@kensio/yulin 1.17.2 → 1.18.0

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.d.ts

@@ -0,0 +1,62 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimWafAssociations } from "../../association/sim-waf-associations.js";
+import type { SimWafManagedRules } from "../../managed/sim-waf-managed-rules.js";
+import type { SimWafRegexPatternSet } from "../../regex-pattern-set/sim-waf-regex-pattern-set.js";
+import type { SimWafResourceStore } from "../../resource/sim-waf-resource-store.js";
+import { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import type { SimWafAuthorizer } from "../authorize/sim-wafv2-authorizer.js";
+import type { SimWafRequestOptions } from "../sim-wafv2-request-options.js";
+import type { SimCreateWebAclCommand, SimCreateWebAclCommandOutput, SimDeleteWebAclCommand, SimDeleteWebAclCommandOutput, SimGetWebAclCommand, SimGetWebAclCommandOutput, SimListWebAclsCommand, SimListWebAclsCommandOutput, SimUpdateWebAclCommand, SimUpdateWebAclCommandOutput } from "./web-acl.command.js";
+interface SimWafWebAclCommandsProperties {
+    readonly webAcls: SimWafResourceStore<SimWafWebAcl>;
+    readonly regexPatternSets: SimWafResourceStore<SimWafRegexPatternSet>;
+    readonly associations: SimWafAssociations;
+    readonly managedRules: SimWafManagedRules;
+    readonly authorizer: SimWafAuthorizer;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The commands that make, read, list, change and remove web ACLs.
+ *
+ * Every rule is compiled where the web ACL is written, so a statement kind
+ * this simulation cannot evaluate is refused by CreateWebACL and UpdateWebACL
+ * rather than by the request that would have been let through.
+ */
+export declare class SimWafWebAclCommands {
+    #private;
+    constructor(properties: SimWafWebAclCommandsProperties);
+    /**
+     * Make a web ACL from a default action and a list of rules.
+     */
+    createWebAcl(command: SimCreateWebAclCommand, options?: SimWafRequestOptions): SimCreateWebAclCommandOutput;
+    /**
+     * Read one web ACL and the token the next write to it has to present.
+     */
+    getWebAcl(command: SimGetWebAclCommand, options?: SimWafRequestOptions): SimGetWebAclCommandOutput;
+    /**
+     * Write a new default action and set of rules over a web ACL.
+     */
+    updateWebAcl(command: SimUpdateWebAclCommand, options?: SimWafRequestOptions): SimUpdateWebAclCommandOutput;
+    /**
+     * List the web ACLs in one scope, in the order they were created.
+     *
+     * Real WAFv2 gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to web ACL ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listWebAcls(command: SimListWebAclsCommand, options?: SimWafRequestOptions): SimListWebAclsCommandOutput;
+    /**
+     * Remove a web ACL.
+     *
+     * A web ACL still in front of something is refused. Deleting one would
+     * otherwise leave a stage protected by rules nothing holds any more, so the
+     * resources it protects are disassociated first.
+     */
+    deleteWebAcl(command: SimDeleteWebAclCommand, options?: SimWafRequestOptions): SimDeleteWebAclCommandOutput;
+    /**
+     * Find a web ACL a request named, once its caller is authorized for it.
+     */
+    private require;
+}
+export {};
+//# sourceMappingURL=sim-wafv2-web-acl-commands.d.ts.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-web-acl-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAO7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAE7B,MAAM,sBAAsB,CAAC;AAE9B,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;;IAQ/B,YAAY,UAAU,EAAE,8BAA8B,EAOrD;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CA2B9B;IAED;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAQ3B;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAU9B;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAmB7B;IAED;;;;;;OAMG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAiB9B;IAED;;OAEG;IACH,OAAO,CAAC,OAAO;CAehB"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.js

