@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js

@@ -34,21 +34,22 @@ export class SimCloudFrontCloudFormationResourceFactory {
      * Create a simulated CloudFront resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
         switch (resourceTypeName) {
             case "Distribution": {
-                return await this.distroCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.distroCreator.create(resource, properties, context);
             }
             case "Function": {
-                return await this.functionCreator.create(resource, context.resolvedProperties ?? resource.properties, context);
+                return await this.functionCreator.create(resource, properties, context);
             }
             case "ResponseHeadersPolicy": {
-                return this.responseHeadersPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return this.responseHeadersPolicyCreator.create(resource, properties);
             }
             case "OriginAccessControl": {
-                return this.originAccessControlCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return this.originAccessControlCreator.create(resource, properties);
             }
             case "KeyValueStore": {
-                return await this.keyValueStoreCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.keyValueStoreCreator.create(resource, properties);
             }
             default: {
                 throw new Error(`Unsupported sim CloudFront CloudFormation Resource ${resourceTypeName}`);

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cloudfront-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACpC,UAAU,CAAgB;IAC1B,aAAa,CAAwB;IACrC,eAAe,CAAmB;IAClC,aAAa,CAAwB;IACrC,4BAA4B,CAAuC;IACnE,0BAA0B,CAAqC;IAC/D,oBAAoB,CAA+B;IAEpE,YAAY,UAAyB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,4BAA4B;YAC/B,IAAI,oCAAoC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,0BAA0B,GAAG,IAAI,kCAAkC,CAAC;YACvE,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,4BAA4B,CAAC;YAC3D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CACpC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CACtC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,EACjD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAC7C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,EAAE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,WAAW,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAEvB,CAAC;QACd,aAAa,CACX,kBAAkB,EAClB,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cloudfront-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACpC,UAAU,CAAgB;IAC1B,aAAa,CAAwB;IACrC,eAAe,CAAmB;IAClC,aAAa,CAAwB;IACrC,4BAA4B,CAAuC;IACnE,0BAA0B,CAAqC;IAC/D,oBAAoB,CAA+B;IAEpE,YAAY,UAAyB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,4BAA4B;YAC/B,IAAI,oCAAoC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,0BAA0B,GAAG,IAAI,kCAAkC,CAAC;YACvE,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,4BAA4B,CAAC;YAC3D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QAErE,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACtE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,EAAE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,WAAW,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAEvB,CAAC;QACd,aAAa,CACX,kBAAkB,EAClB,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution.command.d.ts

@@ -46,6 +46,16 @@ export interface SimCloudFrontDistributionConfig {
         readonly Items?: readonly SimCloudFrontCacheBehaviorConfig[] | undefined;
     };
     readonly ViewerCertificate?: SimCloudFrontViewerCertificate | undefined;
+    /**
+     * The ARN of the `CLOUDFRONT` scope WAFv2 web ACL in front of the
+     * Distribution.
+     *
+     * CloudFront names its web ACL here rather than through `AssociateWebACL`,
+     * which WAFv2 keeps for the regional resource types. The name is the one the
+     * CloudFront API uses, and an empty value means no web ACL, as it does in
+     * AWS.
+     */
+    readonly WebACLId?: string | undefined;
 }
 /**
  * Minimal structural sim CloudFront CustomErrorResponse.

package/dist/service/cloudfront/command/create-distribution/create-distribution.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC3E;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EACX,SAAS,sCAAsC,EAAE,GACjD,SAAS,CAAC;KACf,CAAC;IACN,QAAQ,CAAC,OAAO,CAAC,EACb,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KAChD,CAAC;IACN,QAAQ,CAAC,OAAO,CAAC,EACb,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;KACnE,CAAC;IACN,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,uCAAuC,GACvC,SAAS,CAAC;IACd,QAAQ,CAAC,cAAc,CAAC,EACpB,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EACX,SAAS,gCAAgC,EAAE,GAC3C,SAAS,CAAC;KACf,CAAC;IACN,QAAQ,CAAC,iBAAiB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CACzE;AAED;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,uCAAuC;IAC/F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EACf,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,MAAM,iCAAiC,GACzC,WAAW,GACX,mBAAmB,GACnB,YAAY,CAAC"}
+{"version":3,"file":"create-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC3E;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EACX,SAAS,sCAAsC,EAAE,GACjD,SAAS,CAAC;KACf,CAAC;IACN,QAAQ,CAAC,OAAO,CAAC,EACb,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KAChD,CAAC;IACN,QAAQ,CAAC,OAAO,CAAC,EACb,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;KACnE,CAAC;IACN,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,uCAAuC,GACvC,SAAS,CAAC;IACd,QAAQ,CAAC,cAAc,CAAC,EACpB,SAAS,GACT;QACE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EACX,SAAS,gCAAgC,EAAE,GAC3C,SAAS,CAAC;KACf,CAAC;IACN,QAAQ,CAAC,iBAAiB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IACxE;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,uCAAuC;IAC/F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EACf,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,MAAM,iCAAiC,GACzC,WAAW,GACX,mBAAmB,GACnB,YAAY,CAAC"}

