@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/wafv2/command/sim-wafv2-input.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Read the name a request named, refusing a request with none.
+ */
+export declare function requiredSimWafName(name: string | undefined): string;
+/**
+ * Read the id a request named, refusing a request with none.
+ *
+ * A name is unique within a scope, so the id looks redundant until two
+ * resources have carried the name over time. WAFv2 asks for both on every
+ * read, and so does this.
+ */
+export declare function requiredSimWafId(id: string | undefined): string;
+/**
+ * Refuse tags on a WAFv2 resource.
+ *
+ * Nothing here reads a tag, and a resource that reported tags it was never
+ * asked about would be worse than one that says it does not carry them.
+ */
+export declare function refuseSimWafTags(tags: readonly unknown[] | undefined, operation: string): void;
+/**
+ * Read an ARN a request named, refusing a request with none.
+ *
+ * An association names both the web ACL and the resource it goes in front of
+ * by ARN, and neither has anything else to fall back on.
+ */
+export declare function requiredSimWafArn(arn: string | undefined, parameter: string): string;
+//# sourceMappingURL=sim-wafv2-input.d.ts.map

package/dist/service/wafv2/command/sim-wafv2-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-input.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-input.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQnE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAS/D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,EACpC,SAAS,EAAE,MAAM,GAChB,IAAI,CAON;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,SAAS,EAAE,MAAM,GAChB,MAAM,CASR"}

package/dist/service/wafv2/command/sim-wafv2-input.js

@@ -0,0 +1,50 @@
+import { SimWafInvalidParameterException, SimWafUnsimulatedInputException, } from "../error/sim-wafv2.error.js";
+/**
+ * Read the name a request named, refusing a request with none.
+ */
+export function requiredSimWafName(name) {
+    if (name === undefined || name === "") {
+        throw new SimWafInvalidParameterException("Error reason: A WAFv2 resource is named, field: NAME, parameter: Name");
+    }
+    return name;
+}
+/**
+ * Read the id a request named, refusing a request with none.
+ *
+ * A name is unique within a scope, so the id looks redundant until two
+ * resources have carried the name over time. WAFv2 asks for both on every
+ * read, and so does this.
+ */
+export function requiredSimWafId(id) {
+    if (id === undefined || id === "") {
+        throw new SimWafInvalidParameterException("Error reason: A WAFv2 resource read names its Id, field: RESOURCE_ID, " +
+            "parameter: Id");
+    }
+    return id;
+}
+/**
+ * Refuse tags on a WAFv2 resource.
+ *
+ * Nothing here reads a tag, and a resource that reported tags it was never
+ * asked about would be worse than one that says it does not carry them.
+ */
+export function refuseSimWafTags(tags, operation) {
+    if (tags !== undefined && tags.length > 0) {
+        throw new SimWafUnsimulatedInputException(`WAFv2 resource tags are not simulated, so ${operation} refuses them ` +
+            `rather than dropping them`);
+    }
+}
+/**
+ * Read an ARN a request named, refusing a request with none.
+ *
+ * An association names both the web ACL and the resource it goes in front of
+ * by ARN, and neither has anything else to fall back on.
+ */
+export function requiredSimWafArn(arn, parameter) {
+    if (arn === undefined || arn === "") {
+        throw new SimWafInvalidParameterException(`Error reason: A WAFv2 association names an ARN, ` +
+            `field: RESOURCE_ARN, parameter: ${parameter}`);
+    }
+    return arn;
+}
+//# sourceMappingURL=sim-wafv2-input.js.map

package/dist/service/wafv2/command/sim-wafv2-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-input.js","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-input.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,6BAA6B,CAAC;AAErC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,+BAA+B,CACvC,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAsB;IACrD,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,eAAe,CAClB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAoC,EACpC,SAAiB;IAEjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,+BAA+B,CACvC,6CAA6C,SAAS,gBAAgB;YACpE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAuB,EACvB,SAAiB;IAEjB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,+BAA+B,CACvC,kDAAkD;YAChD,mCAAmC,SAAS,EAAE,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/service/wafv2/command/sim-wafv2-page.d.ts