@@ -0,0 +1,137 @@
+import { SimWafAssociatedItemException } from "../../error/sim-wafv2.error.js";
+import { requiredSimWafScope } from "../../scope/sim-waf-scope.js";
+import { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import { SimWafPage } from "../sim-wafv2-page.js";
+import { requiredSimWafName } from "../sim-wafv2-input.js";
+import { requireSimWafResource, } from "../sim-wafv2-resource-lookup.js";
+import { refuseUnsimulatedSimWafWebAclInput } from "./sim-wafv2-unsimulated-web-acl-input.js";
+import { simWafWebAclOutput } from "./sim-waf-web-acl-output.js";
+/**
+ * The commands that make, read, list, change and remove web ACLs.
+ *
+ * Every rule is compiled where the web ACL is written, so a statement kind
+ * this simulation cannot evaluate is refused by CreateWebACL and UpdateWebACL
+ * rather than by the request that would have been let through.
+ */
+export class SimWafWebAclCommands {
+    #webAcls;
+    #regexPatternSets;
+    #associations;
+    #managedRules;
+    #authorizer;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#webAcls = properties.webAcls;
+        this.#regexPatternSets = properties.regexPatternSets;
+        this.#associations = properties.associations;
+        this.#managedRules = properties.managedRules;
+        this.#authorizer = properties.authorizer;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Make a web ACL from a default action and a list of rules.
+     */
+    createWebAcl(command, options) {
+        const { input } = command;
+        const name = requiredSimWafName(input.Name);
+        const scope = requiredSimWafScope(input.Scope, this.#accountRegionScope.regionName);
+        refuseUnsimulatedSimWafWebAclInput(input, "CreateWebACL");
+        const webAcl = new SimWafWebAcl({
+            name,
+            scope,
+            accountRegionScope: this.#accountRegionScope,
+            description: input.Description,
+            configuration: configurationOf(input),
+            regexPatternSets: this.#regexPatternSets,
+            managedRules: this.#managedRules,
+        });
+        this.#authorizer.authorizeResource("wafv2:CreateWebACL", webAcl.arn, options?.caller);
+        return { $metadata: {}, Summary: this.#webAcls.add(webAcl).summary() };
+    }
+    /**
+     * Read one web ACL and the token the next write to it has to present.
+     */
+    getWebAcl(command, options) {
+        const webAcl = this.require(command.input, "wafv2:GetWebACL", options);
+        return {
+            $metadata: {},
+            LockToken: webAcl.lockToken,
+            WebACL: simWafWebAclOutput(webAcl),
+        };
+    }
+    /**
+     * Write a new default action and set of rules over a web ACL.
+     */
+    updateWebAcl(command, options) {
+        const { input } = command;
+        refuseUnsimulatedSimWafWebAclInput(input, "UpdateWebACL");
+        const webAcl = this.require(input, "wafv2:UpdateWebACL", options);
+        webAcl.reconfigure(configurationOf(input), input.LockToken);
+        return { $metadata: {}, NextLockToken: webAcl.lockToken };
+    }
+    /**
+     * List the web ACLs in one scope, in the order they were created.
+     *
+     * Real WAFv2 gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to web ACL ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listWebAcls(command, options) {
+        const scope = requiredSimWafScope(command.input.Scope, this.#accountRegionScope.regionName);
+        this.#authorizer.authorizeNoResource("wafv2:ListWebACLs", options?.caller);
+        const page = new SimWafPage({
+            listed: this.#webAcls.all(scope),
+            limit: command.input.Limit,
+            nextMarker: command.input.NextMarker,
+        });
+        return {
+            $metadata: {},
+            WebACLs: page.items.map((webAcl) => webAcl.summary()),
+            NextMarker: page.nextMarker,
+        };
+    }
+    /**
+     * Remove a web ACL.
+     *
+     * A web ACL still in front of something is refused. Deleting one would
+     * otherwise leave a stage protected by rules nothing holds any more, so the
+     * resources it protects are disassociated first.
+     */
+    deleteWebAcl(command, options) {
+        const webAcl = this.require(command.input, "wafv2:DeleteWebACL", options);
+        const associated = this.#associations.resourceArnsFor(webAcl);
+        if (associated.length > 0) {
+            throw new SimWafAssociatedItemException(`AWS WAF couldn't perform the operation because your resource is ` +
+                `being used by another resource or it's associated with another ` +
+                `resource: web ACL ${webAcl.name} is associated with ` +
+                `${associated.join(", ")}.`);
+        }
+        webAcl.takeLock(command.input.LockToken);
+        this.#webAcls.remove(webAcl);
+        return { $metadata: {} };
+    }
+    /**
+     * Find a web ACL a request named, once its caller is authorized for it.
+     */
+    require(input, action, options) {
+        return requireSimWafResource({
+            store: this.#webAcls,
+            input,
+            kind: "webacl",
+            action,
+            authorizer: this.#authorizer,
+            accountRegionScope: this.#accountRegionScope,
+            caller: options?.caller,
+        });
+    }
+}
+function configurationOf(input) {
+    return {
+        defaultAction: input.DefaultAction,
+        rules: input.Rules,
+        customResponseBodies: input.CustomResponseBodies,
+        visibilityConfig: input.VisibilityConfig,
+        description: input.Description,
+    };
+}
+//# sourceMappingURL=sim-wafv2-web-acl-commands.js.map