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.d.ts

@@ -7,6 +7,7 @@ import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfro
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import type { BackgroundScheduler } from "../../../../util/background/background.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
@@ -19,6 +20,7 @@ interface CreateDistributionCommandHandlerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver?: SimCfWebAclResolver | undefined;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly acmRegistry?: SimAcmRegistry | undefined;
     readonly background: BackgroundScheduler;

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EACjC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAC3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAKrF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAGhF,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAwC;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA0C;IACrF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAcjE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAqD7C;CACF"}
+{"version":3,"file":"create-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EACjC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAC3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAKrF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAGhF,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAwC;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA0C;IACrF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAcjE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAqD7C;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE,OAAO,EAAE,yCAAyC,EAAE,MAAM,6EAA6E,CAAC;AAExI,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAEnF,OAAO,EAAE,uCAAuC,EAAE,MAAM,8EAA8E,CAAC;AAsBvI;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,SAAS,CAAkB;IAC3B,aAAa,CAG5B;IACe,kBAAkB,CAAwB;IAC1C,wBAAwB,CAAwC;IAChE,UAAU,CAA+B;IACzC,0BAA0B,CAA0C;IACpE,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,wBAAwB;YAC3B,yCAAyC,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,IAAI,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,0BAA0B;YAC7B,IAAI,uCAAuC,CAAC;gBAC1C,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,uBAAuB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjE,aAAa,CACX,uBAAuB,EACvB,8CAA8C,CAC/C,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,yCAAyC,CAC9D,uBAAuB,CACxB,CAAC;QACF,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QAElD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,yEAAyE;QACzE,sDAAsD;QACtD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAE7D,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC;YACjD,cAAc;YACd,kBAAkB;YAClB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC1C,YAAY,CAAC,cAAc,EAC3B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,YAAY,CAAC,cAAc,CAC5B,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE,6BAA6B,CAAC,YAAY,CAAC;YACzD,QAAQ,EAAE,4DAA4D,YAAY,CAAC,cAAc,EAAE;YACnG,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAOvE,OAAO,EAAE,yCAAyC,EAAE,MAAM,6EAA6E,CAAC;AAExI,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAEnF,OAAO,EAAE,uCAAuC,EAAE,MAAM,8EAA8E,CAAC;AAuBvI;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,SAAS,CAAkB;IAC3B,aAAa,CAG5B;IACe,kBAAkB,CAAwB;IAC1C,wBAAwB,CAAwC;IAChE,UAAU,CAA+B;IACzC,0BAA0B,CAA0C;IACpE,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,wBAAwB;YAC3B,yCAAyC,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,IAAI,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,0BAA0B;YAC7B,IAAI,uCAAuC,CAAC;gBAC1C,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,uBAAuB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjE,aAAa,CACX,uBAAuB,EACvB,8CAA8C,CAC/C,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,yCAAyC,CAC9D,uBAAuB,CACxB,CAAC;QACF,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QAElD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,yEAAyE;QACzE,sDAAsD;QACtD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAE7D,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC;YACjD,cAAc;YACd,kBAAkB;YAClB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC1C,YAAY,CAAC,cAAc,EAC3B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,YAAY,CAAC,cAAc,CAC5B,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE,6BAA6B,CAAC,YAAY,CAAC;YACzD,QAAQ,EAAE,4DAA4D,YAAY,CAAC,cAAc,EAAE;YACnG,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/command/update-distribution/update-distribution.handler.d.ts

