@kensio/yulin 1.17.0 → 1.17.2

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-deleter.js

@@ -1,4 +1,5 @@
-import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnLambdaCreatedResource } from "./sim-cfn-lambda-created-resource.js";
+import { simCfnLambdaRevokePermission } from "./permission/sim-cfn-lambda-permission-revoker.js";
 import { simCfnLambdaTargetFunctionName } from "./function/sim-cfn-lambda-target-function.js";
 /**
  * Deletes the simulated Lambda resources a CloudFormation Stack created.
@@ -30,7 +31,19 @@ export class SimCfnLambdaResourceDeleter {
                 return;
             }
             case "Permission": {
-                await this.removePermission(resource);
+                await simCfnLambdaRevokePermission(this.lambda, resource);
+                return;
+            }
+            case "Version": {
+                // Nothing to do. Lambda has no operation that deletes one published
+                // version, and a version goes when the function it was published from
+                // does. A Stack that published one is tearing that function down in
+                // the same teardown, so leaving the version alone here leaves it
+                // reachable for exactly as long as the function is.
+                return;
+            }
+            case "Alias": {
+                await this.deleteAlias(resource);
                 return;
             }
             default: {
@@ -39,40 +52,32 @@ export class SimCfnLambdaResourceDeleter {
         }
     }
     async deleteFunction(resource) {
-        const simFunction = resource.simResource;
-        assertDefined(simFunction, `sim Lambda Function for CloudFormation Resource ${resource.logicalId}`);
+        const simFunction = simCfnLambdaCreatedResource(resource, "function");
         await this.lambda.deleteFunction({
             input: { FunctionName: simFunction.name },
         });
     }
     async deleteFunctionUrl(resource) {
-        const functionUrl = resource.simResource;
-        assertDefined(functionUrl, `sim Lambda Function URL for CloudFormation Resource ${resource.logicalId}`);
+        const functionUrl = simCfnLambdaCreatedResource(resource, "Function URL");
         await this.lambda.deleteFunctionUrlConfig({
             input: { FunctionName: functionUrl.functionName },
         });
     }
     async deleteEventSourceMapping(resource) {
-        const mapping = resource.simResource;
-        assertDefined(mapping, `sim Lambda event source mapping for CloudFormation Resource ${resource.logicalId}`);
+        const mapping = simCfnLambdaCreatedResource(resource, "event source mapping");
         await this.lambda.deleteEventSourceMapping({
             input: { UUID: mapping.uuid },
         });
     }
     /**
-     * Take a permission back off the function it was added to.
-     *
-     * The statement is named after the Resource's logical ID when it is added,
-     * because AWS::Lambda::Permission has no StatementId property, so that is
-     * what addresses it again here.
+     * Drop an alias, leaving the version it pointed at where it is.
      */
-    async removePermission(resource) {
-        const permission = resource.simResource;
-        assertDefined(permission, `sim Lambda permission for CloudFormation Resource ${resource.logicalId}`);
-        await this.lambda.removePermission({
+    async deleteAlias(resource) {
+        const alias = simCfnLambdaCreatedResource(resource, "alias");
+        await this.lambda.deleteAlias({
             input: {
-                FunctionName: simCfnLambdaTargetFunctionName(permission.resourceArn),
-                StatementId: permission.statementId,
+                FunctionName: simCfnLambdaTargetFunctionName(alias.arn),
+                Name: alias.name,
             },
         });
     }