package/dist/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-web-acl-commands.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-web-acl-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAI/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,qBAAqB,GAEtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAwBjE;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAoC;IAC5C,iBAAiB,CAA6C;IAC9D,aAAa,CAAqB;IAClC,aAAa,CAAqB;IAClC,WAAW,CAAmB;IAC9B,mBAAmB,CAA2B;IAEvD,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,mBAAmB,CAC/B,KAAK,CAAC,KAAK,EACX,IAAI,CAAC,mBAAmB,CAAC,UAAU,CACpC,CAAC;QAEF,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;YAC9B,IAAI;YACJ,KAAK;YACL,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC;YACrC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,oBAAoB,EACpB,MAAM,CAAC,GAAG,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CACT,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,KAAK,GAAG,mBAAmB,CAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,EACnB,IAAI,CAAC,mBAAmB,CAAC,UAAU,CACpC,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;SACrC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrD,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAE9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,6BAA6B,CACrC,kEAAkE;gBAChE,iEAAiE;gBACjE,qBAAqB,MAAM,CAAC,IAAI,sBAAsB;gBACtD,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,OAAO,CACb,KAA0B,EAC1B,MAAc,EACd,OAAyC;QAEzC,OAAO,qBAAqB,CAAC;YAC3B,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,eAAe,CACtB,KAA6B;IAE7B,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/command/web-acl/web-acl.command.d.ts

@@ -0,0 +1,132 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimWafActionInput } from "../../web-acl/sim-waf-action.type.js";
+import type { SimWafCustomResponseBodies } from "../../web-acl/sim-waf-custom-response.type.js";
+import type { SimWafRuleInput } from "../../web-acl/sim-waf-rule.type.js";
+/**
+ * What a listing reports about one web ACL, IP set or regex pattern set.
+ */
+export interface SimWafSummaryOutput {
+    readonly Name: string;
+    readonly Id: string;
+    readonly Description: string | undefined;
+    readonly LockToken: string;
+    readonly ARN: string;
+}
+/**
+ * What a web ACL is written with, shared by CreateWebACL and UpdateWebACL.
+ */
+export interface SimWafWebAclWriteInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly DefaultAction?: SimWafActionInput | undefined;
+    readonly Description?: string | undefined;
+    readonly Rules?: readonly SimWafRuleInput[] | undefined;
+    readonly VisibilityConfig?: unknown;
+    readonly CustomResponseBodies?: SimWafCustomResponseBodies | undefined;
+    readonly Tags?: readonly unknown[] | undefined;
+    readonly CaptchaConfig?: unknown;
+    readonly ChallengeConfig?: unknown;
+    readonly TokenDomains?: readonly string[] | undefined;
+    readonly AssociationConfig?: unknown;
+    readonly DataProtectionConfig?: unknown;
+    readonly OnSourceDDoSProtectionConfig?: unknown;
+    readonly ApplicationConfig?: unknown;
+}
+/**
+ * Minimal structural sim WAFv2 CreateWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/CreateWebACLCommand/
+ */
+export interface SimCreateWebAclCommand {
+    readonly input: SimCreateWebAclCommandInput;
+}
+export type SimCreateWebAclCommandInput = SimWafWebAclWriteInput;
+export interface SimCreateWebAclCommandOutput {
+    readonly Summary?: SimWafSummaryOutput | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 GetWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/GetWebACLCommand/
+ */
+export interface SimGetWebAclCommand {
+    readonly input: SimGetWebAclCommandInput;
+}
+export interface SimGetWebAclCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+}
+/**
+ * What GetWebACL reports about one web ACL.
+ */
+export interface SimWafWebAclOutput {
+    readonly Name: string;
+    readonly Id: string;
+    readonly ARN: string;
+    readonly Capacity: number;
+    readonly LabelNamespace: string;
+    readonly Description: string | undefined;
+    readonly DefaultAction: SimWafActionInput | undefined;
+    readonly Rules: readonly SimWafRuleInput[];
+    readonly VisibilityConfig: unknown;
+    readonly CustomResponseBodies: SimWafCustomResponseBodies | undefined;
+}
+export interface SimGetWebAclCommandOutput {
+    readonly WebACL?: SimWafWebAclOutput | undefined;
+    readonly LockToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 UpdateWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/UpdateWebACLCommand/
+ */
+export interface SimUpdateWebAclCommand {
+    readonly input: SimUpdateWebAclCommandInput;
+}
+export interface SimUpdateWebAclCommandInput extends SimWafWebAclWriteInput {
+    readonly Id?: string | undefined;
+    readonly LockToken?: string | undefined;
+}
+export interface SimUpdateWebAclCommandOutput {
+    readonly NextLockToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 ListWebACLs command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/ListWebACLsCommand/
+ */
+export interface SimListWebAclsCommand {
+    readonly input: SimListWebAclsCommandInput;
+}
+export interface SimListWebAclsCommandInput {
+    readonly Scope?: string | undefined;
+    readonly Limit?: number | undefined;
+    readonly NextMarker?: string | undefined;
+}
+export interface SimListWebAclsCommandOutput {
+    readonly WebACLs?: readonly SimWafSummaryOutput[] | undefined;
+    readonly NextMarker?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 DeleteWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/DeleteWebACLCommand/
+ */
+export interface SimDeleteWebAclCommand {
+    readonly input: SimDeleteWebAclCommandInput;
+}
+export interface SimDeleteWebAclCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly LockToken?: string | undefined;
+}
+export interface SimDeleteWebAclCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=web-acl.command.d.ts.map

