@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-error.js

@@ -0,0 +1,66 @@
+import { SimWafError, SimWafUnsimulatedInputException, } from "../error/sim-wafv2.error.js";
+/**
+ * Build the error a Resource of a simulated WAFv2 type is refused with.
+ *
+ * Sim CloudFormation fails a stack on this one, so it is kept for a Resource
+ * nothing coherent could be deployed from: a `Rules` property that is not a
+ * list, a scope outside `REGIONAL` and `CLOUDFRONT`, an association naming no
+ * resource. Something WAFv2 cannot evaluate is a different thing and takes the
+ * skip below.
+ */
+export function simCfnWafResourceError(resourceType, logicalId, reason, cause) {
+    return new Error(`Invalid ${resourceType} Resource ${logicalId}: ${reason}`, {
+        cause,
+    });
+}
+/**
+ * Build the error a Resource carrying something WAFv2 cannot evaluate is
+ * skipped with.
+ *
+ * The "Unsupported sim ... CloudFormation" wording is what sim CloudFormation
+ * reads as a Resource to record and step over, so the Resource lands on
+ * `stack.skippedResources` carrying the reason WAFv2 gave, and the rest of the
+ * template deploys.
+ *
+ * Skipping keeps the caution the refusal was written with. A web ACL that
+ * accepted a rule it cannot evaluate would allow a request AWS blocks, and a
+ * web ACL that is missing allows exactly as much as a stack that never
+ * deployed. What it drops is the blast radius: a user pool, a table, a secret
+ * and two functions in the same template are no business of one rule.
+ */
+export function simCfnWafSkippedResourceError(resourceType, logicalId, reason, cause) {
+    return new Error(`Unsupported sim WAFv2 CloudFormation ${resourceType} Resource ` +
+        `${logicalId}: ${reason}`, { cause });
+}
+/**
+ * Run the simulated WAFv2 commands one Resource is made of, naming the
+ * Resource in whatever they refuse.
+ *
+ * Every Resource type here goes through the ordinary WAFv2 commands, so what a
+ * template may ask for is decided once, by simulated WAFv2, rather than again
+ * in the CloudFormation layer. What that leaves out is where the request came
+ * from: a deployment failing with `Rule block-admin uses the statement kind
+ * SqliMatchStatement` says which rule but not which Resource declared it, and
+ * a template can hold several. Only WAFv2's own errors are renamed, so a
+ * refusal the CloudFormation layer decided keeps the wording it was written
+ * with.
+ *
+ * The two kinds of refusal part company here. Input WAFv2 will not take is a
+ * failed Resource, and input it takes and this simulation cannot evaluate is a
+ * skipped one.
+ */
+export async function simCfnWafResourceCommand(resourceType, logicalId, run) {
+    try {
+        return await run();
+    }
+    catch (error) {
+        if (error instanceof SimWafUnsimulatedInputException) {
+            throw simCfnWafSkippedResourceError(resourceType, logicalId, error.message, error);
+        }
+        if (error instanceof SimWafError) {
+            throw simCfnWafResourceError(resourceType, logicalId, error.message, error);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-resource-error.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-error.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-error.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,+BAA+B,GAChC,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,SAAiB,EACjB,MAAc,EACd,KAAe;IAEf,OAAO,IAAI,KAAK,CAAC,WAAW,YAAY,aAAa,SAAS,KAAK,MAAM,EAAE,EAAE;QAC3E,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,SAAiB,EACjB,MAAc,EACd,KAAe;IAEf,OAAO,IAAI,KAAK,CACd,wCAAwC,YAAY,YAAY;QAC9D,GAAG,SAAS,KAAK,MAAM,EAAE,EAC3B,EAAE,KAAK,EAAE,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,SAAiB,EACjB,GAAqB;IAErB,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,MAAM,6BAA6B,CACjC,YAAY,EACZ,SAAS,EACT,KAAK,CAAC,OAAO,EACb,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,sBAAsB,CAC1B,YAAY,EACZ,SAAS,EACT,KAAK,CAAC,OAAO,EACb,KAAK,CACN,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-types.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The CloudFormation Resource types simulated WAFv2 creates.
+ *
+ * Named here rather than spelled out where they are used, because each one is
+ * written twice: once by the factory dispatching on it, and once by the
+ * refusals that quote it back to whoever wrote the template.
+ */
+export declare const wafWebAclResourceType = "AWS::WAFv2::WebACL";
+export declare const wafWebAclAssociationResourceType = "AWS::WAFv2::WebACLAssociation";
+export declare const wafIpSetResourceType = "AWS::WAFv2::IPSet";
+export declare const wafRegexPatternSetResourceType = "AWS::WAFv2::RegexPatternSet";
+/** The type names the CloudFormation layer dispatches on, without a prefix. */
+export declare const wafWebAclResourceTypeName = "WebACL";
+export declare const wafWebAclAssociationResourceTypeName = "WebACLAssociation";
+export declare const wafIpSetResourceTypeName = "IPSet";
+export declare const wafRegexPatternSetResourceTypeName = "RegexPatternSet";
+//# sourceMappingURL=sim-cfn-waf-resource-types.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-types.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAE1D,eAAO,MAAM,gCAAgC,kCAAkC,CAAC;AAEhF,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AAExD,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAElD,eAAO,MAAM,oCAAoC,sBAAsB,CAAC;AAExE,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD,eAAO,MAAM,kCAAkC,oBAAoB,CAAC"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-types.js