@@ -9,6 +9,7 @@ import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-cus
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import type { SimCloudFrontRegistry } from "../../registry/sim-cloud-front-registry.js";
 import type { SimUpdateDistributionCommand, SimUpdateDistributionCommandOutput } from "./update-distribution.command.js";
 interface UpdateDistributionCommandHandlerProperties {
@@ -19,6 +20,7 @@ interface UpdateDistributionCommandHandlerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver?: SimCfWebAclResolver | undefined;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly acmRegistry?: SimAcmRegistry | undefined;
     readonly background?: BackgroundScheduler;

package/dist/service/cloudfront/command/update-distribution/update-distribution.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAG3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAC3I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAGxF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAE1C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IACrE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA0C;IACrF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAajE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAoC7C;CACF"}
+{"version":3,"file":"update-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAG3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAC3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAGxF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAE1C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IACrE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA0C;IACrF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAajE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAoC7C;CACF"}

package/dist/service/cloudfront/command/update-distribution/update-distribution.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,qCAAqC,EAAE,MAAM,wDAAwD,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAK/F,OAAO,EAAE,uCAAuC,EAAE,MAAM,8EAA8E,CAAC;AACvI,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAMtF,OAAO,EAAE,yCAAyC,EAAE,MAAM,2DAA2D,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AA0BnF;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,aAAa,CAG5B;IACe,YAAY,CAAwC;IACpD,0BAA0B,CAA0C;IACpE,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EACJ,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,qCAAqC,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,0BAA0B;YAC7B,IAAI,uCAAuC,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7D,aAAa,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACxD,aAAa,CAAC,MAAM,EAAE,oDAAoD,CAAC,CAAC;QAE5E,MAAM,cAAc,GAAG,EAAiC,CAAC;QACzD,MAAM,kBAAkB,GAAG,IAAI,yCAAyC,CACtE,MAAM,CACP,CAAC,SAAS,EAAE,CAAC;QAEd,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,0CAA0C,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,oDAAoD;QACpD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAE7D,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAEhE,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE,6BAA6B,CAAC,YAAY,CAAC;YACzD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"update-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,qCAAqC,EAAE,MAAM,wDAAwD,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAK/F,OAAO,EAAE,uCAAuC,EAAE,MAAM,8EAA8E,CAAC;AACvI,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAOtF,OAAO,EAAE,yCAAyC,EAAE,MAAM,2DAA2D,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AA2BnF;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,aAAa,CAG5B;IACe,YAAY,CAAwC;IACpD,0BAA0B,CAA0C;IACpE,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EACJ,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,qCAAqC,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,0BAA0B;YAC7B,IAAI,uCAAuC,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7D,aAAa,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACxD,aAAa,CAAC,MAAM,EAAE,oDAAoD,CAAC,CAAC;QAE5E,MAAM,cAAc,GAAG,EAAiC,CAAC;QACzD,MAAM,kBAAkB,GAAG,IAAI,yCAAyC,CACtE,MAAM,CACP,CAAC,SAAS,EAAE,CAAC;QAEd,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,0CAA0C,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,oDAAoD;QACpD,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAE7D,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAEhE,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE,6BAA6B,CAAC,YAAY,CAAC;YACzD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/controller/dependency/sim-cf-controller-dependency.d.ts

@@ -6,10 +6,12 @@ import { SimCffApplicator } from "../cff/sim-cff-applicator.js";
 import { SimCloudFrontOriginFetcher } from "../origin/sim-cloudfront-origin-fetcher.js";
 import { SimCfCustomErrorResponder } from "../error/sim-cf-custom-error-responder.js";
 import { SimCfResponseHeadersApplicator } from "../response-headers/sim-cf-response-headers-applicator.js";
+import { SimCfWebAclGuard } from "../web-acl/sim-cf-web-acl-guard.js";
 export interface SimCloudFrontServiceControllerProperties {
     readonly simAws?: SimAws;
     readonly cloudFrontRegistry?: SimCloudFrontRegistry;
     readonly distroRouter?: SimCloudFrontDistroRouter;
+    readonly webAclGuard?: SimCfWebAclGuard;
     readonly behaviourResolver?: SimCloudFrontBehaviorResolver;
     readonly cffApplicator?: SimCffApplicator;
     readonly originFetcher?: SimCloudFrontOriginFetcher;
@@ -18,6 +20,7 @@ export interface SimCloudFrontServiceControllerProperties {
 }
 export interface SimCloudFrontControllerDependencies {
     readonly distroRouter: SimCloudFrontDistroRouter;
+    readonly webAclGuard: SimCfWebAclGuard;
     readonly behaviourResolver: SimCloudFrontBehaviorResolver;
     readonly cffApplicator: SimCffApplicator;
     readonly originFetcher: SimCloudFrontOriginFetcher;

