@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimWafIpSet } from "../../ip-set/sim-waf-ip-set.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+interface SimCfnWafIpSetCreatorProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * Creates simulated IP sets from AWS::WAFv2::IPSet Resources.
+ *
+ * Nothing evaluates an IP set here, because a rule referring to one is
+ * refused: every request in this simulation comes from 127.0.0.1. The set is
+ * still deployed, so a stack that declares one deploys whole and a test can
+ * read back the ranges it was written with.
+ */
+export declare class SimCfnWafIpSetCreator {
+    #private;
+    constructor(properties: SimCfnWafIpSetCreatorProperties);
+    /**
+     * Create the IP set an AWS::WAFv2::IPSet Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafIpSet>;
+    /**
+     * Delete the IP set an AWS::WAFv2::IPSet Resource created.
+     */
+    delete(resource: SimCfnResource, ipSet: SimWafIpSet): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-waf-ip-set-creator.d.ts.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAKnD,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;;IAGhC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,WAAW,CAAC,CA8BtB;IAED;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxE;CACF"}

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.js

@@ -0,0 +1,49 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafIpSetResourceType } from "../sim-cfn-waf-resource-types.js";
+import { SimCfnWafIpSetConfig } from "./sim-cfn-waf-ip-set-config.js";
+/**
+ * Creates simulated IP sets from AWS::WAFv2::IPSet Resources.
+ *
+ * Nothing evaluates an IP set here, because a rule referring to one is
+ * refused: every request in this simulation comes from 127.0.0.1. The set is
+ * still deployed, so a stack that declares one deploys whole and a test can
+ * read back the ranges it was written with.
+ */
+export class SimCfnWafIpSetCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Create the IP set an AWS::WAFv2::IPSet Resource describes.
+     */
+    async create(resource, properties) {
+        const input = new SimCfnWafIpSetConfig({
+            resource,
+            properties,
+        }).createInput();
+        return await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => {
+            const created = await this.#wafV2.createIpSet({ input });
+            const arn = created.Summary?.ARN;
+            assertDefined(arn, `sim WAFv2 IP set ARN for CloudFormation Resource ${resource.logicalId}`);
+            const ipSet = this.#wafV2.findIpSetByArn(arn);
+            assertDefined(ipSet, `sim WAFv2 IP set ${arn} after CloudFormation creation`);
+            return ipSet;
+        });
+    }
+    /**
+     * Delete the IP set an AWS::WAFv2::IPSet Resource created.
+     */
+    async delete(resource, ipSet) {
+        await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteIpSet({
+            input: {
+                Name: ipSet.name,
+                Scope: ipSet.scope,
+                Id: ipSet.id,
+                LockToken: ipSet.lockToken,
+            },
+        }));
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-ip-set-creator.js.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAMtE;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACvB,MAAM,CAAW;IAE1B,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC;YACrC,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjB,OAAO,MAAM,wBAAwB,CACnC,oBAAoB,EACpB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,oDACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAE9C,aAAa,CACX,KAAK,EACL,oBAAoB,GAAG,gCAAgC,CACxD,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,KAAkB;QACvD,MAAM,wBAAwB,CAC5B,oBAAoB,EACpB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.d.ts

@@ -0,0 +1,19 @@
+import type { SimCreateRegexPatternSetCommandInput } from "../../command/regex-pattern-set/regex-pattern-set.command.js";
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+/**
+ * Reads an AWS::WAFv2::RegexPatternSet Resource into what
+ * CreateRegexPatternSet takes.
+ *
+ * This is the one place where CloudFormation and the API disagree about the
+ * shape of a WAFv2 resource. `RegularExpressionList` is a list of strings in a
+ * template and a list of `{ RegexString }` objects in the API, so the patterns
+ * are wrapped on the way through rather than passed along.
+ */
+export declare class SimCfnWafRegexPatternSetConfig extends SimCfnWafResourceConfig {
+    protected get resourceType(): string;
+    /**
+     * The input the pattern set this Resource describes is created from.
