@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/cloudformation/sam/api/sim-cfn-sam-rest-api.js

@@ -0,0 +1,77 @@
+import { samCarriedAttributes, samResourceProperties, } from "../function/sim-cfn-sam-function-properties.js";
+import { samMergedApiProperties } from "../sim-cfn-sam-globals.js";
+import { samPickedProperties } from "../sim-cfn-sam-picked.js";
+import { samRestApiStageResources } from "./sim-cfn-sam-rest-api-stage.js";
+/**
+ * The SAM Resource type this expansion covers.
+ */
+export const samRestApiType = "AWS::Serverless::Api";
+/**
+ * The properties whose names and meanings are the same on both Resource types.
+ * Expanding one of them is carrying it across.
+ *
+ * `Auth`, `Cors`, `Domain`, `GatewayResponses`, `MethodSettings` and
+ * `BinaryMediaTypes` are absent from the list. SAM writes all of them into the
+ * Swagger document it generates, and none is expanded here, so an API
+ * declaring one is deployed without it.
+ */
+const propertyNames = new Set([
+    "Description",
+    "DisableExecuteApiEndpoint",
+    "Name",
+]);
+/**
+ * Expand one AWS::Serverless::Api into the Resources CloudFormation deploys
+ * for it.
+ *
+ * The API keeps the logical ID the template gave the SAM Resource. `Ref` and
+ * `Fn::GetAtt` against that name answer what they answer for the API, and an
+ * event naming the API by `RestApiId` reaches the one the template declared.
+ * Its deployment and stage are two Resources named after it.
+ *
+ * SAM expands a REST API through a Swagger 2.0 document, with the paths,
+ * methods and integrations written into the `Body` of the API. The Resources
+ * are written directly here instead, the way the HTTP API expansion beside
+ * this one does, so a method is an `AWS::ApiGateway::Method` a Stack holds and
+ * tears down rather than a line of a document nothing reads.
+ *
+ * A `DefinitionBody` goes on as the API's `Body`, which is imported where it
+ * is an OpenAPI 3.0 document. SAM writes Swagger 2.0 unless the template asks
+ * for `OpenApiVersion: 3.0.1`, and the API is created without a Swagger
+ * document and the record says so. A `DefinitionUri` points at a document on
+ * disk or in S3, and an API declaring one is left as the template wrote it, to
+ * be recorded as unsupported. The alternative is an API deployed with an empty
+ * path tree and no sign of why.
+ */
+export function samRestApiResources(properties) {
+    const { logicalId, resource, globals, defaultName = logicalId } = properties;
+    const apiProperties = samMergedApiProperties(globals, samResourceProperties(resource));
+    if (apiProperties["DefinitionUri"] !== undefined) {
+        return { [logicalId]: resource };
+    }
+    return {
+        [logicalId]: {
+            Type: "AWS::ApiGateway::RestApi",
+            ...samCarriedAttributes(resource),
+            Properties: {
+                Name: defaultName,
+                ...samPickedProperties(apiProperties, propertyNames),
+                ...samRestApiBody(apiProperties),
+            },
+        },
+        ...samRestApiStageResources({ logicalId, resource, apiProperties }),
+    };
+}
+/**
+ * The document the API is imported from, where the template declared one
+ * inline.
+ *
+ * A REST API is named whatever the template named it either way. The document
+ * carries a title of its own, and an API Gateway REST API takes a name whether
+ * a document declares one or not.
+ */
+function samRestApiBody(apiProperties) {
+    const definitionBody = apiProperties["DefinitionBody"];
+    return definitionBody === undefined ? {} : { Body: definitionBody };
+}
+//# sourceMappingURL=sim-cfn-sam-rest-api.js.map