package/dist/service/cloudfront/controller/dependency/sim-cf-controller-dependency.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-controller-dependency.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/dependency/sim-cf-controller-dependency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE/F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEzG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2DAA2D,CAAC;AAE3G,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAC3D,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IAC1D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,8BAA8B,CAAC;CACrE;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,8BAA8B,CAAC;CACpE;AAED;;GAEG;AACH,qBAAa,0CAA0C;IACrD;;OAEG;IACH,IAAI,CACF,UAAU,GAAE,wCAA6C,GACxD,mCAAmC,CA+BrC;CACF"}
+{"version":3,"file":"sim-cf-controller-dependency.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/dependency/sim-cf-controller-dependency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE/F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEzG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2DAA2D,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAGtE,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAC3D,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IAC1D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,8BAA8B,CAAC;CACrE;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,8BAA8B,CAAC;CACpE;AAED;;GAEG;AACH,qBAAa,0CAA0C;IACrD;;OAEG;IACH,IAAI,CACF,UAAU,GAAE,wCAA6C,GACxD,mCAAmC,CAkCrC;CACF"}

package/dist/service/cloudfront/controller/dependency/sim-cf-controller-dependency.js

@@ -5,6 +5,8 @@ import { SimCffApplicator } from "../cff/sim-cff-applicator.js";
 import { SimCloudFrontOriginFetcher } from "../origin/sim-cloudfront-origin-fetcher.js";
 import { SimCfCustomErrorResponder } from "../error/sim-cf-custom-error-responder.js";
 import { SimCfResponseHeadersApplicator } from "../response-headers/sim-cf-response-headers-applicator.js";
+import { SimCfWebAclGuard } from "../web-acl/sim-cf-web-acl-guard.js";
+import { makeSimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl-resolver.factory.js";
 /**
  * Builds the collaborators used by the CloudFront service controller.
  */
@@ -27,6 +29,8 @@ export class SimCloudFrontControllerDependenciesFactory {
                     simAws,
                     cloudFrontRegistry,
                 }),
+            webAclGuard: properties.webAclGuard ??
+                new SimCfWebAclGuard(makeSimCfWebAclResolver(simAws)),
             behaviourResolver,
             cffApplicator: properties.cffApplicator ?? new SimCffApplicator(),
             originFetcher,

package/dist/service/cloudfront/controller/dependency/sim-cf-controller-dependency.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-controller-dependency.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/dependency/sim-cf-controller-dependency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,OAAO,EAAE,yBAAyB,IAAI,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAE9H,OAAO,EAAE,6BAA6B,IAAI,oCAAoC,EAAE,MAAM,qDAAqD,CAAC;AAC5I,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2DAA2D,CAAC;AAsB3G;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACrD;;OAEG;IACH,IAAI,CACF,UAAU,GAA6C,EAAE;QAEzD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QACjD,MAAM,kBAAkB,GACtB,UAAU,CAAC,kBAAkB,IAAI,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC;QAE5E,wEAAwE;QACxE,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,iBAAiB,GACrB,UAAU,CAAC,iBAAiB;YAC5B,IAAI,oCAAoC,EAAE,CAAC;QAC7C,MAAM,aAAa,GACjB,UAAU,CAAC,aAAa,IAAI,IAAI,0BAA0B,EAAE,CAAC;QAE/D,OAAO;YACL,YAAY,EACV,UAAU,CAAC,YAAY;gBACvB,IAAI,gCAAgC,CAAC;oBACnC,MAAM;oBACN,kBAAkB;iBACnB,CAAC;YACJ,iBAAiB;YACjB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,IAAI,gBAAgB,EAAE;YACjE,aAAa;YACb,oBAAoB,EAClB,UAAU,CAAC,oBAAoB;gBAC/B,IAAI,yBAAyB,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;YACrE,yBAAyB,EACvB,UAAU,CAAC,yBAAyB;gBACpC,IAAI,8BAA8B,EAAE;SACvC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cf-controller-dependency.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/dependency/sim-cf-controller-dependency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,OAAO,EAAE,yBAAyB,IAAI,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAE9H,OAAO,EAAE,6BAA6B,IAAI,oCAAoC,EAAE,MAAM,qDAAqD,CAAC;AAC5I,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2DAA2D,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAwB3F;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACrD;;OAEG;IACH,IAAI,CACF,UAAU,GAA6C,EAAE;QAEzD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QACjD,MAAM,kBAAkB,GACtB,UAAU,CAAC,kBAAkB,IAAI,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC;QAE5E,wEAAwE;QACxE,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,iBAAiB,GACrB,UAAU,CAAC,iBAAiB;YAC5B,IAAI,oCAAoC,EAAE,CAAC;QAC7C,MAAM,aAAa,GACjB,UAAU,CAAC,aAAa,IAAI,IAAI,0BAA0B,EAAE,CAAC;QAE/D,OAAO;YACL,YAAY,EACV,UAAU,CAAC,YAAY;gBACvB,IAAI,gCAAgC,CAAC;oBACnC,MAAM;oBACN,kBAAkB;iBACnB,CAAC;YACJ,WAAW,EACT,UAAU,CAAC,WAAW;gBACtB,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACvD,iBAAiB;YACjB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,IAAI,gBAAgB,EAAE;YACjE,aAAa;YACb,oBAAoB,EAClB,UAAU,CAAC,oBAAoB;gBAC/B,IAAI,yBAAyB,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;YACrE,yBAAyB,EACvB,UAAU,CAAC,yBAAyB;gBACpC,IAAI,8BAA8B,EAAE;SACvC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.d.ts

