutput } from "./delete-user/delete-user.command.js";
 interface SimIamUserCommandHandlersProperties {
     readonly accountId: SimAwsAccountId;
     readonly users: Map<SimIamUsername, SimIamUser>;
@@ -34,6 +37,18 @@ export declare class SimIamUserCommandHandlers {
      * Handle a CreateUser command from the SDK.
      */
     createUser(command: SimCreateUserCommand, options?: SimIamRequestOptions): Promise<SimCreateUserCommandOutput>;
+    /**
+     * Handle a DeleteUser command from the SDK.
+     */
+    deleteUser(command: SimDeleteUserCommand, options?: SimIamRequestOptions): Promise<SimDeleteUserCommandOutput>;
+    /**
+     * Handle an AttachUserPolicy command from the SDK.
+     */
+    attachUserPolicy(command: SimAttachUserPolicyCommand, options?: SimIamRequestOptions): Promise<SimAttachUserPolicyCommandOutput>;
+    /**
+     * Handle a CreateLoginProfile command from the SDK.
+     */
+    createLoginProfile(command: SimCreateLoginProfileCommand, options?: SimIamRequestOptions): Promise<SimCreateLoginProfileCommandOutput>;
     /**
      * Handle a CreateAccessKey command from the SDK.
      */