+     */
+    createInput(): SimCreateRegexPatternSetCommandInput;
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-config.d.ts.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,8DAA8D,CAAC;AACzH,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAG5E;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,SAAQ,uBAAuB;IACzE,cAAuB,YAAY,IAAI,MAAM,CAE5C;IAED;;OAEG;IACH,WAAW,IAAI,oCAAoC,CASlD;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.js

@@ -0,0 +1,28 @@
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+import { wafRegexPatternSetResourceType } from "../sim-cfn-waf-resource-types.js";
+/**
+ * Reads an AWS::WAFv2::RegexPatternSet Resource into what
+ * CreateRegexPatternSet takes.
+ *
+ * This is the one place where CloudFormation and the API disagree about the
+ * shape of a WAFv2 resource. `RegularExpressionList` is a list of strings in a
+ * template and a list of `{ RegexString }` objects in the API, so the patterns
+ * are wrapped on the way through rather than passed along.
+ */
+export class SimCfnWafRegexPatternSetConfig extends SimCfnWafResourceConfig {
+    get resourceType() {
+        return wafRegexPatternSetResourceType;
+    }
+    /**
+     * The input the pattern set this Resource describes is created from.
+     */
+    createInput() {
+        return {
+            Name: this.name(),
+            Scope: this.scope(),
+            Description: this.description(),
+            RegularExpressionList: this.requiredStrings("RegularExpressionList").map((pattern) => ({ RegexString: pattern })),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-config.js.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA+B,SAAQ,uBAAuB;IACzE,IAAuB,YAAY;QACjC,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,qBAAqB,EAAE,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAAG,CACtE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CACxC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimWafRegexPatternSet } from "../../regex-pattern-set/sim-waf-regex-pattern-set.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+interface SimCfnWafRegexPatternSetCreatorProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * Creates simulated regex pattern sets from AWS::WAFv2::RegexPatternSet
+ * Resources.
+ *
+ * Every pattern is compiled by CreateRegexPatternSet, so an expression that
+ * will not compile fails the deployment where it was written rather than
+ * quietly matching nothing when a request arrives.
+ */
+export declare class SimCfnWafRegexPatternSetCreator {
+    #private;
+    constructor(properties: SimCfnWafRegexPatternSetCreatorProperties);
+    /**
+     * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafRegexPatternSet>;
+    /**
+     * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
+     */
+    delete(resource: SimCfnResource, patternSet: SimWafRegexPatternSet): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-waf-regex-set-creator.d.ts.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAKnD,UAAU,yCAAyC;IACjD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;;IAG1C,YAAY,UAAU,EAAE,yCAAyC,EAEhE;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,qBAAqB,CAAC,CA8BhC;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,IAAI,CAAC,CAcf;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.js

@@ -0,0 +1,49 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafRegexPatternSetResourceType } from "../sim-cfn-waf-resource-types.js";
+import { SimCfnWafRegexPatternSetConfig } from "./sim-cfn-waf-regex-set-config.js";
+/**
+ * Creates simulated regex pattern sets from AWS::WAFv2::RegexPatternSet
+ * Resources.
+ *
+ * Every pattern is compiled by CreateRegexPatternSet, so an expression that
+ * will not compile fails the deployment where it was written rather than
+ * quietly matching nothing when a request arrives.