@@ -1,10 +1,11 @@
 import type { SimCloudFrontControllerDependencies } from "./dependency/sim-cf-controller-dependency.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, apply the default root object, resolve the matching
- * Behavior, run viewer-request hooks, fetch from the Origin, replace an error
- * response with the Distribution's custom error page, apply the Behavior's
- * response headers policy, then run viewer-response hooks.
+ * route to a Distribution, put the request through the Distribution's web ACL,
+ * apply the default root object, resolve the matching Behavior, run
+ * viewer-request hooks, fetch from the Origin, replace an error response with
+ * the Distribution's custom error page, apply the Behavior's response headers
+ * policy, then run viewer-response hooks.
  *
  * This is the request-processing core, kept separate from the service
  * controller so the controller stays a thin adapter to the shared

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-request-pipeline.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AAGxG;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,mCAAmC,EAAI;IAE5E;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoEhD;CACF"}
+{"version":3,"file":"sim-cloudfront-request-pipeline.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AAGxG;;;;;;;;;;;;GAYG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,mCAAmC,EAAI;IAE5E;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiFhD;CACF"}

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.js

@@ -1,10 +1,11 @@
 import { simCfDefaultRootObjectRequest } from "./root-object/sim-cf-default-root-object-request.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, apply the default root object, resolve the matching
- * Behavior, run viewer-request hooks, fetch from the Origin, replace an error
- * response with the Distribution's custom error page, apply the Behavior's
- * response headers policy, then run viewer-response hooks.
+ * route to a Distribution, put the request through the Distribution's web ACL,
+ * apply the default root object, resolve the matching Behavior, run
+ * viewer-request hooks, fetch from the Origin, replace an error response with
+ * the Distribution's custom error page, apply the Behavior's response headers
+ * policy, then run viewer-response hooks.
  *
  * This is the request-processing core, kept separate from the service
  * controller so the controller stays a thin adapter to the shared
@@ -28,6 +29,15 @@ export class SimCloudFrontRequestPipeline {
             });
         }
         const { cloudFront, distribution: distro } = route;
+        // Put the request through the Distribution's web ACL, if it has one.
+        // CloudFront asks WAF before any content handling, so a blocked request is
+        // answered at the edge without a Behavior, a CloudFront Function or the
+        // Origin ever seeing it.
+        const webAclResult = await this.stages.webAclGuard.apply(requestReference, distro);
+        if (webAclResult instanceof Response) {
+            return webAclResult;
+        }
+        requestReference = webAclResult;
         requestReference = simCfDefaultRootObjectRequest(requestReference, distro);
         const behaviour = this.stages.behaviourResolver.resolve(requestReference, distro);
         // Handle viewer-request CFF, if any.

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-request-pipeline.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEpG;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA4B;IACV,MAAM;IAAnC,YAA6B,MAA2C;sBAA3C,MAAM;IAAwC,CAAC;IAE5E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,gDAAgD,EAAE;gBACpE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEnD,gBAAgB,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CACrD,gBAAgB,EAChB,MAAM,CACP,CAAC;QAEF,qCAAqC;QACrC,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAClE,UAAU,EACV,gBAAgB,EAChB,SAAS,CACV,CAAC;QACF,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,gBAAgB,GAAG,SAAS,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAC1D,gBAAgB,EAChB,MAAM,EACN,SAAS,CACV,CAAC;QAEF,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAChE,gBAAgB,EAChB,MAAM,EACN,cAAc,CACf,CAAC;QAEF,4EAA4E;QAC5E,+DAA+D;QAC/D,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAC1D,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,SAAS,CACV,CAAC;QAEF,sCAAsC;QACtC,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CACxD,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,SAAS,CACV,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cloudfront-request-pipeline.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEpG;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,4BAA4B;IACV,MAAM;IAAnC,YAA6B,MAA2C;sBAA3C,MAAM;IAAwC,CAAC;IAE5E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,gDAAgD,EAAE;gBACpE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEnD,qEAAqE;QACrE,2EAA2E;QAC3E,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CACtD,gBAAgB,EAChB,MAAM,CACP,CAAC;QACF,IAAI,YAAY,YAAY,QAAQ,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,gBAAgB,GAAG,YAAY,CAAC;QAEhC,gBAAgB,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CACrD,gBAAgB,EAChB,MAAM,CACP,CAAC;QAEF,qCAAqC;QACrC,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAClE,UAAU,EACV,gBAAgB,EAChB,SAAS,CACV,CAAC;QACF,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,gBAAgB,GAAG,SAAS,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAC1D,gBAAgB,EAChB,MAAM,EACN,SAAS,CACV,CAAC;QAEF,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAChE,gBAAgB,EAChB,MAAM,EACN,cAAc,CACf,CAAC;QAEF,4EAA4E;QAC5E,+DAA+D;QAC/D,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAC1D,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,SAAS,CACV,CAAC;QAEF,sCAAsC;QACtC,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CACxD,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,SAAS,CACV,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.d.ts