@@ -0,0 +1,20 @@
+interface SimWafPageProperties<T> {
+    /** Everything the request selected, before paging. */
+    readonly listed: readonly T[];
+    readonly limit?: number | undefined;
+    readonly nextMarker?: string | undefined;
+}
+/**
+ * One page of a WAFv2 listing, and the marker that reaches the next one.
+ *
+ * The marker is an offset into what the request selected. That is only
+ * meaningful against the same selection, so a marker issued elsewhere is
+ * refused rather than quietly starting again from the beginning.
+ */
+export declare class SimWafPage<T> {
+    readonly items: readonly T[];
+    readonly nextMarker: string | undefined;
+    constructor(properties: SimWafPageProperties<T>);
+}
+export {};
+//# sourceMappingURL=sim-wafv2-page.d.ts.map

package/dist/service/wafv2/command/sim-wafv2-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-page.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-page.ts"],"names":[],"mappings":"AAOA,UAAU,oBAAoB,CAAC,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;IAE9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,qBAAa,UAAU,CAAC,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC,YAAY,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAS9C;CACF"}

package/dist/service/wafv2/command/sim-wafv2-page.js

@@ -0,0 +1,48 @@
+import { SimWafInvalidParameterException } from "../error/sim-wafv2.error.js";
+/**
+ * The largest page a WAFv2 listing will hand back.
+ */
+const maximumLimit = 100;
+/**
+ * One page of a WAFv2 listing, and the marker that reaches the next one.
+ *
+ * The marker is an offset into what the request selected. That is only
+ * meaningful against the same selection, so a marker issued elsewhere is
+ * refused rather than quietly starting again from the beginning.
+ */
+export class SimWafPage {
+    items;
+    nextMarker;
+    constructor(properties) {
+        const { listed } = properties;
+        const limit = requiredLimit(properties.limit);
+        const startIndex = pageStartIndex(properties.nextMarker, listed.length);
+        const nextIndex = startIndex + limit;
+        this.items = listed.slice(startIndex, nextIndex);
+        this.nextMarker =
+            nextIndex >= listed.length ? undefined : String(nextIndex);
+    }
+}
+function requiredLimit(requested) {
+    const limit = requested ?? maximumLimit;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > maximumLimit) {
+        throw new SimWafInvalidParameterException(`Error reason: The limit ${String(requested)} is not between 1 and ` +
+            `${maximumLimit}, field: LIMIT, parameter: ${String(requested)}`);
+    }
+    return limit;
+}
+function pageStartIndex(nextMarker, listedCount) {
+    if (nextMarker === undefined) {
+        return 0;
+    }
+    const startIndex = Number(nextMarker);
+    if (!Number.isSafeInteger(startIndex) ||
+        startIndex < 0 ||
+        startIndex >= listedCount ||
+        String(startIndex) !== nextMarker) {
+        throw new SimWafInvalidParameterException("Error reason: The NextMarker is not a marker this simulation issued, " +
+            `field: NEXT_MARKER, parameter: ${nextMarker}`);
+    }
+    return startIndex;
+}
+//# sourceMappingURL=sim-wafv2-page.js.map