+ */
+export class SimCfnWafRegexPatternSetCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
+     */
+    async create(resource, properties) {
+        const input = new SimCfnWafRegexPatternSetConfig({
+            resource,
+            properties,
+        }).createInput();
+        return await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => {
+            const created = await this.#wafV2.createRegexPatternSet({ input });
+            const arn = created.Summary?.ARN;
+            assertDefined(arn, `sim WAFv2 regex pattern set ARN for CloudFormation Resource ${resource.logicalId}`);
+            const patternSet = this.#wafV2.findRegexPatternSetByArn(arn);
+            assertDefined(patternSet, `sim WAFv2 regex pattern set ${arn} after CloudFormation creation`);
+            return patternSet;
+        });
+    }
+    /**
+     * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
+     */
+    async delete(resource, patternSet) {
+        await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteRegexPatternSet({
+            input: {
+                Name: patternSet.name,
+                Scope: patternSet.scope,
+                Id: patternSet.id,
+                LockToken: patternSet.lockToken,
+            },
+        }));
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-creator.js.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AAMnF;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACjC,MAAM,CAAW;IAE1B,YAAY,UAAqD;QAC/D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,8BAA8B,CAAC;YAC/C,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjB,OAAO,MAAM,wBAAwB,CACnC,8BAA8B,EAC9B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,+DACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAE7D,aAAa,CACX,UAAU,EACV,+BAA+B,GAAG,gCAAgC,CACnE,CAAC;YAEF,OAAO,UAAU,CAAC;QACpB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAiC;QAEjC,MAAM,wBAAwB,CAC5B,8BAA8B,EAC9B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;YACtC,KAAK,EAAE;gBACL,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.d.ts

@@ -0,0 +1,32 @@
+import type { SimWafV2 } from "../sim-wafv2.js";
+import { SimCfnWafAssociationCreator } from "./association/sim-cfn-waf-association-creator.js";
+import { SimCfnWafIpSetCreator } from "./ip-set/sim-cfn-waf-ip-set-creator.js";
+import { SimCfnWafRegexPatternSetCreator } from "./regex-pattern-set/sim-cfn-waf-regex-set-creator.js";
+import { SimCfnWafWebAclCreator } from "./web-acl/sim-cfn-waf-web-acl-creator.js";
+/**
+ * The creator behind each simulated WAFv2 Resource type.
+ *
+ * Both halves of the CloudFormation lifecycle need all four, because each
+ * creator owns the deletion of what it made as well as the making of it, so
+ * the set is built once here and handed to the factory and its deleter.
+ */
+export interface SimCfnWafCreators {
+    readonly webAcl: SimCfnWafWebAclCreator;
+    readonly association: SimCfnWafAssociationCreator;
+    readonly ipSet: SimCfnWafIpSetCreator;
+    readonly regexPatternSet: SimCfnWafRegexPatternSetCreator;
+}
+/**
+ * Build the creators for one simulated WAFv2.
+ */
+export declare function simCfnWafCreators(wafV2: SimWafV2): SimCfnWafCreators;
+/**
+ * The error a Resource type this factory does not model is refused with.
+ *
+ * Sim CloudFormation reads it as a Resource to record and step over, which is
+ * the right answer for a rule group or a logging configuration: neither has
+ * anything behind it here, and a stack declaring one says so in its skipped
+ * Resources rather than failing.
+ */
+export declare function unsupportedSimWafResourceType(resourceTypeName: string, operationSuffix: string): Error;
+//# sourceMappingURL=sim-cfn-waf-creators.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-creators.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-creators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,+BAA+B,CAAC;CAC3D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,iBAAiB,CAOpE;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,GACtB,KAAK,CAKP"}

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.js

@@ -0,0 +1,28 @@
+import { SimCfnWafAssociationCreator } from "./association/sim-cfn-waf-association-creator.js";
+import { SimCfnWafIpSetCreator } from "./ip-set/sim-cfn-waf-ip-set-creator.js";
+import { SimCfnWafRegexPatternSetCreator } from "./regex-pattern-set/sim-cfn-waf-regex-set-creator.js";
+import { SimCfnWafWebAclCreator } from "./web-acl/sim-cfn-waf-web-acl-creator.js";
+/**
+ * Build the creators for one simulated WAFv2.