package/dist/service/cloudformation/sam/api/sim-cfn-sam-rest-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-rest-api.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/sam/api/sim-cfn-sam-rest-api.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAc3E;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,aAAa;IACb,2BAA2B;IAC3B,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAyC;IAEzC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC;IAC7E,MAAM,aAAa,GAAG,sBAAsB,CAC1C,OAAO,EACP,qBAAqB,CAAC,QAAQ,CAAC,CAChC,CAAC;IAEF,IAAI,aAAa,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,OAAO;QACL,CAAC,SAAS,CAAC,EAAE;YACX,IAAI,EAAE,0BAA0B;YAChC,GAAG,oBAAoB,CAAC,QAAQ,CAAC;YACjC,UAAU,EAAE;gBACV,IAAI,EAAE,WAAW;gBACjB,GAAG,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC;gBACpD,GAAG,cAAc,CAAC,aAAa,CAAC;aACjC;SACF;QACD,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,aAAwC;IAExC,MAAM,cAAc,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAEvD,OAAO,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACtE,CAAC"}

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.d.ts

@@ -0,0 +1,16 @@
+import type { SimCfnTemplateValue } from "../../template/value/sim-cfn-template-value.js";
+/**
+ * The logical ID SAM builds for an API's stage, out of the API's logical ID
+ * and the stage's name.
+ *
+ * A name that can be part of an identifier goes in whole, and anything else is
+ * hashed, down to the ten hexadecimal characters SAM takes off a SHA-1 of the
+ * name. A stage the template names with an intrinsic function has no name to
+ * hash at this point, and SAM hashes the empty string for it.
+ *
+ * Both API kinds build the ID this way. An HTTP API has one form more, for the
+ * `$default` stage a REST API has no equivalent of, and spells that one before
+ * reaching here.
+ */
+export declare function samStageLogicalId(logicalId: string, stageName: SimCfnTemplateValue): string;
+//# sourceMappingURL=sim-cfn-sam-stage-logical-id.d.ts.map

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-stage-logical-id.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAE1F;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,mBAAmB,GAC7B,MAAM,CAMR"}

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.js

@@ -0,0 +1,29 @@
+import { createHash } from "node:crypto";
+/**
+ * The logical ID SAM builds for an API's stage, out of the API's logical ID
+ * and the stage's name.
+ *
+ * A name that can be part of an identifier goes in whole, and anything else is
+ * hashed, down to the ten hexadecimal characters SAM takes off a SHA-1 of the
+ * name. A stage the template names with an intrinsic function has no name to
+ * hash at this point, and SAM hashes the empty string for it.
+ *
+ * Both API kinds build the ID this way. An HTTP API has one form more, for the
+ * `$default` stage a REST API has no equivalent of, and spells that one before
+ * reaching here.
+ */
+export function samStageLogicalId(logicalId, stageName) {
+    if (typeof stageName === "string" && /^[A-Za-z0-9]+$/.test(stageName)) {
+        return `${logicalId}${stageName}Stage`;
+    }
+    return `${logicalId}Stage${samStageNameHash(stageName)}`;
+}
+/**
+ * The hash SAM builds a stage's logical ID out of when the name cannot be part
+ * of one.
+ */
+function samStageNameHash(stageName) {
+    const name = typeof stageName === "string" ? stageName : "";
+    return createHash("sha1").update(name).digest("hex").slice(0, 10);
+}
+//# sourceMappingURL=sim-cfn-sam-stage-logical-id.js.map

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-stage-logical-id.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,SAA8B;IAE9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,SAAS,GAAG,SAAS,OAAO,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,SAAS,QAAQ,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,SAA8B;IACtD,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+/**
+ * The path an `Api` event states, as the segments under the API's root.
+ *
+ * `/rates/{currency}` is two segments, and `/` is none. A REST API spells a
+ * path over one Resource per segment, where an HTTP API route states the whole
+ * path as its key, so this is where the two expansions part company.
+ */
+export declare function samApiEventPathParts(path: string): readonly string[];
+/**
+ * One AWS::ApiGateway::Resource per node the event's path needs, each naming
+ * its parent by `ParentId` and the top of the tree by `RootResourceId`.
+ *
+ * Nodes are keyed by the path they spell, so two events under one path share
+ * the node rather than declaring it twice. That is what puts `/rates` and
+ * `/rates/{currency}` on one branch of one tree, whether the events are on one
+ * function or spread over several.
+ *
+ * A node carries no `Condition`, the way the implicit API carries none. The
+ * tree is shared, and the other events on it may be conditioned differently or
+ * not at all. A path a conditioned-out function asked for is a node with no
+ * method on it, which answers nothing.
+ */
+export declare function samApiEventPathResources(apiLogicalId: string, path: readonly string[]): Record<string, SimCfnTemplateValue>;
+/**
+ * What names one node of the tree, which is the API's root resource for the
+ * empty path and a `Ref` to the node's own Resource otherwise.
+ */
+export declare function samApiEventResourceId(apiLogicalId: string, path: readonly string[]): SimCfnTemplateValueRecord;
+//# sourceMappingURL=sim-cfn-sam-api-event-path.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event-path.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAqBrC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,yBAAyB,CAI3B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.js