package/dist/service/wafv2/command/sim-wafv2-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-page.js","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E;;GAEG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC;AAUzB;;;;;;GAMG;AACH,MAAM,OAAO,UAAU;IACZ,KAAK,CAAe;IACpB,UAAU,CAAqB;IAExC,YAAY,UAAmC;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;QAErC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU;YACb,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,SAAS,aAAa,CAAC,SAA6B;IAClD,MAAM,KAAK,GAAG,SAAS,IAAI,YAAY,CAAC;IAExC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QACtE,MAAM,IAAI,+BAA+B,CACvC,2BAA2B,MAAM,CAAC,SAAS,CAAC,wBAAwB;YAClE,GAAG,YAAY,8BAA8B,MAAM,CAAC,SAAS,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,UAA8B,EAC9B,WAAmB;IAEnB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QACjC,UAAU,GAAG,CAAC;QACd,UAAU,IAAI,WAAW;QACzB,MAAM,CAAC,UAAU,CAAC,KAAK,UAAU,EACjC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,uEAAuE;YACrE,kCAAkC,UAAU,EAAE,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/service/wafv2/command/sim-wafv2-request-options.d.ts

@@ -0,0 +1,12 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * What a simulated WAFv2 request carries besides its command input.
+ */
+export interface SimWafRequestOptions {
+    /**
+     * Who is making the request. An omitted caller is the Account root, as it is
+     * everywhere else in the simulation.
+     */
+    readonly caller?: SimAwsCaller;
+}
+//# sourceMappingURL=sim-wafv2-request-options.d.ts.map

package/dist/service/wafv2/command/sim-wafv2-request-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC"}

package/dist/service/wafv2/command/sim-wafv2-request-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-wafv2-request-options.js.map

package/dist/service/wafv2/command/sim-wafv2-request-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-request-options.js","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-request-options.ts"],"names":[],"mappings":""}

package/dist/service/wafv2/command/sim-wafv2-resource-lookup.d.ts

@@ -0,0 +1,33 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimWafResource } from "../resource/sim-waf-resource.js";
+import type { SimWafResourceStore } from "../resource/sim-waf-resource-store.js";
+import { type SimWafResourceKind } from "../sim-wafv2-arn.js";
+import type { SimWafAuthorizer } from "./authorize/sim-wafv2-authorizer.js";
+/**
+ * How every read, update and delete names the resource it works on.
+ */
+export interface SimWafResourceInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+}
+export interface SimWafResourceLookup<T extends SimWafResource> {
+    readonly store: SimWafResourceStore<T>;
+    readonly input: SimWafResourceInput;
+    readonly kind: SimWafResourceKind;
+    readonly action: string;
+    readonly authorizer: SimWafAuthorizer;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly caller?: SimAwsCaller | undefined;
+}
+/**
+ * Authorize a caller for one WAFv2 resource and then find it.
+ *
+ * Authorizing before looking up keeps a denial and a missing resource
+ * separate, so a caller with no permission for a web ACL never learns whether
+ * it is there. The three resource kinds all name themselves the same way,
+ * which is why one function covers all of them.
+ */
+export declare function requireSimWafResource<T extends SimWafResource>(lookup: SimWafResourceLookup<T>): T;
+//# sourceMappingURL=sim-wafv2-resource-lookup.d.ts.map

package/dist/service/wafv2/command/sim-wafv2-resource-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-resource-lookup.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-resource-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,EAAE,KAAK,kBAAkB,EAAa,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAG5E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,cAAc;IAC5D,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,cAAc,EAC5D,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC9B,CAAC,CAsBH"}

package/dist/service/wafv2/command/sim-wafv2-resource-lookup.js

@@ -0,0 +1,26 @@
+import { requiredSimWafScope } from "../scope/sim-waf-scope.js";
+import { simWafArn } from "../sim-wafv2-arn.js";
+import { requiredSimWafId, requiredSimWafName } from "./sim-wafv2-input.js";
+/**
+ * Authorize a caller for one WAFv2 resource and then find it.
+ *
+ * Authorizing before looking up keeps a denial and a missing resource
+ * separate, so a caller with no permission for a web ACL never learns whether
+ * it is there. The three resource kinds all name themselves the same way,
+ * which is why one function covers all of them.
+ */
+export function requireSimWafResource(lookup) {
+    const { input } = lookup;
+    const name = requiredSimWafName(input.Name);
+    const id = requiredSimWafId(input.Id);
+    const scope = requiredSimWafScope(input.Scope, lookup.accountRegionScope.regionName);
+    lookup.authorizer.authorizeResource(lookup.action, simWafArn({
+        accountRegionScope: lookup.accountRegionScope,
+        scope,
+        kind: lookup.kind,
+        name,
+        id,
+    }), lookup.caller);
+    return lookup.store.require({ scope, name, id });
+}
+//# sourceMappingURL=sim-wafv2-resource-lookup.js.map