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-deleter.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-deleter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAM9F;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAY;IAEnC,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,kDAAkD,gBAAgB,WAAW,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAA4C,CAAC;QAC1E,aAAa,CACX,WAAW,EACX,mDAAmD,QAAQ,CAAC,SAAS,EAAE,CACxE,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC/B,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,QAAwB;QACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAEhB,CAAC;QACd,aAAa,CACX,WAAW,EACX,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;YACxC,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,QAAwB;QAExB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAEZ,CAAC;QACd,aAAa,CACX,OAAO,EACP,+DAA+D,QAAQ,CAAC,SAAS,EAAE,CACpF,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAAC,QAAwB;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAA8C,CAAC;QAC3E,aAAa,CACX,UAAU,EACV,qDAAqD,QAAQ,CAAC,SAAS,EAAE,CAC1E,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjC,KAAK,EAAE;gBACL,YAAY,EAAE,8BAA8B,CAAC,UAAU,CAAC,WAAW,CAAC;gBACpE,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-deleter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAM9F;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAY;IAEnC,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,oEAAoE;gBACpE,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,oDAAoD;gBACpD,OAAO;YACT,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,kDAAkD,gBAAgB,WAAW,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,WAAW,GAAG,2BAA2B,CAC7C,QAAQ,EACR,UAAU,CACX,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC/B,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,QAAwB;QACtD,MAAM,WAAW,GAAG,2BAA2B,CAC7C,QAAQ,EACR,cAAc,CACf,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;YACxC,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,QAAwB;QAExB,MAAM,OAAO,GAAG,2BAA2B,CACzC,QAAQ,EACR,sBAAsB,CACvB,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,QAAwB;QAChD,MAAM,KAAK,GAAG,2BAA2B,CACvC,QAAQ,EACR,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,KAAK,EAAE;gBACL,YAAY,EAAE,8BAA8B,CAAC,KAAK,CAAC,GAAG,CAAC;gBACvD,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.d.ts

@@ -8,6 +8,8 @@ export declare class SimLambdaCloudFormationResourceFactory implements SimCfnSer
     private readonly functionCreator;
     private readonly urlCreator;
     private readonly permissionCreator;
+    private readonly versionCreator;
+    private readonly aliasCreator;
     private readonly eventSourceMappingCreator;
     private readonly deleter;
     constructor(lambda: SimLambda);

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOlD;;GAEG;AACH,qBAAa,sCAAuC,YAAW,4BAA4B;IACzF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAwC;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,YAAY,MAAM,EAAE,SAAS,EAQ5B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiC7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAEf;CACF"}
+{"version":3,"file":"sim-cfn-lambda-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AASlD;;GAEG;AACH,qBAAa,sCAAuC,YAAW,4BAA4B;IACzF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAwC;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,YAAY,MAAM,EAAE,SAAS,EAU5B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA6C7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAEf;CACF"}

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.js

@@ -1,7 +1,9 @@
+import { SimCfnLambdaAliasCreator } from "./alias/sim-cfn-lambda-alias-creator.js";
 import { SimCfnLambdaEventSourceMappingCreator } from "./event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.js";
 import { SimCfnLambdaFunctionCreator } from "./function/sim-cfn-lambda-function-creator.js";
 import { SimCfnLambdaPermissionCreator } from "./permission/sim-cfn-lambda-permission-creator.js";
 import { SimCfnLambdaUrlCreator } from "./url/sim-cfn-lambda-url-creator.js";
+import { SimCfnLambdaVersionCreator } from "./version/sim-cfn-lambda-version-creator.js";
 import { SimCfnLambdaResourceDeleter } from "./sim-cfn-lambda-resource-deleter.js";
 /**
  * CloudFormation Resource factory for simulated Lambda resources.
@@ -10,6 +12,8 @@ export class SimLambdaCloudFormationResourceFactory {
     functionCreator;
     urlCreator;
     permissionCreator;
+    versionCreator;
+    aliasCreator;
     eventSourceMappingCreator;
     deleter;
     constructor(lambda) {
@@ -17,6 +21,8 @@ export class SimLambdaCloudFormationResourceFactory {
         this.functionCreator = new SimCfnLambdaFunctionCreator({ lambda });
         this.urlCreator = new SimCfnLambdaUrlCreator({ lambda });
         this.permissionCreator = new SimCfnLambdaPermissionCreator({ lambda });
+        this.versionCreator = new SimCfnLambdaVersionCreator({ lambda });
+        this.aliasCreator = new SimCfnLambdaAliasCreator({ lambda });
         this.eventSourceMappingCreator = new SimCfnLambdaEventSourceMappingCreator({
             lambda,
         });
@@ -38,6 +44,12 @@ export class SimLambdaCloudFormationResourceFactory {
             case "Permission": {
                 return await this.permissionCreator.create(resource, context.resolvedProperties ?? resource.properties);
             }
+            case "Version": {
+                return await this.versionCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            case "Alias": {
+                return await this.aliasCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
             default: {
                 throw new Error(`Unsupported sim Lambda CloudFormation Resource ${resourceTypeName}`);
             }