+ */
+export function simCfnWafCreators(wafV2) {
+    return {
+        webAcl: new SimCfnWafWebAclCreator({ wafV2 }),
+        association: new SimCfnWafAssociationCreator({ wafV2 }),
+        ipSet: new SimCfnWafIpSetCreator({ wafV2 }),
+        regexPatternSet: new SimCfnWafRegexPatternSetCreator({ wafV2 }),
+    };
+}
+/**
+ * The error a Resource type this factory does not model is refused with.
+ *
+ * Sim CloudFormation reads it as a Resource to record and step over, which is
+ * the right answer for a rule group or a logging configuration: neither has
+ * anything behind it here, and a stack declaring one says so in its skipped
+ * Resources rather than failing.
+ */
+export function unsupportedSimWafResourceType(resourceTypeName, operationSuffix) {
+    return new Error(`Unsupported sim WAFv2 CloudFormation Resource ` +
+        `${resourceTypeName}${operationSuffix}`);
+}
+//# sourceMappingURL=sim-cfn-waf-creators.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-creators.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-creators.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAgBlF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,OAAO;QACL,MAAM,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,WAAW,EAAE,IAAI,2BAA2B,CAAC,EAAE,KAAK,EAAE,CAAC;QACvD,KAAK,EAAE,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC;QAC3C,eAAe,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,gBAAwB,EACxB,eAAuB;IAEvB,OAAO,IAAI,KAAK,CACd,gDAAgD;QAC9C,GAAG,gBAAgB,GAAG,eAAe,EAAE,CAC1C,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.d.ts

@@ -0,0 +1,72 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+export interface SimCfnWafResourceConfigProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * What the three named WAFv2 Resource types read the same way.
+ *
+ * A web ACL, an IP set and a regex pattern set are each named within a scope
+ * and carry an optional description, and each is created through the ordinary
+ * WAFv2 command for it. What is left to a subclass is the handful of
+ * properties that say which of the three it is.
+ *
+ * The scope is read as whatever the template wrote and handed straight to the
+ * command, which refuses anything that is not `CLOUDFRONT` or `REGIONAL` and
+ * refuses `CLOUDFRONT` outside `us-east-1`. Deciding it here as well would be
+ * a second answer to a question WAFv2 already answers.
+ */
+export declare abstract class SimCfnWafResourceConfig {
+    protected readonly resource: SimCfnResource;
+    protected readonly properties: SimCfnTemplateValueRecord;
+    constructor(properties: SimCfnWafResourceConfigProperties);
+    /**
+     * The CloudFormation Resource type this reads, as a refusal names it.
+     */
+    protected abstract get resourceType(): string;
+    /**
+     * The resource name.
+     *
+     * `Name` is optional on all three types, and an unnamed resource is named
+     * after the stack and the logical ID as real CloudFormation names one. The
+     * name is part of the ARN and of what `Ref` answers with, so a template that
+     * leaves it out still gets something a test can predict.
+     */
+    name(): string;
+    /**
+     * The scope the resource belongs to, as the template wrote it.
+     */
+    scope(): string | undefined;
+    /**
+     * The description, when the template gave one.
+     */
+    description(): string | undefined;
+    /**
+     * One property of the Resource, whatever shape it is in.
+     */
+    protected value(key: string): SimCfnTemplateValue | undefined;
+    /**
+     * One string property, or nothing when the template left it out.
+     */
+    protected text(key: string): string | undefined;
+    /**
+     * One list-of-strings property, or nothing when the template left it out.
+     */
+    protected strings(key: string): readonly string[] | undefined;
+    /**
+     * One list-of-strings property the Resource type requires.
+     *
+     * An omitted list is refused rather than read as an empty one. Both places
+     * this is used name a list CloudFormation requires, and an empty IP set or
+     * pattern set matches nothing, so a template that misspells `Addresses`
+     * would otherwise deploy a set with nothing in it and a rule pointing at it
+     * that never fires.