@@ -0,0 +1,69 @@
+import { createHash } from "node:crypto";
+/**
+ * The path an `Api` event states, as the segments under the API's root.
+ *
+ * `/rates/{currency}` is two segments, and `/` is none. A REST API spells a
+ * path over one Resource per segment, where an HTTP API route states the whole
+ * path as its key, so this is where the two expansions part company.
+ */
+export function samApiEventPathParts(path) {
+    return path.split("/").filter((part) => part.length > 0);
+}
+/**
+ * One AWS::ApiGateway::Resource per node the event's path needs, each naming
+ * its parent by `ParentId` and the top of the tree by `RootResourceId`.
+ *
+ * Nodes are keyed by the path they spell, so two events under one path share
+ * the node rather than declaring it twice. That is what puts `/rates` and
+ * `/rates/{currency}` on one branch of one tree, whether the events are on one
+ * function or spread over several.
+ *
+ * A node carries no `Condition`, the way the implicit API carries none. The
+ * tree is shared, and the other events on it may be conditioned differently or
+ * not at all. A path a conditioned-out function asked for is a node with no
+ * method on it, which answers nothing.
+ */
+export function samApiEventPathResources(apiLogicalId, path) {
+    return Object.fromEntries(path.map((pathPart, index) => {
+        const nodePath = path.slice(0, index + 1);
+        return [
+            samApiEventPathLogicalId(apiLogicalId, nodePath),
+            {
+                Type: "AWS::ApiGateway::Resource",
+                Properties: {
+                    RestApiId: { Ref: apiLogicalId },
+                    ParentId: samApiEventResourceId(apiLogicalId, nodePath.slice(0, -1)),
+                    PathPart: pathPart,
+                },
+            },
+        ];
+    }));
+}
+/**
+ * What names one node of the tree, which is the API's root resource for the
+ * empty path and a `Ref` to the node's own Resource otherwise.
+ */
+export function samApiEventResourceId(apiLogicalId, path) {
+    return path.length === 0
+        ? { "Fn::GetAtt": [apiLogicalId, "RootResourceId"] }
+        : { Ref: samApiEventPathLogicalId(apiLogicalId, path) };
+}
+/**
+ * The logical ID of the Resource carrying one node of the tree.
+ *
+ * SAM writes its paths into a Swagger document and so names no Resource for
+ * one, which leaves nothing here to match. The path is hashed the way SAM
+ * hashes anything it has to build an identifier out of, because a path part is
+ * `{currency}` or `{proxy+}` as often as it is a word, and every scheme that
+ * spells those out either drops the punctuation that tells them apart or
+ * produces an ID no reader gets anything from. Two events under one path hash
+ * alike and converge on the node.
+ */
+function samApiEventPathLogicalId(apiLogicalId, path) {
+    const hash = createHash("sha1")
+        .update(path.join("/"))
+        .digest("hex")
+        .slice(0, 10);
+    return `${apiLogicalId}Resource${hash}`;
+}
+//# sourceMappingURL=sim-cfn-sam-api-event-path.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event-path.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,IAAuB;IAEvB,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAE1C,OAAO;YACL,wBAAwB,CAAC,YAAY,EAAE,QAAQ,CAAC;YAChD;gBACE,IAAI,EAAE,2BAA2B;gBACjC,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;oBAChC,QAAQ,EAAE,qBAAqB,CAC7B,YAAY,EACZ,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACtB;oBACD,QAAQ,EAAE,QAAQ;iBACnB;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,IAAuB;IAEvB,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAE;QACpD,CAAC,CAAC,EAAE,GAAG,EAAE,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAC/B,YAAoB,EACpB,IAAuB;IAEvB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO,GAAG,YAAY,WAAW,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+/**
+ * Expand one `Api` event into the Resources that put a method in front of the
+ * function.
+ *
+ * The event becomes the nodes of the path it states, a method on the last of
+ * them carrying a proxy integration to the function, and the permission the
+ * API invokes the function under. An event naming no `RestApiId` brings the
+ * implicit API, its deployment and its stage with it, and an event naming one
+ * leaves all three to whatever declared it.
+ *
+ * The method and the permission are named after the function and the event, so
+ * two events on one function are two methods, and two functions answering the
+ * same API keep permissions of their own. Both are conditioned the way the
+ * function is, since a function the template conditioned out has nothing for a
+ * method to reach.
+ */
+export declare function samApiEventResources(event: SamFunctionEvent): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-cfn-sam-api-event.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,mDAAmD,CAAC;AAQ3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAYzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAsBrC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.js