package/dist/service/wafv2/command/sim-wafv2-resource-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-resource-lookup.js","sourceRoot":"","sources":["../../../../src/service/wafv2/command/sim-wafv2-resource-lookup.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAA2B,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAqB5E;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+B;IAE/B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,mBAAmB,CAC/B,KAAK,CAAC,KAAK,EACX,MAAM,CAAC,kBAAkB,CAAC,UAAU,CACrC,CAAC;IAEF,MAAM,CAAC,UAAU,CAAC,iBAAiB,CACjC,MAAM,CAAC,MAAM,EACb,SAAS,CAAC;QACR,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,EAAE;KACH,CAAC,EACF,MAAM,CAAC,MAAM,CACd,CAAC;IAEF,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.d.ts

@@ -0,0 +1,11 @@
+import { DynamicFactory } from "@kensio/part-factory";
+/**
+ * Makes minimally valid CreateWebACL inputs.
+ *
+ * The web ACL allows what no rule claims and holds no rules at all, so a test
+ * adds the rules it is about and says nothing about the rest. Names are
+ * generated because a name is unique within a scope, and two tests sharing one
+ * would fail each other rather than themselves.
+ */
+export declare const simWafCreateWebAclFactory: DynamicFactory<import("./web-acl.command.js").SimWafWebAclWriteInput, undefined>;
+//# sourceMappingURL=sim-waf-create-web-acl.factory.d.ts.map

package/dist/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-create-web-acl.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,kFAMjC,CAAC"}

package/dist/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.js

@@ -0,0 +1,18 @@
+import { faker } from "@faker-js/faker";
+import { DynamicFactory } from "@kensio/part-factory";
+import { simWafVisibilityConfig } from "../../web-acl/sim-waf-rule.factory.js";
+/**
+ * Makes minimally valid CreateWebACL inputs.
+ *
+ * The web ACL allows what no rule claims and holds no rules at all, so a test
+ * adds the rules it is about and says nothing about the rest. Names are
+ * generated because a name is unique within a scope, and two tests sharing one
+ * would fail each other rather than themselves.
+ */
+export const simWafCreateWebAclFactory = new DynamicFactory(() => ({
+    Name: `acl-${faker.string.alphanumeric(8)}`,
+    Scope: "REGIONAL",
+    DefaultAction: { Allow: {} },
+    VisibilityConfig: simWafVisibilityConfig,
+}));
+//# sourceMappingURL=sim-waf-create-web-acl.factory.js.map

package/dist/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-create-web-acl.factory.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-waf-create-web-acl.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,IAAI,cAAc,CAA8B,GAAG,EAAE,CAAC,CAAC;IACrD,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;IAC3C,KAAK,EAAE,UAAU;IACjB,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IAC5B,gBAAgB,EAAE,sBAAsB;CACzC,CAAC,CAAC,CAAC"}

package/dist/service/wafv2/command/web-acl/sim-waf-web-acl-output.d.ts

@@ -0,0 +1,10 @@
+import type { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import type { SimWafWebAclOutput } from "./web-acl.command.js";
+/**
+ * What the API reports about one web ACL.
+ *
+ * GetWebACL and GetWebACLForResource both answer with the whole web ACL, so
+ * the shape is stated once here rather than in each of them.
+ */
+export declare function simWafWebAclOutput(webAcl: SimWafWebAcl): SimWafWebAclOutput;
+//# sourceMappingURL=sim-waf-web-acl-output.d.ts.map