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-lambda-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qCAAqC,EAAE,MAAM,uEAAuE,CAAC;AAC9H,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;GAEG;AACH,MAAM,OAAO,sCAAsC;IAChC,eAAe,CAA8B;IAC7C,UAAU,CAAyB;IACnC,iBAAiB,CAAgC;IACjD,yBAAyB,CAAwC;IACjE,OAAO,CAA8B;IAEtD,YAAY,MAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,IAAI,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,yBAAyB,GAAG,IAAI,qCAAqC,CAAC;YACzE,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CACtC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,EACjD,OAAO,CAAC,QAAQ,CACjB,CAAC;YACJ,CAAC;YACD,KAAK,KAAK,EAAE,CAAC;gBACX,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACjC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAChD,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACxC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,kDAAkD,gBAAgB,EAAE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-lambda-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/lambda/cfn/sim-cfn-lambda-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,uEAAuE,CAAC;AAC9H,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;GAEG;AACH,MAAM,OAAO,sCAAsC;IAChC,eAAe,CAA8B;IAC7C,UAAU,CAAyB;IACnC,iBAAiB,CAAgC;IACjD,cAAc,CAA6B;IAC3C,YAAY,CAA2B;IACvC,yBAAyB,CAAwC;IACjE,OAAO,CAA8B;IAEtD,YAAY,MAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,IAAI,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,cAAc,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,yBAAyB,GAAG,IAAI,qCAAqC,CAAC;YACzE,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CACtC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,EACjD,OAAO,CAAC,QAAQ,CACjB,CAAC;YACJ,CAAC;YACD,KAAK,KAAK,EAAE,CAAC;gBACX,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACjC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAChD,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CACxC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CACrC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CACnC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,kDAAkD,gBAAgB,EAAE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.d.ts

@@ -0,0 +1,31 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
+import type { SimLambda } from "../../sim-lambda.js";
+interface SimCfnLambdaVersionCreatorProperties {
+    readonly lambda: SimLambda;
+}
+/**
+ * Creates published Lambda versions from CloudFormation Resources.
+ *
+ * This is what CDK emits for `fn.currentVersion`, and what every
+ * `lambda.Alias` sits on top of, so a synthesized template is the usual way a
+ * version comes into existence outside a direct SDK call. Deploying one
+ * publishes the function as it stands, exactly as a `PublishVersion` call
+ * would, so the version carries the code the Stack deployed.
+ *
+ * `CodeSha256` and `RuntimePolicy` are not simulated. Neither changes what a
+ * version is here, so a template carrying them publishes the same version as
+ * one that does not.
+ */
+export declare class SimCfnLambdaVersionCreator {
+    private readonly lambda;
+    private readonly propertyParser;
+    constructor(properties: SimCfnLambdaVersionCreatorProperties);
+    /**
+     * Publish a version from an AWS::Lambda::Version Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaFunction>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-lambda-version-creator.d.ts.map

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-version-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/version/sim-cfn-lambda-version-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIrD,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,iBAAiB,CAAC,CAgC5B;CACF"}