@@ -0,0 +1,132 @@
+import { isSamTemplateRecord } from "../../sim-cfn-sam-record.js";
+import { samApiInvokePermissionResource } from "./sim-cfn-sam-api-invoke-permission.js";
+import { samApiEventPathParts, samApiEventPathResources, samApiEventResourceId, } from "./sim-cfn-sam-api-event-path.js";
+import { samImplicitRestApiLogicalId, samImplicitRestApiResources, } from "./sim-cfn-sam-implicit-rest-api.js";
+/**
+ * The method an event stating none is served under, matching the path whatever
+ * the request did to it.
+ */
+const anyMethod = "ANY";
+/**
+ * Expand one `Api` event into the Resources that put a method in front of the
+ * function.
+ *
+ * The event becomes the nodes of the path it states, a method on the last of
+ * them carrying a proxy integration to the function, and the permission the
+ * API invokes the function under. An event naming no `RestApiId` brings the
+ * implicit API, its deployment and its stage with it, and an event naming one
+ * leaves all three to whatever declared it.
+ *
+ * The method and the permission are named after the function and the event, so
+ * two events on one function are two methods, and two functions answering the
+ * same API keep permissions of their own. Both are conditioned the way the
+ * function is, since a function the template conditioned out has nothing for a
+ * method to reach.
+ */
+export function samApiEventResources(event) {
+    const restApiId = event.properties["RestApiId"];
+    const apiLogicalId = samApiEventApiLogicalId(restApiId);
+    const path = samApiEventPath(event.properties);
+    if (apiLogicalId === undefined || path === undefined) {
+        return {};
+    }
+    const prefix = `${event.functionLogicalId}${event.eventName}`;
+    return {
+        ...(restApiId === undefined &&
+            samImplicitRestApiResources(event.apiGlobals)),
+        ...samApiEventPathResources(apiLogicalId, path),
+        [`${prefix}Method`]: methodResource({ event, apiLogicalId, path }),
+        [`${prefix}Permission`]: samApiInvokePermissionResource({
+            event,
+            apiId: { Ref: apiLogicalId },
+            sourceArnSuffix: "/*/*/*",
+        }),
+    };
+}
+/**
+ * The logical ID of the API this event puts its method on.
+ *
+ * An event naming no `RestApiId` gets the implicit API. An event naming one
+ * states it as the logical ID or as a `Ref` to it, which is what SAM accepts,
+ * and both name a Resource of this template.
+ *
+ * A `RestApiId` written as anything else names an API whose root resource
+ * nothing here can reach, and a REST API path tree is built downwards from
+ * that root. Such an event expands into nothing, the way an event of a type
+ * this has no entry for does, and the function deploys with nothing in front
+ * of it.
+ */
+function samApiEventApiLogicalId(restApiId) {
+    if (restApiId === undefined) {
+        return samImplicitRestApiLogicalId;
+    }
+    if (typeof restApiId === "string") {
+        return restApiId;
+    }
+    const reference = isSamTemplateRecord(restApiId)
+        ? restApiId["Ref"]
+        : undefined;
+    return typeof reference === "string" ? reference : undefined;
+}
+/**
+ * The segments of the `Path` the event states.
+ *
+ * An event stating no path states no method either, since a REST API method
+ * hangs off a node of the tree and there is no node to hang it on. Nothing is
+ * expanded for it.
+ */
+function samApiEventPath(properties) {
+    const path = properties["Path"];
+    return typeof path === "string" ? samApiEventPathParts(path) : undefined;
+}
+/**
+ * The AWS::ApiGateway::Method the event's path and method are served by.
+ *
+ * SAM integrates an `Api` event as a proxy, which is the shape the function is
+ * handed the request in, and the REST API declares an integration as a block
+ * of the method. `Auth` on the event is not expanded, so the method authorizes
+ * nothing and every request matching it reaches the function.
+ */
+function methodResource(properties) {
+    const { event, apiLogicalId, path } = properties;
+    return {
+        Type: "AWS::ApiGateway::Method",
+        ...event.condition,
+        Properties: {