@@ -0,0 +1,25 @@
+import type { SimCloudFrontDistribution } from "../../distribution/sim-cloudfront-distribution.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
+/**
+ * Puts a request through the web ACL a Distribution names, before anything
+ * else has a look at it.
+ *
+ * CloudFront asks WAF ahead of every content-handling stage, so a blocked
+ * request never reaches a viewer-request CloudFront Function, a cache
+ * Behavior, a response headers policy or the Origin. It is answered at the
+ * edge with the 403 the web ACL's block action describes.
+ */
+export declare class SimCfWebAclGuard {
+    private readonly resolveWebAcl;
+    constructor(resolveWebAcl: SimCfWebAclResolver);
+    /**
+     * Answer with the request to carry on with, or the response a blocked
+     * request gets.
+     *
+     * The request comes back rather than a bare verdict because an allowing rule
+     * can insert headers into what is forwarded, which is what WAF's custom
+     * request handling is for.
+     */
+    apply(request: Request, distribution: SimCloudFrontDistribution): Promise<Request | Response>;
+}
+//# sourceMappingURL=sim-cf-web-acl-guard.d.ts.map

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-web-acl-guard.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAEnG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA1C,YAA6B,aAAa,EAAE,mBAAmB,EAAI;IAEnE;;;;;;;OAOG;IACG,KAAK,CACT,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,yBAAyB,GACtC,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CA8B7B;CACF"}

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.js

@@ -0,0 +1,86 @@
+import { simWafBlockedHttpResponse, simWafDefaultBlockedResponse, } from "../../../wafv2/evaluate/sim-waf-blocked-response.js";
+import { SimCloudFrontInvalidWebAclId } from "../../error/sim-cloudfront.error.js";
+/**
+ * Puts a request through the web ACL a Distribution names, before anything
+ * else has a look at it.
+ *
+ * CloudFront asks WAF ahead of every content-handling stage, so a blocked
+ * request never reaches a viewer-request CloudFront Function, a cache
+ * Behavior, a response headers policy or the Origin. It is answered at the
+ * edge with the 403 the web ACL's block action describes.
+ */
+export class SimCfWebAclGuard {
+    resolveWebAcl;
+    constructor(resolveWebAcl) {
+        this.resolveWebAcl = resolveWebAcl;
+    }
+    /**
+     * Answer with the request to carry on with, or the response a blocked
+     * request gets.
+     *
+     * The request comes back rather than a bare verdict because an allowing rule
+     * can insert headers into what is forwarded, which is what WAF's custom
+     * request handling is for.
+     */
+    async apply(request, distribution) {
+        const webAclArn = distribution.webAclArn;
+        if (webAclArn === undefined) {
+            return request;
+        }
+        const found = this.resolveWebAcl(webAclArn);
+        if (found === undefined) {
+            throw new SimCloudFrontInvalidWebAclId(`Sim CloudFront Distribution ${distribution.distributionId} names ` +
+                `web ACL ${webAclArn}, which does not exist. A web ACL a ` +
+                `Distribution is still in front of cannot be deleted in AWS, so a ` +
+                `simulation that deleted one has left the Distribution naming ` +
+                `nothing.`);
+        }
+        const decision = found.wafV2.evaluateRequest({
+            webAclArn,
+            request,
+            body: await requestBody(request),
+        });
+        return decision.action === "BLOCK"
+            ? simWafBlockedHttpResponse(decision.blocked ?? simWafDefaultBlockedResponse())
+            : allowedRequest(request, decision);
+    }
+}
+/**
+ * The request as it carries on past the web ACL.
+ *
+ * A rule that matched with custom request handling adds headers to what is
+ * forwarded, so the Origin and any CloudFront Function see them. A decision
+ * that inserted none leaves the request exactly as the viewer sent it.
+ */
+function allowedRequest(request, decision) {
+    if (decision.insertedHeaders.length === 0) {
+        return request;
+    }
+    const headers = new Headers(request.headers);
+    for (const header of decision.insertedHeaders) {
+        headers.set(header.name, header.value);
+    }
+    const isBodyAllowed = !/^(?:get|head)$/iu.test(request.method);
+    return new Request(request.url, {
+        method: request.method,
+        headers,
+        body: isBodyAllowed ? request.clone().body : null,
+        duplex: "half",
+        redirect: request.redirect,
+        signal: request.signal,
+    });
+}
+/**
+ * The request body the web ACL's rules are matched against.
+ *
+ * WAF reads the body of the request as it arrived, and a body is a stream that
+ * can only be read once, so it is read from a clone and the request carries on
+ * with its own copy intact.
+ */
+async function requestBody(request) {
+    if (request.body === null) {
+        return undefined;
+    }
+    return new Uint8Array(await request.clone().arrayBuffer());
+}
+//# sourceMappingURL=sim-cf-web-acl-guard.js.map