@@ -0,0 +1,17 @@
+/**
+ * The CloudFormation Resource types simulated WAFv2 creates.
+ *
+ * Named here rather than spelled out where they are used, because each one is
+ * written twice: once by the factory dispatching on it, and once by the
+ * refusals that quote it back to whoever wrote the template.
+ */
+export const wafWebAclResourceType = "AWS::WAFv2::WebACL";
+export const wafWebAclAssociationResourceType = "AWS::WAFv2::WebACLAssociation";
+export const wafIpSetResourceType = "AWS::WAFv2::IPSet";
+export const wafRegexPatternSetResourceType = "AWS::WAFv2::RegexPatternSet";
+/** The type names the CloudFormation layer dispatches on, without a prefix. */
+export const wafWebAclResourceTypeName = "WebACL";
+export const wafWebAclAssociationResourceTypeName = "WebACLAssociation";
+export const wafIpSetResourceTypeName = "IPSet";
+export const wafRegexPatternSetResourceTypeName = "RegexPatternSet";
+//# sourceMappingURL=sim-cfn-waf-resource-types.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-types.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,8BAA8B,GAAG,6BAA6B,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAElD,MAAM,CAAC,MAAM,oCAAoC,GAAG,mBAAmB,CAAC;AAExE,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD,MAAM,CAAC,MAAM,kCAAkC,GAAG,iBAAiB,CAAC"}

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.d.ts

@@ -0,0 +1,34 @@
+import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimWafV2 } from "../sim-wafv2.js";
+interface SimWafCfnResourceFactoryProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * CloudFormation Resource factory for simulated WAFv2 resources.
+ *
+ * Four `AWS::WAFv2::*` Resource types are modelled: the web ACL, the
+ * association putting one in front of a resource, and the two sets a rule can
+ * refer to. A rule group is a resource in its own right that nothing here
+ * simulates, and a logging configuration has no log to write to, so a template
+ * declaring either is reported as unsupported rather than quietly treated as
+ * deployed.
+ *
+ * A CloudFront distribution is not associated through this factory. CloudFront
+ * carries the web ACL on the distribution itself, as `WebACLId`, and simulated
+ * CloudFront resolves that ARN when it serves a request.
+ */
+export declare class SimWafCfnResourceFactory implements SimCfnServiceResourceFactory {
+    #private;
+    constructor(properties: SimWafCfnResourceFactoryProperties);
+    /**
+     * Create a simulated WAFv2 resource from a CloudFormation Resource.
+     */
+    create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
+    /**
+     * Delete a simulated WAFv2 resource created from a CloudFormation Resource.
+     */
+    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-waf-cfn-resource-factory.d.ts.map

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-cfn-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-waf-cfn-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAchD,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAyB,YAAW,4BAA4B;;IAI3E,YAAY,UAAU,EAAE,kCAAkC,EAKzD;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqB7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAEf;CACF"}