+            RestApiId: { Ref: apiLogicalId },
+            ResourceId: samApiEventResourceId(apiLogicalId, path),
+            HttpMethod: samApiEventHttpMethod(event.properties),
+            AuthorizationType: "NONE",
+            Integration: {
+                Type: "AWS_PROXY",
+                IntegrationHttpMethod: "POST",
+                Uri: {
+                    "Fn::Join": [
+                        "",
+                        [
+                            "arn:",
+                            { Ref: "AWS::Partition" },
+                            ":apigateway:",
+                            { Ref: "AWS::Region" },
+                            ":lambda:path/2015-03-31/functions/",
+                            { "Fn::GetAtt": [event.functionLogicalId, "Arn"] },
+                            "/invocations",
+                        ],
+                    ],
+                },
+            },
+        },
+    };
+}
+/**
+ * The HTTP method the event asked for.
+ *
+ * A method in lower case is upper-cased, the only case API Gateway takes, so
+ * the `any` a SAM template usually writes becomes `ANY`. An event stating no
+ * method gets `ANY` as well.
+ */
+function samApiEventHttpMethod(properties) {
+    const method = properties["Method"];
+    return typeof method === "string" ? method.toUpperCase() : anyMethod;
+}
+//# sourceMappingURL=sim-cfn-sam-api-event.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;GAGG;AACH,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAuB;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAE/C,IAAI,YAAY,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IAE9D,OAAO;QACL,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChD,GAAG,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC;QAC/C,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,8BAA8B,CAAC;YACtD,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,eAAe,EAAE,QAAQ;SAC1B,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,uBAAuB,CAC9B,SAA0C;IAE1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAClB,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,UAAqC;IAErC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEhC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAQD;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,UAAuC;IAEvC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;IAEjD,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAChC,UAAU,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC;YACrD,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC;YACnD,iBAAiB,EAAE,MAAM;YACzB,WAAW,EAAE;gBACX,IAAI,EAAE,WAAW;gBACjB,qBAAqB,EAAE,MAAM;gBAC7B,GAAG,EAAE;oBACH,UAAU,EAAE;wBACV,EAAE;wBACF;4BACE,MAAM;4BACN,EAAE,GAAG,EAAE,gBAAgB,EAAE;4BACzB,cAAc;4BACd,EAAE,GAAG,EAAE,aAAa,EAAE;4BACtB,oCAAoC;4BACpC,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;4BAClD,cAAc;yBACf;qBACF;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,UAAqC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+interface SamApiInvokePermissionProperties {
+    readonly event: SamFunctionEvent;
+    /** The API the permission is granted to, as the expanded Resources name it. */
+    readonly apiId: SimCfnTemplateValue;
+    /**
+     * What the source ARN wildcards after the API's id. An HTTP API addresses a
+     * request by stage and route, and a REST API by stage, method and resource
+     * path, so the two grants are a segment apart.
+     */
+    readonly sourceArnSuffix: string;
+}
+/**
+ * The AWS::Lambda::Permission an API invokes the function under.
+ *
+ * A Lambda proxy integration works only once the function's resource policy
+ * admits API Gateway. Without this the route answers 500.
+ *
+ * The source ARN wildcards everything under the API, the grant SAM writes.
+ * Every request this API sends the function is one an event of its own asked
+ * for.
+ */
+export declare function samApiInvokePermissionResource(properties: SamApiInvokePermissionProperties): SimCfnTemplateValueRecord;
+export {};
+//# sourceMappingURL=sim-cfn-sam-api-invoke-permission.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-invoke-permission.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,gCAAgC,GAC3C,yBAAyB,CA4B3B"}