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.js

@@ -0,0 +1,40 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimCfnLambdaPropertyParser } from "../function/sim-cfn-lambda-property-parser.js";
+import { simCfnLambdaTargetFunctionName } from "../function/sim-cfn-lambda-target-function.js";
+/**
+ * Creates published Lambda versions from CloudFormation Resources.
+ *
+ * This is what CDK emits for `fn.currentVersion`, and what every
+ * `lambda.Alias` sits on top of, so a synthesized template is the usual way a
+ * version comes into existence outside a direct SDK call. Deploying one
+ * publishes the function as it stands, exactly as a `PublishVersion` call
+ * would, so the version carries the code the Stack deployed.
+ *
+ * `CodeSha256` and `RuntimePolicy` are not simulated. Neither changes what a
+ * version is here, so a template carrying them publishes the same version as
+ * one that does not.
+ */
+export class SimCfnLambdaVersionCreator {
+    lambda;
+    propertyParser = new SimCfnLambdaPropertyParser();
+    constructor(properties) {
+        this.lambda = properties.lambda;
+    }
+    /**
+     * Publish a version from an AWS::Lambda::Version Resource.
+     */
+    async create(resource, properties) {
+        const functionName = simCfnLambdaTargetFunctionName(this.propertyParser.requiredString(resource, properties["FunctionName"], "FunctionName"));
+        const published = await this.lambda.publishVersion({
+            input: {
+                FunctionName: functionName,
+                Description: this.propertyParser.optionalString(resource, properties["Description"], "Description"),
+            },
+        });
+        const version = this.lambda.getSimFunctionTarget(functionName, published.Version)?.simFunction;
+        assertDefined(version, `Sim Lambda version ${published.Version} of ${functionName} after ` +
+            "CloudFormation creation");
+        return version;
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-version-creator.js.map

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-version-creator.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/version/sim-cfn-lambda-version-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAM/F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAY;IAClB,cAAc,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAEnE,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,YAAY,GAAG,8BAA8B,CACjD,IAAI,CAAC,cAAc,CAAC,cAAc,CAChC,QAAQ,EACR,UAAU,CAAC,cAAc,CAAC,EAC1B,cAAc,CACf,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACjD,KAAK,EAAE;gBACL,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC7C,QAAQ,EACR,UAAU,CAAC,aAAa,CAAC,EACzB,aAAa,CACd;aACF;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAC9C,YAAY,EACZ,SAAS,CAAC,OAAO,CAClB,EAAE,WAAW,CAAC;QAEf,aAAa,CACX,OAAO,EACP,sBAAsB,SAAS,CAAC,OAAO,OAAO,YAAY,SAAS;YACjE,yBAAyB,CAC5B,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/service/lambda/command/add-permission/add-permission.command.d.ts

@@ -10,6 +10,7 @@ export interface SimAddPermissionCommand {
  */
 export interface SimAddPermissionCommandInput {
     readonly FunctionName?: string | undefined;
+    readonly Qualifier?: string | undefined;
     readonly StatementId?: string | undefined;
     readonly Action?: string | undefined;
     readonly Principal?: string | undefined;

package/dist/service/lambda/command/add-permission/add-permission.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add-permission.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}
+{"version":3,"file":"add-permission.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/service/lambda/command/add-permission/add-permission.handler.d.ts

@@ -2,10 +2,12 @@ import type { CommandHandler } from "../../../../command/command-handler.js";
 import type { BackgroundScheduler } from "../../../../util/background/background.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionVersionStore } from "../../function/version/sim-lambda-function-version-store.js";
 import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
 import type { SimAddPermissionCommand, SimAddPermissionCommandOutput } from "./add-permission.command.js";
 interface AddPermissionCommandHandlerProperties {
     readonly functions: SimLambdaFunctionLookup;
+    readonly versions: SimLambdaFunctionVersionStore;
     readonly iam: SimIamInterServiceAuthZ;
     readonly background: BackgroundScheduler;
 }
@@ -19,11 +21,16 @@ interface AddPermissionCommandHandlerOptions {
  */
 export declare class AddPermissionCommandHandler implements CommandHandler<SimAddPermissionCommand, SimAddPermissionCommandOutput> {
     private readonly functions;
+    private readonly versions;
     private readonly authorizer;
     private readonly background;
     constructor(properties: AddPermissionCommandHandlerProperties);
     /**
-     * Grant a permission on a sim Lambda function's resource policy.
+     * Grant a permission on the resource policy of a sim Lambda function, or of
+     * the version or alias a qualifier names.
+     *
+     * The statement is held against the qualified resource and carries its ARN,
+     * so a grant made on an alias admits a call through that alias alone.
      */
     handle(command: SimAddPermissionCommand, options?: AddPermissionCommandHandlerOptions): Promise<SimAddPermissionCommandOutput>;
 }