package/dist/service/wafv2/command/web-acl/sim-waf-web-acl-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-web-acl-output.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-waf-web-acl-output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAe3E"}

package/dist/service/wafv2/command/web-acl/sim-waf-web-acl-output.js

@@ -0,0 +1,22 @@
+/**
+ * What the API reports about one web ACL.
+ *
+ * GetWebACL and GetWebACLForResource both answer with the whole web ACL, so
+ * the shape is stated once here rather than in each of them.
+ */
+export function simWafWebAclOutput(webAcl) {
+    const { configuration } = webAcl;
+    return {
+        Name: webAcl.name,
+        Id: webAcl.id,
+        ARN: webAcl.arn,
+        Capacity: webAcl.capacity,
+        LabelNamespace: webAcl.labelNamespace,
+        Description: webAcl.description,
+        DefaultAction: configuration.defaultAction,
+        Rules: configuration.rules ?? [],
+        VisibilityConfig: configuration.visibilityConfig,
+        CustomResponseBodies: configuration.customResponseBodies,
+    };
+}
+//# sourceMappingURL=sim-waf-web-acl-output.js.map

package/dist/service/wafv2/command/web-acl/sim-waf-web-acl-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-web-acl-output.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-waf-web-acl-output.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAEjC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,aAAa,CAAC,aAAa;QAC1C,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,EAAE;QAChC,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;KACzD,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.d.ts

@@ -0,0 +1,10 @@
+import type { SimWafWebAclWriteInput } from "./web-acl.command.js";
+/**
+ * Refuse the web ACL members this simulation does not model.
+ *
+ * Each of them changes what a web ACL does on real WAF, so accepting one and
+ * dropping it would leave the web ACL looking configured to the request that
+ * wrote it and unconfigured to every request it then evaluated.
+ */
+export declare function refuseUnsimulatedSimWafWebAclInput(input: SimWafWebAclWriteInput, operation: string): void;
+//# sourceMappingURL=sim-wafv2-unsimulated-web-acl-input.d.ts.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA2CnE;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,MAAM,GAChB,IAAI,CAYN"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.js

@@ -0,0 +1,47 @@
+import { SimWafUnsimulatedInputException } from "../../error/sim-wafv2.error.js";
+import { refuseSimWafTags } from "../sim-wafv2-input.js";
+const tokenActions = "the CAPTCHA and Challenge actions are answered by a browser, and nothing " +
+    "in a test does that";
+const refusedMembers = [
+    [(input) => input.CaptchaConfig, "CaptchaConfig", tokenActions],
+    [(input) => input.ChallengeConfig, "ChallengeConfig", tokenActions],
+    [(input) => input.TokenDomains, "TokenDomains", tokenActions],
+    [
+        (input) => input.AssociationConfig,
+        "AssociationConfig",
+        "it sets the body size a web ACL inspects for the resources it is " +
+            "associated with, and nothing is associated with a web ACL yet",
+    ],
+    [
+        (input) => input.DataProtectionConfig,
+        "DataProtectionConfig",
+        "it decides what a request field looks like in logs, and web ACL logging " +
+            "is not simulated",
+    ],
+    [
+        (input) => input.OnSourceDDoSProtectionConfig,
+        "OnSourceDDoSProtectionConfig",
+        "it responds to traffic volume, which a simulated request never has",
+    ],
+    [
+        (input) => input.ApplicationConfig,
+        "ApplicationConfig",
+        "it configures the WAF-hosted sign-in pages, which are not simulated",
+    ],
+];
+/**
+ * Refuse the web ACL members this simulation does not model.
+ *
+ * Each of them changes what a web ACL does on real WAF, so accepting one and
+ * dropping it would leave the web ACL looking configured to the request that
+ * wrote it and unconfigured to every request it then evaluated.
+ */
+export function refuseUnsimulatedSimWafWebAclInput(input, operation) {
+    refuseSimWafTags(input.Tags, operation);
+    for (const [read, member, reason] of refusedMembers) {
+        if (read(input) !== undefined) {
+            throw new SimWafUnsimulatedInputException(`${operation} refuses ${member}, which Yulin does not simulate: ${reason}`);
+        }
+    }
+}
+//# sourceMappingURL=sim-wafv2-unsimulated-web-acl-input.js.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAYzD,MAAM,YAAY,GAChB,2EAA2E;IAC3E,qBAAqB,CAAC;AAExB,MAAM,cAAc,GAAmC;IACrD,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;IACxE,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,YAAY,CAAC;IAC5E,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,YAAY,CAAC;IACtE;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,mEAAmE;YACjE,+DAA+D;KAClE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB;QAC9C,sBAAsB;QACtB,0EAA0E;YACxE,kBAAkB;KACrB;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,4BAA4B;QACtD,8BAA8B;QAC9B,oEAAoE;KACrE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,qEAAqE;KACtE;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAA6B,EAC7B,SAAiB;IAEjB,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,+BAA+B,CACvC,GAAG,SAAS,YAAY,MAAM,oCAC5B,MACF,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.d.ts