package/dist/service/wafv2/command/web-acl/web-acl.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-acl.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/web-acl.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAEjE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACvE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/wafv2/command/web-acl/web-acl.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-acl.command.js.map

package/dist/service/wafv2/command/web-acl/web-acl.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-acl.command.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/web-acl.command.ts"],"names":[],"mappings":""}

package/dist/service/wafv2/error/sim-wafv2.error.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Minimal metadata shape for simulated WAFv2 errors.
+ */
+export interface SimWafErrorMetadata {
+    readonly httpStatusCode?: number;
+}
+/**
+ * Base class for simulated WAFv2 errors.
+ */
+export declare class SimWafError extends Error {
+    readonly $metadata: SimWafErrorMetadata;
+    constructor(message: string, $metadata?: SimWafErrorMetadata);
+}
+/**
+ * Simulated WAFv2 WAFInvalidParameterException error.
+ *
+ * WAFv2 reports input it will not accept this way, from a missing name to two
+ * rules claiming one priority.
+ */
+export declare class SimWafInvalidParameterException extends SimWafError {
+    readonly name = "WAFInvalidParameterException";
+    constructor(message: string);
+}
+/**
+ * Simulated WAFv2 WAFNonexistentItemException error.
+ *
+ * Reading, changing or deleting a web ACL, IP set or regex pattern set that is
+ * not there produces this, and so does a rule naming a regex pattern set that
+ * does not exist.
+ */
+export declare class SimWafNonexistentItemException extends SimWafError {
+    readonly name = "WAFNonexistentItemException";
+    constructor(message: string);
+}
+/**
+ * Simulated WAFv2 WAFDuplicateItemException error.
+ *
+ * Names are unique within one scope, so creating a second web ACL under a name
+ * that is taken fails rather than answering with the one that exists.
+ */
+export declare class SimWafDuplicateItemException extends SimWafError {
+    readonly name = "WAFDuplicateItemException";
+    constructor(message: string);
+}
+/**
+ * Simulated WAFv2 WAFOptimisticLockException error.
+ *
+ * Every WAFv2 resource carries a lock token that changes with each write, and
+ * a change made against a stale one is refused. That is how the API stops two
+ * callers overwriting each other's rules, and it is worth reproducing: code
+ * that keeps a token from an earlier read fails here the way it fails on AWS.
+ */
+export declare class SimWafOptimisticLockException extends SimWafError {
+    readonly name = "WAFOptimisticLockException";
+    constructor(message: string);
+}
+/**
+ * Request input that real WAFv2 takes and this simulation does not.
+ *
+ * Held apart from a validation failure because the two mean different things:
+ * one says the request is wrong, and this one says the request is right and
+ * the simulator does not go that far. A web ACL that accepted a rule it cannot
+ * evaluate would allow a request AWS blocks, and a silent hole in a security
+ * layer is worse than a missing one.
+ */
+export declare class SimWafUnsimulatedInputException extends SimWafError {
+    readonly name = "UnsimulatedInputException";
+    constructor(message: string);
+}
+/**
+ * Simulated WAFv2 WAFUnavailableEntityException error.
+ *
+ * An association names the resource a web ACL goes in front of, and WAFv2
+ * reports a resource it cannot reach this way. Here that is a REST API stage
+ * this simulation has never held.
+ */
+export declare class SimWafUnavailableEntityException extends SimWafError {
+    readonly name = "WAFUnavailableEntityException";
+    constructor(message: string);
+}
+/**
+ * Simulated WAFv2 WAFAssociatedItemException error.
+ *
+ * A web ACL in front of something cannot be deleted. Removing one that a stage
+ * still points at would leave the stage protected by rules nothing holds any
+ * more, so the association is disassociated first.
+ */
+export declare class SimWafAssociatedItemException extends SimWafError {
+    readonly name = "WAFAssociatedItemException";
+    constructor(message: string);
+}
+/**
+ * A match declared against this simulation that it cannot answer with.
+ *
+ * The four `CrossSiteScripting_*` rules of the core rule set detect nothing
+ * here, so a test says which requests they claim. This is a simulator
+ * configuration error rather than an AWS one, and it is raised where the
+ * declaration is made rather than where a request meets the rule: a rule name
+ * no managed group carries would otherwise sit there matching nothing.
+ */
+export declare class SimWafDeclarationError extends SimWafError {
+    readonly name = "SimWafDeclarationError";
+}
+//# sourceMappingURL=sim-wafv2.error.d.ts.map

package/dist/service/wafv2/error/sim-wafv2.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2.error.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/error/sim-wafv2.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;;;;GAKG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,kCAAkC;IAE/D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,8BAA+B,SAAQ,WAAW;IAC7D,SAAyB,IAAI,iCAAiC;IAE9D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,WAAW;IAC3D,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,gCAAiC,SAAQ,WAAW;IAC/D,SAAyB,IAAI,mCAAmC;IAEhE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,WAAW;IACrD,SAAyB,IAAI,4BAA4B;CAC1D"}