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-web-acl-guard.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAGnF;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IACE,aAAa;IAA1C,YAA6B,aAAkC;6BAAlC,aAAa;IAAwB,CAAC;IAEnE;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CACT,OAAgB,EAChB,YAAuC;QAEvC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;QAEzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,4BAA4B,CACpC,+BAA+B,YAAY,CAAC,cAAc,SAAS;gBACjE,WAAW,SAAS,sCAAsC;gBAC1D,mEAAmE;gBACnE,+DAA+D;gBAC/D,UAAU,CACb,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,SAAS;YACT,OAAO;YACP,IAAI,EAAE,MAAM,WAAW,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO;YAChC,CAAC,CAAC,yBAAyB,CACvB,QAAQ,CAAC,OAAO,IAAI,4BAA4B,EAAE,CACnD;YACH,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAgB,EAAE,QAAwB;IAChE,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,OAAgB;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts

@@ -2,12 +2,14 @@ import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-cus
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
-interface SimCloudFrontConfiguratorOrigins {
+interface SimCloudFrontConfiguratorProperties {
     readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**
  * Build the configurator that applies a DistributionConfig to a Distribution.
@@ -15,6 +17,6 @@ interface SimCloudFrontConfiguratorOrigins {
  * Creation and update apply the same config the same way, so they build the
  * same set of configurators.
  */
-export declare function makeSimCloudFrontDistributionConfigurator(origins: SimCloudFrontConfiguratorOrigins): SimCloudFrontDistributionConfigurator;
+export declare function makeSimCloudFrontDistributionConfigurator(properties: SimCloudFrontConfiguratorProperties): SimCloudFrontDistributionConfigurator;
 export {};
 //# sourceMappingURL=sim-cf-distribution-configurator.factory.d.ts.map

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-configurator.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAG3I,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AAGvG,UAAU,gCAAgC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;CAC9E;AAED;;;;;GAKG;AACH,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,gCAAgC,GACxC,qCAAqC,CAcvC"}
+{"version":3,"file":"sim-cf-distribution-configurator.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAE3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAG3E,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AAGvG,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;GAKG;AACH,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,mCAAmC,GAC9C,qCAAqC,CAevC"}

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,3 +1,4 @@
+import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -8,8 +9,8 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * Creation and update apply the same config the same way, so they build the
  * same set of configurators.
  */
-export function makeSimCloudFrontDistributionConfigurator(origins) {
-    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(origins.responseHeadersPolicies);
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(origins.s3OriginResolver, origins.originAccessControls, origins.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy);
+export function makeSimCloudFrontDistributionConfigurator(properties) {
+    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies);
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy, new SimCfDistributionWebAcl(properties.webAclResolver));
 }
 //# sourceMappingURL=sim-cf-distribution-configurator.factory.js.map