+     */
+    protected requiredStrings(key: string): readonly string[];
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    protected refuse(reason: string): never;
+}
+//# sourceMappingURL=sim-cfn-waf-resource-config.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-config.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AASvE,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;;;;;;GAYG;AACH,8BAAsB,uBAAuB;IAC3C,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAEzD,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,CAAC;IAE9C;;;;;;;OAOG;IACH,IAAI,IAAI,MAAM,CAWb;IAED;;OAEG;IACH,KAAK,IAAI,MAAM,GAAG,SAAS,CAE1B;IAED;;OAEG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAG5D;IAED;;OAEG;IACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9C;IAED;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAkB5D;IAED;;;;;;;;OAQG;IACH,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAExD;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAMtC;CACF"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.js

@@ -0,0 +1,114 @@
+import { SimCfnGeneratedResourceName } from "../../cloudformation/resource/name/sim-cfn-generated-resource-name.js";
+import { simCfnWafResourceError } from "./sim-cfn-waf-resource-error.js";
+/**
+ * How long a WAFv2 resource name may be, which is the same for all three of
+ * the named types.
+ */
+const maximumNameLength = 128;
+/**
+ * What the three named WAFv2 Resource types read the same way.
+ *
+ * A web ACL, an IP set and a regex pattern set are each named within a scope
+ * and carry an optional description, and each is created through the ordinary
+ * WAFv2 command for it. What is left to a subclass is the handful of
+ * properties that say which of the three it is.
+ *
+ * The scope is read as whatever the template wrote and handed straight to the
+ * command, which refuses anything that is not `CLOUDFRONT` or `REGIONAL` and
+ * refuses `CLOUDFRONT` outside `us-east-1`. Deciding it here as well would be
+ * a second answer to a question WAFv2 already answers.
+ */
+export class SimCfnWafResourceConfig {
+    resource;
+    properties;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * The resource name.
+     *
+     * `Name` is optional on all three types, and an unnamed resource is named
+     * after the stack and the logical ID as real CloudFormation names one. The
+     * name is part of the ARN and of what `Ref` answers with, so a template that
+     * leaves it out still gets something a test can predict.
+     */
+    name() {
+        const name = this.text("Name");
+        return (name ??
+            new SimCfnGeneratedResourceName({
+                stackName: this.resource.stackName,
+                logicalId: this.resource.logicalId,
+                maximumLength: maximumNameLength,
+            }).value);
+    }
+    /**
+     * The scope the resource belongs to, as the template wrote it.
+     */
+    scope() {
+        return this.text("Scope");
+    }
+    /**
+     * The description, when the template gave one.
+     */
+    description() {
+        return this.text("Description");
+    }
+    /**
+     * One property of the Resource, whatever shape it is in.
+     */
+    value(key) {
+        // oxlint-disable-next-line security/detect-object-injection
+        return this.properties[key] ?? undefined;
+    }
+    /**
+     * One string property, or nothing when the template left it out.
+     */
+    text(key) {
+        const value = this.value(key);
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "string") {
+            this.refuse(`${key} must be a string`);
+        }
+        return value;
+    }
+    /**
+     * One list-of-strings property, or nothing when the template left it out.
+     */
+    strings(key) {
+        const value = this.value(key);
+        if (value === undefined) {
+            return undefined;
+        }
+        if (!Array.isArray(value)) {
+            this.refuse(`${key} must be a list`);
+        }
+        return value.map((entry) => {
+            if (typeof entry !== "string") {
+                this.refuse(`every entry of ${key} must be a string`);
+            }
+            return entry;
+        });
+    }
+    /**
+     * One list-of-strings property the Resource type requires.
+     *
+     * An omitted list is refused rather than read as an empty one. Both places
+     * this is used name a list CloudFormation requires, and an empty IP set or
+     * pattern set matches nothing, so a template that misspells `Addresses`
+     * would otherwise deploy a set with nothing in it and a rule pointing at it
+     * that never fires.