package/dist/service/wafv2/error/sim-wafv2.error.js

@@ -0,0 +1,115 @@
+/**
+ * Base class for simulated WAFv2 errors.
+ */
+export class SimWafError extends Error {
+    $metadata;
+    constructor(message, $metadata = {}) {
+        super(message);
+        this.$metadata = $metadata;
+    }
+}
+/**
+ * Simulated WAFv2 WAFInvalidParameterException error.
+ *
+ * WAFv2 reports input it will not accept this way, from a missing name to two
+ * rules claiming one priority.
+ */
+export class SimWafInvalidParameterException extends SimWafError {
+    name = "WAFInvalidParameterException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated WAFv2 WAFNonexistentItemException error.
+ *
+ * Reading, changing or deleting a web ACL, IP set or regex pattern set that is
+ * not there produces this, and so does a rule naming a regex pattern set that
+ * does not exist.
+ */
+export class SimWafNonexistentItemException extends SimWafError {
+    name = "WAFNonexistentItemException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated WAFv2 WAFDuplicateItemException error.
+ *
+ * Names are unique within one scope, so creating a second web ACL under a name
+ * that is taken fails rather than answering with the one that exists.
+ */
+export class SimWafDuplicateItemException extends SimWafError {
+    name = "WAFDuplicateItemException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated WAFv2 WAFOptimisticLockException error.
+ *
+ * Every WAFv2 resource carries a lock token that changes with each write, and
+ * a change made against a stale one is refused. That is how the API stops two
+ * callers overwriting each other's rules, and it is worth reproducing: code
+ * that keeps a token from an earlier read fails here the way it fails on AWS.
+ */
+export class SimWafOptimisticLockException extends SimWafError {
+    name = "WAFOptimisticLockException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Request input that real WAFv2 takes and this simulation does not.
+ *
+ * Held apart from a validation failure because the two mean different things:
+ * one says the request is wrong, and this one says the request is right and
+ * the simulator does not go that far. A web ACL that accepted a rule it cannot
+ * evaluate would allow a request AWS blocks, and a silent hole in a security
+ * layer is worse than a missing one.
+ */
+export class SimWafUnsimulatedInputException extends SimWafError {
+    name = "UnsimulatedInputException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated WAFv2 WAFUnavailableEntityException error.
+ *
+ * An association names the resource a web ACL goes in front of, and WAFv2
+ * reports a resource it cannot reach this way. Here that is a REST API stage
+ * this simulation has never held.
+ */
+export class SimWafUnavailableEntityException extends SimWafError {
+    name = "WAFUnavailableEntityException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated WAFv2 WAFAssociatedItemException error.
+ *
+ * A web ACL in front of something cannot be deleted. Removing one that a stage
+ * still points at would leave the stage protected by rules nothing holds any
+ * more, so the association is disassociated first.