package/dist/service/cloudformation/sam/function/event/{sim-cfn-sam-http-api-permission.js → sim-cfn-sam-api-invoke-permission.js}

@@ -1,14 +1,15 @@
 /**
- * The AWS::Lambda::Permission the API invokes the function under.
+ * The AWS::Lambda::Permission an API invokes the function under.
  *
  * A Lambda proxy integration works only once the function's resource policy
  * admits API Gateway. Without this the route answers 500.
  *
- * The source ARN wildcards the stage and the route, the grant SAM writes.
- * Every route this API sends the function is one an event of its own asked
+ * The source ARN wildcards everything under the API, the grant SAM writes.
+ * Every request this API sends the function is one an event of its own asked
  * for.
  */
-export function samHttpApiPermissionResource(event, apiId) {
+export function samApiInvokePermissionResource(properties) {
+    const { event, apiId, sourceArnSuffix } = properties;
     return {
         Type: "AWS::Lambda::Permission",
         ...event.condition,
@@ -28,11 +29,11 @@ export function samHttpApiPermissionResource(event, apiId) {
                         { Ref: "AWS::AccountId" },
                         ":",
                         apiId,
-                        "/*/*",
+                        sourceArnSuffix,
                     ],
                 ],
             },
         },
     };
 }
-//# sourceMappingURL=sim-cfn-sam-http-api-permission.js.map
+//# sourceMappingURL=sim-cfn-sam-api-invoke-permission.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-invoke-permission.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAA4C;IAE5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;IAErD,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,MAAM,EAAE,uBAAuB;YAC/B,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAChE,SAAS,EAAE,0BAA0B;YACrC,SAAS,EAAE;gBACT,UAAU,EAAE;oBACV,EAAE;oBACF;wBACE,MAAM;wBACN,EAAE,GAAG,EAAE,gBAAgB,EAAE;wBACzB,eAAe;wBACf,EAAE,GAAG,EAAE,aAAa,EAAE;wBACtB,GAAG;wBACH,EAAE,GAAG,EAAE,gBAAgB,EAAE;wBACzB,GAAG;wBACH,KAAK;wBACL,eAAe;qBAChB;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.d.ts

@@ -7,6 +7,11 @@ export interface SamFunctionEventsProperties {
     readonly logicalId: string;
     /** The function properties, with the `Globals` defaults already merged in. */
     readonly functionProperties: SimCfnTemplateValueRecord;
+    /**
+     * The `Globals.Api` defaults the template states, for the events that make
+     * an API of their own.
+     */
+    readonly apiGlobals: SimCfnTemplateValueRecord;
     /** The `Condition` the SAM Resource carried, where it carried one. */
     readonly condition: SimCfnTemplateValue | undefined;
 }
@@ -32,6 +37,12 @@ export interface SamFunctionEvent {
      * supplies nothing.
      */
     readonly condition: SimCfnTemplateValueRecord;
+    /**
+     * The `Globals.Api` defaults the template states. An `Api` event naming no
+     * `RestApiId` makes the implicit API, and SAM gives that API the same
+     * defaults as one the template declared.
+     */
+    readonly apiGlobals: SimCfnTemplateValueRecord;
 }
 /**
  * One event of a function, as the expansion tables are asked about it.