@@ -0,0 +1,62 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimWafAssociations } from "../../association/sim-waf-associations.js";
+import type { SimWafManagedRules } from "../../managed/sim-waf-managed-rules.js";
+import type { SimWafRegexPatternSet } from "../../regex-pattern-set/sim-waf-regex-pattern-set.js";
+import type { SimWafResourceStore } from "../../resource/sim-waf-resource-store.js";
+import { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import type { SimWafAuthorizer } from "../authorize/sim-wafv2-authorizer.js";
+import type { SimWafRequestOptions } from "../sim-wafv2-request-options.js";
+import type { SimCreateWebAclCommand, SimCreateWebAclCommandOutput, SimDeleteWebAclCommand, SimDeleteWebAclCommandOutput, SimGetWebAclCommand, SimGetWebAclCommandOutput, SimListWebAclsCommand, SimListWebAclsCommandOutput, SimUpdateWebAclCommand, SimUpdateWebAclCommandOutput } from "./web-acl.command.js";
+interface SimWafWebAclCommandsProperties {
+    readonly webAcls: SimWafResourceStore<SimWafWebAcl>;
+    readonly regexPatternSets: SimWafResourceStore<SimWafRegexPatternSet>;
+    readonly associations: SimWafAssociations;
+    readonly managedRules: SimWafManagedRules;
+    readonly authorizer: SimWafAuthorizer;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The commands that make, read, list, change and remove web ACLs.
+ *
+ * Every rule is compiled where the web ACL is written, so a statement kind
+ * this simulation cannot evaluate is refused by CreateWebACL and UpdateWebACL
+ * rather than by the request that would have been let through.
+ */
+export declare class SimWafWebAclCommands {
+    #private;
+    constructor(properties: SimWafWebAclCommandsProperties);
+    /**
+     * Make a web ACL from a default action and a list of rules.
+     */
+    createWebAcl(command: SimCreateWebAclCommand, options?: SimWafRequestOptions): SimCreateWebAclCommandOutput;
+    /**
+     * Read one web ACL and the token the next write to it has to present.
+     */
+    getWebAcl(command: SimGetWebAclCommand, options?: SimWafRequestOptions): SimGetWebAclCommandOutput;
+    /**
+     * Write a new default action and set of rules over a web ACL.
+     */
+    updateWebAcl(command: SimUpdateWebAclCommand, options?: SimWafRequestOptions): SimUpdateWebAclCommandOutput;
+    /**
+     * List the web ACLs in one scope, in the order they were created.
+     *
+     * Real WAFv2 gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to web ACL ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listWebAcls(command: SimListWebAclsCommand, options?: SimWafRequestOptions): SimListWebAclsCommandOutput;
+    /**
+     * Remove a web ACL.
+     *
+     * A web ACL still in front of something is refused. Deleting one would
+     * otherwise leave a stage protected by rules nothing holds any more, so the
+     * resources it protects are disassociated first.
+     */
+    deleteWebAcl(command: SimDeleteWebAclCommand, options?: SimWafRequestOptions): SimDeleteWebAclCommandOutput;
+    /**
+     * Find a web ACL a request named, once its caller is authorized for it.
+     */
+    private require;
+}
+export {};
+//# sourceMappingURL=sim-wafv2-web-acl-commands.d.ts.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-web-acl-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAO7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAE7B,MAAM,sBAAsB,CAAC;AAE9B,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;;IAQ/B,YAAY,UAAU,EAAE,8BAA8B,EAOrD;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CA2B9B;IAED;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAQ3B;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAU9B;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAmB7B;IAED;;;;;;OAMG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAiB9B;IAED;;OAEG;IACH,OAAO,CAAC,OAAO;CAehB"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.js