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.js

@@ -0,0 +1,58 @@
+import { simCfnWafCreators, unsupportedSimWafResourceType, } from "./sim-cfn-waf-creators.js";
+import { SimCfnWafResourceDeleter } from "./sim-cfn-waf-resource-deleter.js";
+import { wafIpSetResourceTypeName, wafRegexPatternSetResourceTypeName, wafWebAclAssociationResourceTypeName, wafWebAclResourceTypeName, } from "./sim-cfn-waf-resource-types.js";
+/**
+ * CloudFormation Resource factory for simulated WAFv2 resources.
+ *
+ * Four `AWS::WAFv2::*` Resource types are modelled: the web ACL, the
+ * association putting one in front of a resource, and the two sets a rule can
+ * refer to. A rule group is a resource in its own right that nothing here
+ * simulates, and a logging configuration has no log to write to, so a template
+ * declaring either is reported as unsupported rather than quietly treated as
+ * deployed.
+ *
+ * A CloudFront distribution is not associated through this factory. CloudFront
+ * carries the web ACL on the distribution itself, as `WebACLId`, and simulated
+ * CloudFront resolves that ARN when it serves a request.
+ */
+export class SimWafCfnResourceFactory {
+    #creators;
+    #deleter;
+    constructor(properties) {
+        this.#creators = simCfnWafCreators(properties.wafV2);
+        this.#deleter = new SimCfnWafResourceDeleter({
+            creators: this.#creators,
+        });
+    }
+    /**
+     * Create a simulated WAFv2 resource from a CloudFormation Resource.
+     */
+    async create(resourceTypeName, resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
+        const creators = this.#creators;
+        switch (resourceTypeName) {
+            case wafWebAclResourceTypeName: {
+                return await creators.webAcl.create(resource, properties);
+            }
+            case wafWebAclAssociationResourceTypeName: {
+                return await creators.association.create(resource, properties);
+            }
+            case wafIpSetResourceTypeName: {
+                return await creators.ipSet.create(resource, properties);
+            }
+            case wafRegexPatternSetResourceTypeName: {
+                return await creators.regexPatternSet.create(resource, properties);
+            }
+            default: {
+                throw unsupportedSimWafResourceType(resourceTypeName, "");
+            }
+        }
+    }
+    /**
+     * Delete a simulated WAFv2 resource created from a CloudFormation Resource.
+     */
+    async delete(resourceTypeName, resource) {
+        await this.#deleter.delete(resourceTypeName, resource);
+    }
+}
+//# sourceMappingURL=sim-waf-cfn-resource-factory.js.map

package/dist/service/wafv2/cfn/sim-waf-cfn-resource-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-cfn-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-waf-cfn-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AAMzC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,wBAAwB;IAC1B,SAAS,CAAoB;IAC7B,QAAQ,CAA2B;IAE5C,YAAY,UAA8C;QACxD,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAEhC,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,yBAAyB,EAAE,CAAC;gBAC/B,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5D,CAAC;YACD,KAAK,oCAAoC,EAAE,CAAC;gBAC1C,OAAO,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,OAAO,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC;YACD,KAAK,kCAAkC,EAAE,CAAC;gBACxC,OAAO,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.d.ts

@@ -0,0 +1,16 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCreateWebAclCommandInput } from "../../command/web-acl/web-acl.command.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+import type { SimWafRuleInput } from "../../web-acl/sim-waf-rule.type.js";
+/**
+ * The rules of a template web ACL to deploy, which are the ones this
+ * simulation can evaluate.
+ *
+ * Each rule left out is recorded on the Resource under its own name, because a
+ * web ACL is a list of rules that all look alike from the outside and the name
+ * is the only thing that says which one went missing. The reason is the one
+ * `CreateWebACL` refuses the rule with, so a reader gets the same sentence
+ * wherever they meet it.
+ */
+export declare function simCfnWafEvaluatableRules(wafV2: SimWafV2, resource: SimCfnResource, input: SimCreateWebAclCommandInput): readonly SimWafRuleInput[] | undefined;
+//# sourceMappingURL=sim-cfn-waf-evaluatable-rules.d.ts.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-evaluatable-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,2BAA2B,GACjC,SAAS,eAAe,EAAE,GAAG,SAAS,CAcxC"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.js