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-declared-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAI3D;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,2BAA2B,GACtC,SAAS,gBAAgB,EAAE,CAU7B"}
+{"version":3,"file":"sim-cfn-sam-declared-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAI3D;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,2BAA2B,GACtC,SAAS,gBAAgB,EAAE,CAU7B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.js

@@ -31,6 +31,7 @@ function declaredEvent(properties, eventName, event) {
                 eventName,
                 properties: isSamTemplateRecord(eventProperties) ? eventProperties : {},
                 condition: samConditionAttribute(properties.condition),
+                apiGlobals: properties.apiGlobals,
             },
         },
     ];

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-declared-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AA+C9E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAuC;IAEvC,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAC3D,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAuC,EACvC,SAAiB,EACjB,KAA0B;IAE1B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAE5C,OAAO;QACL;YACE,IAAI;YACJ,KAAK,EAAE;gBACL,iBAAiB,EAAE,UAAU,CAAC,SAAS;gBACvC,SAAS;gBACT,UAAU,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;gBACvE,SAAS,EAAE,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cfn-sam-declared-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AA0D9E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAuC;IAEvC,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAC3D,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAuC,EACvC,SAAiB,EACjB,KAA0B;IAE1B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAE5C,OAAO;QACL;YACE,IAAI;YACJ,KAAK,EAAE;gBACL,iBAAiB,EAAE,UAAU,CAAC,SAAS;gBACvC,SAAS;gBACT,UAAU,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;gBACvE,SAAS,EAAE,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC;gBACtD,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-function-events.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC5B,MAAM,iCAAiC,CAAC;AAYzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAStE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,gBAAgB,KACpB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEzC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,gBAAgB,KACpB,SAAS,eAAe,EAAE,CAAC;AA4ChC;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,2BAA2B,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAQrC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,2BAA2B,GACtC,SAAS,eAAe,EAAE,CAI5B"}
+{"version":3,"file":"sim-cfn-sam-function-events.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC5B,MAAM,iCAAiC,CAAC;AAazC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAStE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,gBAAgB,KACpB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEzC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,gBAAgB,KACpB,SAAS,eAAe,EAAE,CAAC;AA6ChC;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,2BAA2B,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAQrC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,2BAA2B,GACtC,SAAS,eAAe,EAAE,CAI5B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.js

@@ -1,6 +1,7 @@
 import { samDeclaredEvents } from "./sim-cfn-sam-declared-event.js";
 import { samDynamoDbEventResources, samSqsEventResources, } from "./sim-cfn-sam-event-source-mapping-event.js";
 import { samDynamoDbEventEdits, samSqsEventEdits, } from "./sim-cfn-sam-event-source-role.js";
+import { samApiEventResources } from "./sim-cfn-sam-api-event.js";
 import { samEventBridgeRuleEventResources } from "./sim-cfn-sam-event-bridge-rule-event.js";
 import { samHttpApiEventResources } from "./sim-cfn-sam-http-api-event.js";
 import { samS3EventEdits, samS3EventResources, } from "./sim-cfn-sam-s3-event.js";
@@ -17,6 +18,7 @@ import { samSnsEventResources } from "./sim-cfn-sam-sns-event.js";
  * template deploys a function nothing calls, and the deployment stands.
  */
 const eventExpansions = new Map([
+    ["Api", samApiEventResources],
     ["DynamoDB", samDynamoDbEventResources],
     ["EventBridgeRule", samEventBridgeRuleEventResources],
     ["HttpApi", samHttpApiEventResources],