package/dist/service/lambda/command/add-permission/add-permission.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add-permission.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAGhG,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAErC,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,qCAAqC,EAO5D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,kCAAkC,GAC3C,OAAO,CAAC,6BAA6B,CAAC,CA2CxC;CACF"}
+{"version":3,"file":"add-permission.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AACjH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAGhG,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAErC,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,qCAAqC,EAQ5D;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,kCAAkC,GAC3C,OAAO,CAAC,6BAA6B,CAAC,CAiDxC;CACF"}

package/dist/service/lambda/command/add-permission/add-permission.handler.js

@@ -1,4 +1,5 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simLambdaQualifiedFunctionOf } from "../../function/sim-lambda-function-reference.js";
 import { SimLambdaPermission } from "../../function/policy/sim-lambda-permission.js";
 import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.js";
 /**
@@ -8,10 +9,12 @@ import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.j
  */
 export class AddPermissionCommandHandler {
     functions;
+    versions;
     authorizer;
     background;
     constructor(properties) {
         this.functions = properties.functions;
+        this.versions = properties.versions;
         this.authorizer = new FunctionUrlAuthorizer({
             iam: properties.iam,
             action: "lambda:AddPermission",
@@ -19,7 +22,11 @@ export class AddPermissionCommandHandler {
         this.background = properties.background;
     }
     /**
-     * Grant a permission on a sim Lambda function's resource policy.
+     * Grant a permission on the resource policy of a sim Lambda function, or of
+     * the version or alias a qualifier names.
+     *
+     * The statement is held against the qualified resource and carries its ARN,
+     * so a grant made on an alias admits a call through that alias alone.
      */
     async handle(command, options) {
         const { input } = command;
@@ -28,21 +35,21 @@ export class AddPermissionCommandHandler {
         assertDefined(input.Action, "AddPermissionCommand.input.Action required");
         assertDefined(input.Principal, "AddPermissionCommand.input.Principal required");
         await this.background.sequence();
-        const functionName = input.FunctionName;
-        this.authorizer.authorize(this.functions.functionArn(functionName), options?.caller);
-        const simFunction = this.functions.require(functionName);
+        const { functionName, qualifier } = simLambdaQualifiedFunctionOf(input.FunctionName, input.Qualifier);
+        this.authorizer.authorize(this.functions.functionArn(functionName, qualifier), options?.caller);
+        const resource = this.versions.requireResource(this.functions.require(functionName), qualifier);
         const permission = new SimLambdaPermission({
             statementId: input.StatementId,
             action: input.Action,
             principal: input.Principal,
-            resourceArn: simFunction.arn,
+            resourceArn: resource.arn,
             functionUrlAuthType: input.FunctionUrlAuthType,
             sourceArn: input.SourceArn,
             sourceAccount: input.SourceAccount,
             principalOrgId: input.PrincipalOrgID,
             invokedViaFunctionUrl: input.InvokedViaFunctionUrl,
         });
-        simFunction.resourcePolicy.add(permission);
+        resource.resourcePolicy.add(permission);
         return {
             $metadata: {},
             Statement: JSON.stringify(permission.toStatement()),