@@ -0,0 +1,137 @@
+import { SimWafAssociatedItemException } from "../../error/sim-wafv2.error.js";
+import { requiredSimWafScope } from "../../scope/sim-waf-scope.js";
+import { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import { SimWafPage } from "../sim-wafv2-page.js";
+import { requiredSimWafName } from "../sim-wafv2-input.js";
+import { requireSimWafResource, } from "../sim-wafv2-resource-lookup.js";
+import { refuseUnsimulatedSimWafWebAclInput } from "./sim-wafv2-unsimulated-web-acl-input.js";
+import { simWafWebAclOutput } from "./sim-waf-web-acl-output.js";
+/**
+ * The commands that make, read, list, change and remove web ACLs.
+ *
+ * Every rule is compiled where the web ACL is written, so a statement kind
+ * this simulation cannot evaluate is refused by CreateWebACL and UpdateWebACL
+ * rather than by the request that would have been let through.
+ */
+export class SimWafWebAclCommands {
+    #webAcls;
+    #regexPatternSets;
+    #associations;
+    #managedRules;
+    #authorizer;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#webAcls = properties.webAcls;
+        this.#regexPatternSets = properties.regexPatternSets;
+        this.#associations = properties.associations;
+        this.#managedRules = properties.managedRules;
+        this.#authorizer = properties.authorizer;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Make a web ACL from a default action and a list of rules.
+     */
+    createWebAcl(command, options) {
+        const { input } = command;
+        const name = requiredSimWafName(input.Name);
+        const scope = requiredSimWafScope(input.Scope, this.#accountRegionScope.regionName);
+        refuseUnsimulatedSimWafWebAclInput(input, "CreateWebACL");
+        const webAcl = new SimWafWebAcl({
+            name,
+            scope,
+            accountRegionScope: this.#accountRegionScope,
+            description: input.Description,
+            configuration: configurationOf(input),
+            regexPatternSets: this.#regexPatternSets,
+            managedRules: this.#managedRules,
+        });
+        this.#authorizer.authorizeResource("wafv2:CreateWebACL", webAcl.arn, options?.caller);
+        return { $metadata: {}, Summary: this.#webAcls.add(webAcl).summary() };
+    }
+    /**
+     * Read one web ACL and the token the next write to it has to present.
+     */
+    getWebAcl(command, options) {
+        const webAcl = this.require(command.input, "wafv2:GetWebACL", options);
+        return {
+            $metadata: {},
+            LockToken: webAcl.lockToken,
+            WebACL: simWafWebAclOutput(webAcl),
+        };
+    }
+    /**
+     * Write a new default action and set of rules over a web ACL.
+     */
+    updateWebAcl(command, options) {
+        const { input } = command;
+        refuseUnsimulatedSimWafWebAclInput(input, "UpdateWebACL");
+        const webAcl = this.require(input, "wafv2:UpdateWebACL", options);
+        webAcl.reconfigure(configurationOf(input), input.LockToken);
+        return { $metadata: {}, NextLockToken: webAcl.lockToken };
+    }
+    /**
+     * List the web ACLs in one scope, in the order they were created.
+     *
+     * Real WAFv2 gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to web ACL ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listWebAcls(command, options) {
+        const scope = requiredSimWafScope(command.input.Scope, this.#accountRegionScope.regionName);
+        this.#authorizer.authorizeNoResource("wafv2:ListWebACLs", options?.caller);
+        const page = new SimWafPage({