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-function-events.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAmBlE;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAmD,IAAI,GAAG,CAC7E;IACE,CAAC,UAAU,EAAE,yBAAyB,CAAC;IACvC,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;IACrD,CAAC,SAAS,EAAE,wBAAwB,CAAC;IACrC,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAC3B,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,UAAU,EAAE,yBAAyB,CAAC;IACvC,CAAC,YAAY,EAAE,2BAA2B,CAAC;CAC5C,CACF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAA8C,IAAI,GAAG,CAAC;IACpE,CAAC,UAAU,EAAE,qBAAqB,CAAC;IACnC,CAAC,IAAI,EAAE,eAAe,CAAC;IACvB,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAuC;IAEvC,OAAO,MAAM,CAAC,WAAW,CACvB,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjD,MAAM,CAAC,OAAO,CACZ,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC3D,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAuC;IAEvC,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,CAC1C,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CACpE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cfn-sam-function-events.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-function-events.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAmBlE;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAmD,IAAI,GAAG,CAC7E;IACE,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,UAAU,EAAE,yBAAyB,CAAC;IACvC,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;IACrD,CAAC,SAAS,EAAE,wBAAwB,CAAC;IACrC,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAC3B,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,UAAU,EAAE,yBAAyB,CAAC;IACvC,CAAC,YAAY,EAAE,2BAA2B,CAAC;CAC5C,CACF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAA8C,IAAI,GAAG,CAAC;IACpE,CAAC,UAAU,EAAE,qBAAqB,CAAC;IACnC,CAAC,IAAI,EAAE,eAAe,CAAC;IACvB,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAuC;IAEvC,OAAO,MAAM,CAAC,WAAW,CACvB,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjD,MAAM,CAAC,OAAO,CACZ,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC3D,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAuC;IAEvC,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,CAC1C,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CACpE,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-http-api-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAQzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAgBrC"}
+{"version":3,"file":"sim-cfn-sam-http-api-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAQzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAoBrC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.js

@@ -1,5 +1,5 @@
 import { isSamTemplateRecord } from "../../sim-cfn-sam-record.js";
-import { samHttpApiPermissionResource } from "./sim-cfn-sam-http-api-permission.js";
+import { samApiInvokePermissionResource } from "./sim-cfn-sam-api-invoke-permission.js";
 import { samHttpApiRouteResource } from "./sim-cfn-sam-http-api-route.js";
 import { samImplicitHttpApiLogicalId, samImplicitHttpApiResources, } from "./sim-cfn-sam-implicit-http-api.js";
 /**
@@ -31,7 +31,11 @@ export function samHttpApiEventResources(event) {
             integrationLogicalId,
             event,
         }),
-        [`${prefix}Permission`]: samHttpApiPermissionResource(event, apiId),
+        [`${prefix}Permission`]: samApiInvokePermissionResource({
+            event,
+            apiId,
+            sourceArnSuffix: "/*/*",
+        }),
     };
 }
 /**

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sam-http-api-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAuB;IAEvB,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,SAAS,SAAS,CAAC;IACrE,MAAM,oBAAoB,GAAG,GAAG,MAAM,aAAa,CAAC;IAEpD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS;YACzC,2BAA2B,EAAE,CAAC;QAChC,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;QACzD,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,uBAAuB,CAAC;YAC1C,KAAK;YACL,oBAAoB;YACpB,KAAK;SACN,CAAC;QACF,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,KAAK,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAC3B,UAAqC;IAErC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,EAAE,2BAA2B,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,KAAuB,EACvB,KAA0B;IAE1B,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,KAAK,EAAE,KAAK;YACZ,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAClE,oBAAoB,EAAE,KAAK;SAC5B;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cfn-sam-http-api-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-http-api-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAuB;IAEvB,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,SAAS,SAAS,CAAC;IACrE,MAAM,oBAAoB,GAAG,GAAG,MAAM,aAAa,CAAC;IAEpD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS;YACzC,2BAA2B,EAAE,CAAC;QAChC,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;QACzD,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,uBAAuB,CAAC;YAC1C,KAAK;YACL,oBAAoB;YACpB,KAAK;SACN,CAAC;QACF,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,8BAA8B,CAAC;YACtD,KAAK;YACL,KAAK;YACL,eAAe,EAAE,MAAM;SACxB,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAC3B,UAAqC;IAErC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,EAAE,2BAA2B,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,KAAuB,EACvB,KAA0B;IAE1B,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,KAAK,EAAE,KAAK;YACZ,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAClE,oBAAoB,EAAE,KAAK;SAC5B;KACF,CAAC;AACJ,CAAC"}