@@ -0,0 +1,22 @@
+/**
+ * The rules of a template web ACL to deploy, which are the ones this
+ * simulation can evaluate.
+ *
+ * Each rule left out is recorded on the Resource under its own name, because a
+ * web ACL is a list of rules that all look alike from the outside and the name
+ * is the only thing that says which one went missing. The reason is the one
+ * `CreateWebACL` refuses the rule with, so a reader gets the same sentence
+ * wherever they meet it.
+ */
+export function simCfnWafEvaluatableRules(wafV2, resource, input) {
+    const unevaluatable = wafV2.unevaluatableWebAclRules(input);
+    if (unevaluatable.length === 0) {
+        return input.Rules;
+    }
+    const dropped = new Set(unevaluatable.map(({ index }) => index));
+    for (const rule of unevaluatable) {
+        resource.ignoreProperty(`Rules.${rule.name}`, rule.reason);
+    }
+    return input.Rules?.filter((_, index) => !dropped.has(index));
+}
+//# sourceMappingURL=sim-cfn-waf-evaluatable-rules.js.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-evaluatable-rules.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-evaluatable-rules.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAe,EACf,QAAwB,EACxB,KAAkC;IAElC,MAAM,aAAa,GAAG,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAE5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,QAAQ,CAAC,cAAc,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.d.ts

@@ -0,0 +1,40 @@
+import type { SimCreateWebAclCommandInput } from "../../command/web-acl/web-acl.command.js";
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+/**
+ * Reads an AWS::WAFv2::WebACL Resource into what CreateWebACL takes.
+ *
+ * CloudFormation spells a web ACL the way the API spells it, so the rules, the
+ * default action and the custom response bodies are handed over as the
+ * template wrote them. They are not read here at all: every rule is compiled
+ * by CreateWebACL, which is where a statement kind Yulin cannot evaluate is
+ * found, and reading them twice would mean two answers to the same question.
+ */
+export declare class SimCfnWafWebAclConfig extends SimCfnWafResourceConfig {
+    protected get resourceType(): string;
+    /**
+     * The input the web ACL this Resource describes is created from.
+     *
+     * The properties this simulation has no behaviour for are left out of it and
+     * recorded, so the web ACL deploys with the rest of what the template wrote.
+     * An SDK caller is refused for the same properties, because a request that
+     * was answered and then quietly dropped is a worse answer than a refusal.
+     */
+    createInput(): SimCreateWebAclCommandInput;
+    /**
+     * Record the web ACL members this simulation has no behaviour for.
+     *
+     * Each of them changes what a web ACL does on real WAF, so a web ACL
+     * deployed without one behaves differently to the one the template
+     * describes. `stack.ignoredProperties` is where a test reads that.
+     */
+    private recordUnsimulatedMembers;
+    /**
+     * The rules the template declared.
+     *
+     * A web ACL with no `Rules` is one whose default action decides every
+     * request, which is a template AWS accepts and a reasonable thing to deploy
+     * before any rules are written.
+     */
+    private rules;
+}
+//# sourceMappingURL=sim-cfn-waf-web-acl-config.d.ts.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAE5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAG5E;;;;;;;;GAQG;AACH,qBAAa,qBAAsB,SAAQ,uBAAuB;IAChE,cAAuB,YAAY,IAAI,MAAM,CAE5C;IAED;;;;;;;OAOG;IACH,WAAW,IAAI,2BAA2B,CAgBzC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IAWhC;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;CAad"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.js

@@ -0,0 +1,69 @@
+import { simWafUnsimulatedWebAclMembers } from "../../command/web-acl/sim-wafv2-unsimulated-web-acl-input.js";
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+import { wafWebAclResourceType } from "../sim-cfn-waf-resource-types.js";
+/**
+ * Reads an AWS::WAFv2::WebACL Resource into what CreateWebACL takes.
+ *
+ * CloudFormation spells a web ACL the way the API spells it, so the rules, the
+ * default action and the custom response bodies are handed over as the
+ * template wrote them. They are not read here at all: every rule is compiled
+ * by CreateWebACL, which is where a statement kind Yulin cannot evaluate is
+ * found, and reading them twice would mean two answers to the same question.
+ */
+export class SimCfnWafWebAclConfig extends SimCfnWafResourceConfig {
+    get resourceType() {
+        return wafWebAclResourceType;
+    }
+    /**
+     * The input the web ACL this Resource describes is created from.
+     *
+     * The properties this simulation has no behaviour for are left out of it and
+     * recorded, so the web ACL deploys with the rest of what the template wrote.
+     * An SDK caller is refused for the same properties, because a request that
+     * was answered and then quietly dropped is a worse answer than a refusal.
+     */
+    createInput() {
+        this.recordUnsimulatedMembers();
+        return {
+            Name: this.name(),
+            Scope: this.scope(),
+            Description: this.description(),
+            DefaultAction: this.value("DefaultAction"),
+            Rules: this.rules(),
+            VisibilityConfig: this.value("VisibilityConfig"),
+            CustomResponseBodies: this.value("CustomResponseBodies"),
+        };
+    }
+    /**
+     * Record the web ACL members this simulation has no behaviour for.
+     *
+     * Each of them changes what a web ACL does on real WAF, so a web ACL
+     * deployed without one behaves differently to the one the template
+     * describes. `stack.ignoredProperties` is where a test reads that.
+     */
+    recordUnsimulatedMembers() {
+        for (const [member, reason] of simWafUnsimulatedWebAclMembers) {
+            if (this.value(member) !== undefined) {
+                this.resource.ignoreProperty(member, `${member} is not simulated: ${reason}`);
+            }
+        }
+    }
+    /**
+     * The rules the template declared.
+     *
+     * A web ACL with no `Rules` is one whose default action decides every
+     * request, which is a template AWS accepts and a reasonable thing to deploy
+     * before any rules are written.
+     */
+    rules() {
+        const rules = this.value("Rules");
+        if (rules === undefined) {
+            return undefined;
+        }
+        if (!Array.isArray(rules)) {
+            this.refuse("Rules must be a list");
+        }
+        return rules;
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-web-acl-config.js.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8DAA8D,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAsB,SAAQ,uBAAuB;IAChE,IAAuB,YAAY;QACjC,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,WAAW;QACT,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAE5B;YACb,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAChD,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAE1C;SACd,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,wBAAwB;QAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,8BAA8B,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAC1B,MAAM,EACN,GAAG,MAAM,sBAAsB,MAAM,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,KAAmC,CAAC;IAC7C,CAAC;CACF"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.d.ts