package/dist/service/lambda/command/add-permission/add-permission.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-permission.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAgBnF;;;;GAIG;AACH,MAAM,OAAO,2BAA2B;IAIrB,SAAS,CAA0B;IACnC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAgC,EAChC,OAA4C;QAE5C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,aAAa,CACX,KAAK,CAAC,YAAY,EAClB,kDAAkD,CACnD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,WAAW,EACjB,iDAAiD,CAClD,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,4CAA4C,CAAC,CAAC;QAC1E,aAAa,CACX,KAAK,CAAC,SAAS,EACf,+CAA+C,CAChD,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEzD,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;YACzC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,WAAW,CAAC,GAAG;YAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;QAEH,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE3C,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"add-permission.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/add-permission/add-permission.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAG/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAiBnF;;;;GAIG;AACH,MAAM,OAAO,2BAA2B;IAIrB,SAAS,CAA0B;IACnC,QAAQ,CAAgC;IACxC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAAgC,EAChC,OAA4C;QAE5C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,aAAa,CACX,KAAK,CAAC,YAAY,EAClB,kDAAkD,CACnD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,WAAW,EACjB,iDAAiD,CAClD,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,4CAA4C,CAAC,CAAC;QAC1E,aAAa,CACX,KAAK,CAAC,SAAS,EACf,+CAA+C,CAChD,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,4BAA4B,CAC9D,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EACnD,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC5C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EACpC,SAAS,CACV,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;YACzC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAExC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/alias/alias-input.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Validates the version an alias command points an alias at.
+ *
+ * An alias names a published version, and only a published version. Real
+ * Lambda refuses `$LATEST` here on the API-level pattern, before it looks for
+ * anything of that name. The command types constrain this already, but
+ * templates and plain JavaScript callers reach the same handlers, so the value
+ * is checked at runtime and reported the way real Lambda reports it.
+ */
+export declare class AliasInputParser {
+    /**
+     * Parse a required FunctionVersion, as CreateAlias requires one.
+     */
+    requireFunctionVersion(value: string): string;
+    /**
+     * Parse an optional FunctionVersion, as UpdateAlias allows omitting it to
+     * leave the alias pointing where it points.
+     */
+    parseOptionalFunctionVersion(value: string | undefined): string | undefined;
+}
+//# sourceMappingURL=alias-input.d.ts.map

package/dist/service/lambda/command/alias/alias-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/alias/alias-input.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IACH,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQ5C;IAED;;;OAGG;IACH,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE1E;CACF"}

package/dist/service/lambda/command/alias/alias-input.js

@@ -0,0 +1,30 @@
+import { SimLambdaValidationException } from "../../error/sim-lambda.error.js";
+const versionNumberPattern = /^\d+$/;
+/**
+ * Validates the version an alias command points an alias at.
+ *
+ * An alias names a published version, and only a published version. Real
+ * Lambda refuses `$LATEST` here on the API-level pattern, before it looks for
+ * anything of that name. The command types constrain this already, but
+ * templates and plain JavaScript callers reach the same handlers, so the value
+ * is checked at runtime and reported the way real Lambda reports it.
+ */
+export class AliasInputParser {
+    /**
+     * Parse a required FunctionVersion, as CreateAlias requires one.
+     */
+    requireFunctionVersion(value) {
+        if (!versionNumberPattern.test(value)) {
+            throw new SimLambdaValidationException(`1 validation error detected: Value '${value}' at 'functionVersion' failed to satisfy constraint: Member must satisfy regular expression pattern: [0-9]+`);
+        }
+        return value;
+    }
+    /**
+     * Parse an optional FunctionVersion, as UpdateAlias allows omitting it to
+     * leave the alias pointing where it points.
+     */
+    parseOptionalFunctionVersion(value) {
+        return value === undefined ? undefined : this.requireFunctionVersion(value);
+    }
+}
+//# sourceMappingURL=alias-input.js.map

package/dist/service/lambda/command/alias/alias-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-input.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/alias/alias-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAE/E,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,sBAAsB,CAAC,KAAa;QAClC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,4BAA4B,CACpC,uCAAuC,KAAK,6GAA6G,CAC1J,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,4BAA4B,CAAC,KAAyB;QACpD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/service/lambda/command/alias/sim-lambda-alias-commands.d.ts