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-configurator.factory.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAS3F;;;;;GAKG;AACH,MAAM,UAAU,yCAAyC,CACvD,OAAyC;IAEzC,MAAM,qBAAqB,GAAG,IAAI,kCAAkC,CAClE,OAAO,CAAC,uBAAuB,CAChC,CAAC;IAEF,OAAO,IAAI,qCAAqC,CAC9C,IAAI,+BAA+B,CACjC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,sBAAsB,CAC/B,EACD,IAAI,iCAAiC,CAAC,qBAAqB,CAAC,EAC5D,qBAAqB,CACtB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cf-distribution-configurator.factory.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAU3F;;;;;GAKG;AACH,MAAM,UAAU,yCAAyC,CACvD,UAA+C;IAE/C,MAAM,qBAAqB,GAAG,IAAI,kCAAkC,CAClE,UAAU,CAAC,uBAAuB,CACnC,CAAC;IAEF,OAAO,IAAI,qCAAqC,CAC9C,IAAI,+BAA+B,CACjC,UAAU,CAAC,gBAAgB,EAC3B,UAAU,CAAC,oBAAoB,EAC/B,UAAU,CAAC,sBAAsB,CAClC,EACD,IAAI,iCAAiC,CAAC,qBAAqB,CAAC,EAC5D,qBAAqB,EACrB,IAAI,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CACvD,CAAC;AACJ,CAAC"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts

@@ -3,6 +3,7 @@ import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.j
 import type { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-configurator.js";
 import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
  *
@@ -15,13 +16,18 @@ import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-respo
  *
  * Named Cache Behaviors must be added after the default so that the default
  * always acts as the fallback when no path pattern matches.
+ *
+ * The web ACL comes before all of it, because a web ACL decides a request
+ * before any of the above handles it, and a config naming one that is not
+ * there is refused rather than half applied.
  */
 export declare class SimCloudFrontDistributionConfigurator {
     private readonly originConfigurator;
     private readonly behaviorConfigurator;
     private readonly responseHeadersPolicy;
+    private readonly webAcl;
     private readonly customErrorConfigurator;
-    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, webAcl: SimCfDistributionWebAcl);
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
      * is applied.

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAIvG;;;;;;;;;;;;GAYG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IANxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACvD,qBAAqB,EAAE,kCAAkC,EACxE;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAEN;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAiCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAGvG,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,8CAA8C,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACvD,qBAAqB,EAAE,kCAAkC,EACzD,MAAM,EAAE,uBAAuB,EAC9C;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAGN;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAsCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js

@@ -1,5 +1,6 @@
 import { SimCloudFrontCustomErrorConfigurator } from "./sim-cloud-front-custom-error-configurator.js";
 import { SimCloudFrontInvalidDefaultRootObject } from "../../error/sim-cloudfront.error.js";
+import { simCfWebAclArn, } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
  *
@@ -12,16 +13,22 @@ import { SimCloudFrontInvalidDefaultRootObject } from "../../error/sim-cloudfron
  *
  * Named Cache Behaviors must be added after the default so that the default
  * always acts as the fallback when no path pattern matches.
+ *
+ * The web ACL comes before all of it, because a web ACL decides a request
+ * before any of the above handles it, and a config naming one that is not
+ * there is refused rather than half applied.
  */
 export class SimCloudFrontDistributionConfigurator {
     originConfigurator;
     behaviorConfigurator;
     responseHeadersPolicy;
+    webAcl;
     customErrorConfigurator = new SimCloudFrontCustomErrorConfigurator();
-    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy) {
+    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy, webAcl) {
         this.originConfigurator = originConfigurator;
         this.behaviorConfigurator = behaviorConfigurator;
         this.responseHeadersPolicy = responseHeadersPolicy;
+        this.webAcl = webAcl;
     }
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
@@ -35,11 +42,16 @@ export class SimCloudFrontDistributionConfigurator {
      */
     assertConfigurable(distributionConfig) {
         this.responseHeadersPolicy.assertAllExist(distributionConfig);
+        this.webAcl.assertUsable(distributionConfig);
     }
     /**
      * Configure a Distribution from its DistributionConfig.
      */
     configure(distribution, distributionConfig) {
+        // A web ACL the simulation cannot find is refused before anything is
+        // applied, so a creation is turned away for it as an update already is.
+        this.webAcl.assertUsable(distributionConfig);
+        distribution.webAclArn = simCfWebAclArn(distributionConfig);
         const aliasItems = distributionConfig.Aliases?.Items ?? [];
         for (const alias of aliasItems) {
             distribution.addAlternateDomainName(alias);

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IANvB,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD,EACvD,qBAAyD;kCAFzD,kBAAkB;oCAClB,oBAAoB;qCACpB,qBAAqB;IACrC,CAAC;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAmD;QAEnD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAEL,cAAc,GACf,MAAM,8CAA8C,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,MAAM;IAPR,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD,EACvD,qBAAyD,EACzD,MAA+B;kCAH/B,kBAAkB;oCAClB,oBAAoB;qCACpB,qBAAqB;sBACrB,MAAM;IACtB,CAAC;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAmD;QAEnD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC7C,YAAY,CAAC,SAAS,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}