+            listed: this.#webAcls.all(scope),
+            limit: command.input.Limit,
+            nextMarker: command.input.NextMarker,
+        });
+        return {
+            $metadata: {},
+            WebACLs: page.items.map((webAcl) => webAcl.summary()),
+            NextMarker: page.nextMarker,
+        };
+    }
+    /**
+     * Remove a web ACL.
+     *
+     * A web ACL still in front of something is refused. Deleting one would
+     * otherwise leave a stage protected by rules nothing holds any more, so the
+     * resources it protects are disassociated first.
+     */
+    deleteWebAcl(command, options) {
+        const webAcl = this.require(command.input, "wafv2:DeleteWebACL", options);
+        const associated = this.#associations.resourceArnsFor(webAcl);
+        if (associated.length > 0) {
+            throw new SimWafAssociatedItemException(`AWS WAF couldn't perform the operation because your resource is ` +
+                `being used by another resource or it's associated with another ` +
+                `resource: web ACL ${webAcl.name} is associated with ` +
+                `${associated.join(", ")}.`);
+        }
+        webAcl.takeLock(command.input.LockToken);
+        this.#webAcls.remove(webAcl);
+        return { $metadata: {} };
+    }
+    /**
+     * Find a web ACL a request named, once its caller is authorized for it.
+     */
+    require(input, action, options) {
+        return requireSimWafResource({
+            store: this.#webAcls,
+            input,
+            kind: "webacl",
+            action,
+            authorizer: this.#authorizer,
+            accountRegionScope: this.#accountRegionScope,
+            caller: options?.caller,
+        });
+    }
+}
+function configurationOf(input) {
+    return {
+        defaultAction: input.DefaultAction,
+        rules: input.Rules,
+        customResponseBodies: input.CustomResponseBodies,
+        visibilityConfig: input.VisibilityConfig,
+        description: input.Description,
+    };
+}
+//# sourceMappingURL=sim-wafv2-web-acl-commands.js.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-web-acl-commands.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAI/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,qBAAqB,GAEtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAwBjE;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAoC;IAC5C,iBAAiB,CAA6C;IAC9D,aAAa,CAAqB;IAClC,aAAa,CAAqB;IAClC,WAAW,CAAmB;IAC9B,mBAAmB,CAA2B;IAEvD,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,mBAAmB,CAC/B,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,mBAAmB,CAAC,UAAU,CACpC,CAAC;QAEF,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;YAC9B,IAAI;YACJ,KAAK;YACL,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC;YACrC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,oBAAoB,EACpB,MAAM,CAAC,GAAG,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,KAAK,GAAG,mBAAmB,CAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,EACnB,IAAI,CAAC,mBAAmB,CAAC,UAAU,CACpC,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;SACrC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrD,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAE9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,6BAA6B,CACrC,kEAAkE;gBAChE,iEAAiE;gBACjE,qBAAqB,MAAM,CAAC,IAAI,sBAAsB;gBACtD,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,OAAO,CACb,KAA0B,EAC1B,MAAc,EACd,OAAyC;QAEzC,OAAO,qBAAqB,CAAC;YAC3B,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,eAAe,CACtB,KAA6B;IAE7B,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC"}