@@ -0,0 +1,52 @@
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionAliasStore } from "../../function/version/sim-lambda-function-alias-store.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimCreateAliasCommand, SimCreateAliasCommandOutput } from "../create-alias/create-alias.command.js";
+import type { SimDeleteAliasCommand, SimDeleteAliasCommandOutput } from "../delete-alias/delete-alias.command.js";
+import type { SimGetAliasCommand, SimGetAliasCommandOutput } from "../get-alias/get-alias.command.js";
+import type { SimListAliasesCommand, SimListAliasesCommandOutput } from "../list-aliases/list-aliases.command.js";
+import type { SimUpdateAliasCommand, SimUpdateAliasCommandOutput } from "../update-alias/update-alias.command.js";
+interface SimLambdaAliasCommandsProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly aliases: SimLambdaFunctionAliasStore;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+}
+interface SimLambdaAliasCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The alias commands of one simulated Lambda scope.
+ *
+ * These five share the same collaborators and differ only in the handler they
+ * run, so grouping them keeps the SimLambda facade a thin delegation rather
+ * than five near-identical wiring blocks.
+ */
+export declare class SimLambdaAliasCommands {
+    private readonly properties;
+    constructor(properties: SimLambdaAliasCommandsProperties);
+    /**
+     * Point a new alias at a published version.
+     */
+    create(command: SimCreateAliasCommand, options?: SimLambdaAliasCommandOptions): Promise<SimCreateAliasCommandOutput>;
+    /**
+     * Point an existing alias at another version.
+     */
+    update(command: SimUpdateAliasCommand, options?: SimLambdaAliasCommandOptions): Promise<SimUpdateAliasCommandOutput>;
+    /**
+     * Read one alias of a function.
+     */
+    get(command: SimGetAliasCommand, options?: SimLambdaAliasCommandOptions): Promise<SimGetAliasCommandOutput>;
+    /**
+     * List a function's aliases.
+     */
+    list(command: SimListAliasesCommand, options?: SimLambdaAliasCommandOptions): Promise<SimListAliasesCommandOutput>;
+    /**
+     * Drop one alias of a function.
+     */
+    delete(command: SimDeleteAliasCommand, options?: SimLambdaAliasCommandOptions): Promise<SimDeleteAliasCommandOutput>;
+}
+export {};
+//# sourceMappingURL=sim-lambda-alias-commands.d.ts.map

package/dist/service/lambda/command/alias/sim-lambda-alias-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-alias-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/alias/sim-lambda-alias-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2DAA2D,CAAC;AAC7G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,yCAAyC,CAAC;AAEjD,UAAU,gCAAgC;IACxC,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAE9D,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAKtC;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAKtC;IAED;;OAEG;IACG,GAAG,CACP,OAAO,EAAE,kBAAkB,EAC3B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,wBAAwB,CAAC,CAKnC;IAED;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAKtC;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAKtC;CACF"}

package/dist/service/lambda/command/alias/sim-lambda-alias-commands.js

@@ -0,0 +1,49 @@
+import { CreateAliasCommandHandler } from "../create-alias/create-alias.handler.js";
+import { DeleteAliasCommandHandler } from "../delete-alias/delete-alias.handler.js";
+import { GetAliasCommandHandler } from "../get-alias/get-alias.handler.js";
+import { ListAliasesCommandHandler } from "../list-aliases/list-aliases.handler.js";
+import { UpdateAliasCommandHandler } from "../update-alias/update-alias.handler.js";
+/**
+ * The alias commands of one simulated Lambda scope.
+ *
+ * These five share the same collaborators and differ only in the handler they
+ * run, so grouping them keeps the SimLambda facade a thin delegation rather
+ * than five near-identical wiring blocks.
+ */
+export class SimLambdaAliasCommands {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Point a new alias at a published version.
+     */
+    async create(command, options) {
+        return await new CreateAliasCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * Point an existing alias at another version.
+     */
+    async update(command, options) {
+        return await new UpdateAliasCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * Read one alias of a function.
+     */
+    async get(command, options) {
+        return await new GetAliasCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * List a function's aliases.
+     */
+    async list(command, options) {
+        return await new ListAliasesCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * Drop one alias of a function.
+     */
+    async delete(command, options) {
+        return await new DeleteAliasCommandHandler(this.properties).handle(command, options);
+    }
+}
+//# sourceMappingURL=sim-lambda-alias-commands.js.map