@@ -0,0 +1,44 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+import type { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+interface SimCfnWafWebAclCreatorProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * Creates simulated web ACLs from AWS::WAFv2::WebACL Resources.
+ *
+ * The web ACL is created through the ordinary CreateWebACL command rather than
+ * constructed directly, so one a template deployed is the same thing an SDK
+ * caller would have got: the same compilation of every rule, and the same
+ * refusals.
+ *
+ * A rule this simulation cannot evaluate is the exception, and the two part
+ * company over it. An SDK caller has the whole web ACL refused. A template
+ * deploys the web ACL without that rule and records it on
+ * `stack.ignoredProperties`, because the alternative is one rule taking a
+ * user pool, a table and two functions in the same template down with it.
+ *
+ * The web ACL is then real, and thinner than the one the template describes.
+ * That is the cost of deploying it at all, and the record of the dropped rule
+ * is what a test reads to know the size of it.
+ */
+export declare class SimCfnWafWebAclCreator {
+    #private;
+    constructor(properties: SimCfnWafWebAclCreatorProperties);
+    /**
+     * Create the web ACL an AWS::WAFv2::WebACL Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafWebAcl>;
+    /**
+     * Delete the web ACL an AWS::WAFv2::WebACL Resource created.
+     *
+     * DeleteWebACL refuses a web ACL something is still in front of, and a
+     * teardown reaches the associations first because each one names the web ACL
+     * it holds. A template that associates without naming it keeps that refusal,
+     * which says which resources are still pointing at the ACL.
+     */
+    delete(resource: SimCfnResource, webAcl: SimWafWebAcl): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-waf-web-acl-creator.d.ts.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAMrE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,sBAAsB;;IAGjC,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,YAAY,CAAC,CAoCvB;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAc1E;CACF"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.js