+     */
+    requiredStrings(key) {
+        return this.strings(key) ?? this.refuse(`${key} is required`);
+    }
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    refuse(reason) {
+        throw simCfnWafResourceError(this.resourceType, this.resource.logicalId, reason);
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-resource-config.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-config.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,uEAAuE,CAAC;AAMpH,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;GAGG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAO9B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAgB,uBAAuB;IACxB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IAEzD,YAAY,UAA6C;QACvD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAOD;;;;;;;OAOG;IACH,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,CACL,IAAI;YACJ,IAAI,2BAA2B,CAAC;gBAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,aAAa,EAAE,iBAAiB;aACjC,CAAC,CAAC,KAAK,CACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,GAAW;QACzB,4DAA4D;QAC5D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IAC3C,CAAC;IAED;;OAEG;IACO,IAAI,CAAC,GAAW;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACO,OAAO,CAAC,GAAW;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,mBAAmB,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACO,eAAe,CAAC,GAAW;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACO,MAAM,CAAC,MAAc;QAC7B,MAAM,sBAAsB,CAC1B,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import { type SimCfnWafCreators } from "./sim-cfn-waf-creators.js";
+/**
+ * Deletes the simulated WAFv2 resources a CloudFormation Stack created.
+ *
+ * Each Resource is deleted through what CloudFormation held for it rather than
+ * by reading its template again. A web ACL is asked for by name, id and lock
+ * token, and an association by the resource ARN it was made against, and both
+ * of those come off the thing that was created.
+ */
+export declare class SimCfnWafResourceDeleter {
+    #private;
+    constructor(properties: {
+        readonly creators: SimCfnWafCreators;
+    });
+    /**
+     * Delete one simulated WAFv2 Resource.
+     */
+    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+}
+//# sourceMappingURL=sim-cfn-waf-resource-deleter.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-deleter.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-deleter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAKxF,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,2BAA2B,CAAC;AAQnC;;;;;;;GAOG;AACH,qBAAa,wBAAwB;;IAGnC,YAAY,UAAU,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;KAAE,EAE/D;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAoCf;CACF"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.js

@@ -0,0 +1,53 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { unsupportedSimWafResourceType, } from "./sim-cfn-waf-creators.js";
+import { wafIpSetResourceTypeName, wafRegexPatternSetResourceTypeName, wafWebAclAssociationResourceTypeName, wafWebAclResourceTypeName, } from "./sim-cfn-waf-resource-types.js";
+/**
+ * Deletes the simulated WAFv2 resources a CloudFormation Stack created.
+ *
+ * Each Resource is deleted through what CloudFormation held for it rather than
+ * by reading its template again. A web ACL is asked for by name, id and lock
+ * token, and an association by the resource ARN it was made against, and both
+ * of those come off the thing that was created.
+ */
+export class SimCfnWafResourceDeleter {
+    #creators;
+    constructor(properties) {
+        this.#creators = properties.creators;
+    }
+    /**
+     * Delete one simulated WAFv2 Resource.
+     */
+    async delete(resourceTypeName, resource) {
+        const creators = this.#creators;
+        switch (resourceTypeName) {
+            case wafWebAclResourceTypeName: {
+                await creators.webAcl.delete(resource, created(resource, "web ACL"));
+                return;
+            }
+            case wafWebAclAssociationResourceTypeName: {
+                await creators.association.delete(resource, created(resource, "web ACL association"));
+                return;
+            }
+            case wafIpSetResourceTypeName: {
+                await creators.ipSet.delete(resource, created(resource, "IP set"));
+                return;
+            }
+            case wafRegexPatternSetResourceTypeName: {
+                await creators.regexPatternSet.delete(resource, created(resource, "regex pattern set"));
+                return;
+            }
+            default: {
+                throw unsupportedSimWafResourceType(resourceTypeName, " deletion");
+            }
+        }
+    }
+}
+/**
+ * What CloudFormation held for a Resource, which a deletion cannot do without.