package/dist/service/lambda/command/alias/sim-lambda-alias-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-alias-commands.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/alias/sim-lambda-alias-commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAKpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAKpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAK3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAKpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAiBpF;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IAChB,UAAU,CAAmC;IAE9D,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAAsC;QAEtC,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAAsC;QAEtC,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,OAA2B,EAC3B,OAAsC;QAEtC,OAAO,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAC7D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,OAA8B,EAC9B,OAAsC;QAEtC,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B,EAC9B,OAAsC;QAEtC,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/authorize/sim-lambda-resource-policies.d.ts

@@ -1,13 +1,15 @@
 import type { SimIamResourcePolicyInput } from "../../../iam/authorize/context/sim-iam-auth-z-context-builder.js";
-import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
+import type { SimLambdaPolicyResource } from "../../function/policy/sim-lambda-policy-resource.js";
 /**
  * The resource policies IAM should evaluate alongside identity policies for an
- * action on a function.
+ * action on a function, one of its versions or one of its aliases.
  *
- * A function with no permissions granted contributes nothing, which leaves
- * authorization exactly as it was before resource policies existed. A function
- * that does not exist contributes nothing either: the caller is refused or the
- * function is reported missing, and neither needs a policy.
+ * The resource is whichever of the three the request named, so a grant made on
+ * an alias decides a call on that alias and nothing else. A resource with no
+ * permissions granted contributes nothing, which leaves authorization exactly
+ * as it was before resource policies existed. A resource that does not exist
+ * contributes nothing either: the caller is refused or the resource is
+ * reported missing, and neither needs a policy.
  */
-export declare function simLambdaResourcePolicies(simFunction: SimLambdaFunction | undefined): readonly SimIamResourcePolicyInput[];
+export declare function simLambdaResourcePolicies(resource: SimLambdaPolicyResource | undefined): readonly SimIamResourcePolicyInput[];
 //# sourceMappingURL=sim-lambda-resource-policies.d.ts.map

package/dist/service/lambda/command/authorize/sim-lambda-resource-policies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-resource-policies.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/authorize/sim-lambda-resource-policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAO/E;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,iBAAiB,GAAG,SAAS,GACzC,SAAS,yBAAyB,EAAE,CAYtC"}
+{"version":3,"file":"sim-lambda-resource-policies.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/authorize/sim-lambda-resource-policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAOnG;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC5C,SAAS,yBAAyB,EAAE,CAYtC"}

package/dist/service/lambda/command/authorize/sim-lambda-resource-policies.js

@@ -4,22 +4,24 @@
 const policyName = "FunctionPolicy";
 /**
  * The resource policies IAM should evaluate alongside identity policies for an
- * action on a function.
+ * action on a function, one of its versions or one of its aliases.
  *
- * A function with no permissions granted contributes nothing, which leaves
- * authorization exactly as it was before resource policies existed. A function
- * that does not exist contributes nothing either: the caller is refused or the
- * function is reported missing, and neither needs a policy.
+ * The resource is whichever of the three the request named, so a grant made on
+ * an alias decides a call on that alias and nothing else. A resource with no
+ * permissions granted contributes nothing, which leaves authorization exactly
+ * as it was before resource policies existed. A resource that does not exist
+ * contributes nothing either: the caller is refused or the resource is
+ * reported missing, and neither needs a policy.
  */
-export function simLambdaResourcePolicies(simFunction) {
-    if (simFunction === undefined || simFunction.resourcePolicy.isEmpty()) {
+export function simLambdaResourcePolicies(resource) {
+    if (resource === undefined || resource.resourcePolicy.isEmpty()) {
         return [];
     }
     return [
         {
-            document: simFunction.resourcePolicy.document(),
+            document: resource.resourcePolicy.document(),
             policyName,
-            resourceArn: simFunction.arn,
+            resourceArn: resource.arn,
         },
     ];
 }