@@ -0,0 +1,71 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafWebAclResourceType } from "../sim-cfn-waf-resource-types.js";
+import { simCfnWafEvaluatableRules } from "./sim-cfn-waf-evaluatable-rules.js";
+import { SimCfnWafWebAclConfig } from "./sim-cfn-waf-web-acl-config.js";
+/**
+ * Creates simulated web ACLs from AWS::WAFv2::WebACL Resources.
+ *
+ * The web ACL is created through the ordinary CreateWebACL command rather than
+ * constructed directly, so one a template deployed is the same thing an SDK
+ * caller would have got: the same compilation of every rule, and the same
+ * refusals.
+ *
+ * A rule this simulation cannot evaluate is the exception, and the two part
+ * company over it. An SDK caller has the whole web ACL refused. A template
+ * deploys the web ACL without that rule and records it on
+ * `stack.ignoredProperties`, because the alternative is one rule taking a
+ * user pool, a table and two functions in the same template down with it.
+ *
+ * The web ACL is then real, and thinner than the one the template describes.
+ * That is the cost of deploying it at all, and the record of the dropped rule
+ * is what a test reads to know the size of it.
+ */
+export class SimCfnWafWebAclCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Create the web ACL an AWS::WAFv2::WebACL Resource describes.
+     */
+    async create(resource, properties) {
+        const input = new SimCfnWafWebAclConfig({
+            resource,
+            properties,
+        }).createInput();
+        const deployable = {
+            ...input,
+            Rules: simCfnWafEvaluatableRules(this.#wafV2, resource, input),
+        };
+        return await simCfnWafResourceCommand(wafWebAclResourceType, resource.logicalId, async () => {
+            const created = await this.#wafV2.createWebAcl({
+                input: deployable,
+            });
+            const arn = created.Summary?.ARN;
+            assertDefined(arn, `sim WAFv2 web ACL ARN for CloudFormation Resource ${resource.logicalId}`);
+            const webAcl = this.#wafV2.findWebAclByArn(arn);
+            assertDefined(webAcl, `sim WAFv2 web ACL ${arn} after CloudFormation creation`);
+            return webAcl;
+        });
+    }
+    /**
+     * Delete the web ACL an AWS::WAFv2::WebACL Resource created.
+     *
+     * DeleteWebACL refuses a web ACL something is still in front of, and a
+     * teardown reaches the associations first because each one names the web ACL
+     * it holds. A template that associates without naming it keeps that refusal,
+     * which says which resources are still pointing at the ACL.
+     */
+    async delete(resource, webAcl) {
+        await simCfnWafResourceCommand(wafWebAclResourceType, resource.logicalId, async () => await this.#wafV2.deleteWebAcl({
+            input: {
+                Name: webAcl.name,
+                Scope: webAcl.scope,
+                Id: webAcl.id,
+                LockToken: webAcl.lockToken,
+            },
+        }));
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-web-acl-creator.js.map

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAMxE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,sBAAsB;IACxB,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;YACtC,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG;YACjB,GAAG,KAAK;YACR,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;SAC/D,CAAC;QAEF,OAAO,MAAM,wBAAwB,CACnC,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7C,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,qDACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAEhD,aAAa,CACX,MAAM,EACN,qBAAqB,GAAG,gCAAgC,CACzD,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,MAAoB;QACzD,MAAM,wBAAwB,CAC5B,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/command/association/association.command.d.ts

@@ -0,0 +1,63 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimWafWebAclOutput } from "../web-acl/web-acl.command.js";
+/**
+ * Minimal structural sim WAFv2 AssociateWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/AssociateWebACLCommand/
+ */
+export interface SimAssociateWebAclCommand {
+    readonly input: SimAssociateWebAclCommandInput;
+}
+export interface SimAssociateWebAclCommandInput {
+    readonly WebACLArn?: string | undefined;
+    readonly ResourceArn?: string | undefined;
+}
+export interface SimAssociateWebAclCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 DisassociateWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/DisassociateWebACLCommand/
+ */
+export interface SimDisassociateWebAclCommand {
+    readonly input: SimDisassociateWebAclCommandInput;
+}
+export interface SimDisassociateWebAclCommandInput {
+    readonly ResourceArn?: string | undefined;
+}
+export interface SimDisassociateWebAclCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 GetWebACLForResource command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/GetWebACLForResourceCommand/
+ */
+export interface SimGetWebAclForResourceCommand {
+    readonly input: SimGetWebAclForResourceCommandInput;
+}
+export interface SimGetWebAclForResourceCommandInput {
+    readonly ResourceArn?: string | undefined;
+}
+export interface SimGetWebAclForResourceCommandOutput {
+    readonly WebACL?: SimWafWebAclOutput | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 ListResourcesForWebACL command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/ListResourcesForWebACLCommand/
+ */
+export interface SimListResourcesForWebAclCommand {
+    readonly input: SimListResourcesForWebAclCommandInput;
+}
+export interface SimListResourcesForWebAclCommandInput {
+    readonly WebACLArn?: string | undefined;
+    readonly ResourceType?: string | undefined;
+}
+export interface SimListResourcesForWebAclCommandOutput {
+    readonly ResourceArns: readonly string[];
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=association.command.d.ts.map

package/dist/service/wafv2/command/association/association.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"association.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/association.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/wafv2/command/association/association.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=association.command.js.map

package/dist/service/wafv2/command/association/association.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"association.command.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/association.command.ts"],"names":[],"mappings":""}