+ */
+function created(resource, described) {
+    const simResource = resource.simResource;
+    assertDefined(simResource, `sim WAFv2 ${described} for CloudFormation Resource ${resource.logicalId}`);
+    return simResource;
+}
+//# sourceMappingURL=sim-cfn-waf-resource-deleter.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-deleter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-deleter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMpE,OAAO,EAEL,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IAC1B,SAAS,CAAoB;IAEtC,YAAY,UAAoD;QAC9D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAEhC,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,yBAAyB,EAAE,CAAC;gBAC/B,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAC1B,QAAQ,EACR,OAAO,CAAe,QAAQ,EAAE,SAAS,CAAC,CAC3C,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,oCAAoC,EAAE,CAAC;gBAC1C,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAC/B,QAAQ,EACR,OAAO,CAA6B,QAAQ,EAAE,qBAAqB,CAAC,CACrE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CACzB,QAAQ,EACR,OAAO,CAAc,QAAQ,EAAE,QAAQ,CAAC,CACzC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,kCAAkC,EAAE,CAAC;gBACxC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CACnC,QAAQ,EACR,OAAO,CAAwB,QAAQ,EAAE,mBAAmB,CAAC,CAC9D,CAAC;gBACF,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,SAAS,OAAO,CACd,QAAwB,EACxB,SAAiB;IAEjB,MAAM,WAAW,GAAG,QAAQ,CAAC,WAA4B,CAAC;IAE1D,aAAa,CACX,WAAW,EACX,aAAa,SAAS,gCAAgC,QAAQ,CAAC,SAAS,EAAE,CAC3E,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-error.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Build the error a Resource of a simulated WAFv2 type is refused with.
+ *
+ * Sim CloudFormation fails a stack on this one, so it is kept for a Resource
+ * nothing coherent could be deployed from: a `Rules` property that is not a
+ * list, a scope outside `REGIONAL` and `CLOUDFRONT`, an association naming no
+ * resource. Something WAFv2 cannot evaluate is a different thing and takes the
+ * skip below.
+ */
+export declare function simCfnWafResourceError(resourceType: string, logicalId: string, reason: string, cause?: unknown): Error;
+/**
+ * Build the error a Resource carrying something WAFv2 cannot evaluate is
+ * skipped with.
+ *
+ * The "Unsupported sim ... CloudFormation" wording is what sim CloudFormation
+ * reads as a Resource to record and step over, so the Resource lands on
+ * `stack.skippedResources` carrying the reason WAFv2 gave, and the rest of the
+ * template deploys.
+ *
+ * Skipping keeps the caution the refusal was written with. A web ACL that
+ * accepted a rule it cannot evaluate would allow a request AWS blocks, and a
+ * web ACL that is missing allows exactly as much as a stack that never
+ * deployed. What it drops is the blast radius: a user pool, a table, a secret
+ * and two functions in the same template are no business of one rule.
+ */
+export declare function simCfnWafSkippedResourceError(resourceType: string, logicalId: string, reason: string, cause?: unknown): Error;
+/**
+ * Run the simulated WAFv2 commands one Resource is made of, naming the
+ * Resource in whatever they refuse.
+ *
+ * Every Resource type here goes through the ordinary WAFv2 commands, so what a
+ * template may ask for is decided once, by simulated WAFv2, rather than again
+ * in the CloudFormation layer. What that leaves out is where the request came
+ * from: a deployment failing with `Rule block-admin uses the statement kind
+ * SqliMatchStatement` says which rule but not which Resource declared it, and
+ * a template can hold several. Only WAFv2's own errors are renamed, so a
+ * refusal the CloudFormation layer decided keeps the wording it was written
+ * with.
+ *
+ * The two kinds of refusal part company here. Input WAFv2 will not take is a
+ * failed Resource, and input it takes and this simulation cannot evaluate is a
+ * skipped one.
+ */
+export declare function simCfnWafResourceCommand<T>(resourceType: string, logicalId: string, run: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=sim-cfn-waf-resource-error.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-error.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-error.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,GACd,KAAK,CAIP;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,GACd,KAAK,CAMP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC,CAwBZ"}