+ */
+export class SimWafAssociatedItemException extends SimWafError {
+    name = "WAFAssociatedItemException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * A match declared against this simulation that it cannot answer with.
+ *
+ * The four `CrossSiteScripting_*` rules of the core rule set detect nothing
+ * here, so a test says which requests they claim. This is a simulator
+ * configuration error rather than an AWS one, and it is raised where the
+ * declaration is made rather than where a request meets the rule: a rule name
+ * no managed group carries would otherwise sit there matching nothing.
+ */
+export class SimWafDeclarationError extends SimWafError {
+    name = "SimWafDeclarationError";
+}
+//# sourceMappingURL=sim-wafv2.error.js.map

package/dist/service/wafv2/error/sim-wafv2.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2.error.js","sourceRoot":"","sources":["../../../../src/service/wafv2/error/sim-wafv2.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,8BAA8B,CAAC;IAE/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,8BAA+B,SAAQ,WAAW;IACpC,IAAI,GAAG,6BAA6B,CAAC;IAE9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAClC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gCAAiC,SAAQ,WAAW;IACtC,IAAI,GAAG,+BAA+B,CAAC;IAEhE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAuB,SAAQ,WAAW;IAC5B,IAAI,GAAG,wBAAwB,CAAC;CAC1D"}

package/dist/service/wafv2/evaluate/sim-waf-blocked-response.d.ts

@@ -0,0 +1,30 @@
+import type { SimWafHeader } from "../web-acl/sim-waf-custom-response.type.js";
+/**
+ * What a blocked request is answered with.
+ */
+export interface SimWafBlockedResponse {
+    readonly statusCode: number;
+    readonly contentType: string;
+    readonly body: string;
+    readonly headers: readonly SimWafHeader[];
+}
+/**
+ * The body a block action with no custom response of its own answers with.
+ *
+ * Real WAF hands the blocking off to whatever the web ACL is in front of, and
+ * each of them writes its own page. CloudFront writes an error page and API
+ * Gateway writes `{"message":"Forbidden"}`. This is the simulator's own body
+ * for all of them, which is a deliberate divergence recorded in
+ * `docs/services/wafv2`. The status is the 403 every one of them answers with,
+ * and a rule with a custom response replaces this whole thing anyway.
+ */
+export declare function simWafDefaultBlockedResponse(): SimWafBlockedResponse;
+/**
+ * Turn a blocked verdict into the HTTP response to send.
+ *
+ * This is what a serving path uses once a web ACL is in front of it, so the
+ * status, the body and the headers a custom response named all reach the
+ * client together.
+ */
+export declare function simWafBlockedHttpResponse(blocked: SimWafBlockedResponse): Response;
+//# sourceMappingURL=sim-waf-blocked-response.d.ts.map

package/dist/service/wafv2/evaluate/sim-waf-blocked-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-blocked-response.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/evaluate/sim-waf-blocked-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,qBAAqB,CASpE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,GAC7B,QAAQ,CAWV"}