@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/wafv2/command/association/sim-wafv2-association-access.d.ts

@@ -0,0 +1,54 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimWafProtectedResource } from "../../association/sim-waf-protected-resource.js";
+import type { SimWafProtectedResources } from "../../association/sim-waf-protected-resources.js";
+import type { SimWafResourceStore } from "../../resource/sim-waf-resource-store.js";
+import type { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+import type { SimWafAuthorizer } from "../authorize/sim-wafv2-authorizer.js";
+interface SimWafAssociationAccessProperties {
+    readonly webAcls: SimWafResourceStore<SimWafWebAcl>;
+    readonly protectedResources: SimWafProtectedResources;
+    readonly authorizer: SimWafAuthorizer;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Reaching the two things an association names, in the order AWS reaches them.
+ *
+ * Authorizing comes before the lookup here as it does everywhere else in this
+ * service. A caller with no permission for a stage never learns whether the
+ * stage is there.
+ */
+export declare class SimWafAssociationAccess {
+    #private;
+    constructor(properties: SimWafAssociationAccessProperties);
+    /**
+     * Authorize a caller for an action naming one web ACL by ARN.
+     */
+    authorizeWebAcl(action: string, arn: string, caller?: SimAwsCaller): void;
+    /**
+     * Read the resource ARN a command carries, without authorizing for it.
+     *
+     * AssociateWebACL authorizes against the web ACL. The resource ARN is still
+     * read first, so a request naming both of them badly is refused for the ARN
+     * it wrote rather than for the one IAM happened to see.
+     */
+    resource(resourceArn: string | undefined): SimWafProtectedResource;
+    /**
+     * Read a resource ARN, authorize the caller for it, and check it is there.
+     *
+     * This is for the two commands carrying only a resource ARN. The web ACL
+     * they are about is whatever the association turns out to hold, so the
+     * resource is the only thing IAM has to decide against.
+     */
+    authorizedResource(resourceArn: string | undefined, action: string, caller?: SimAwsCaller): SimWafProtectedResource;
+    /**
+     * Ensure the resource an association names is one this simulation holds.
+     */
+    requireResource(resource: SimWafProtectedResource): void;
+    /**
+     * Get the `REGIONAL` web ACL an ARN names.
+     */
+    webAcl(webAclArn: string): SimWafWebAcl;
+}
+export {};
+//# sourceMappingURL=sim-wafv2-association-access.d.ts.map

package/dist/service/wafv2/command/association/sim-wafv2-association-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-access.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAEjG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAI7E,UAAU,iCAAiC;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;;IAMlC,YAAY,UAAU,EAAE,iCAAiC,EAKxD;IAED;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAExE;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,uBAAuB,CAEjE;IAED;;;;;;OAMG;IACH,kBAAkB,CAChB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,uBAAuB,CAOzB;IAED;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAOvD;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAMtC;CACF"}

package/dist/service/wafv2/command/association/sim-wafv2-association-access.js

@@ -0,0 +1,71 @@
+import { SimWafUnavailableEntityException } from "../../error/sim-wafv2.error.js";
+import { simWafAssociationResource } from "./sim-wafv2-association-input.js";
+import { requireRegionalSimWafWebAcl } from "./sim-wafv2-regional-web-acl.js";
+/**
+ * Reaching the two things an association names, in the order AWS reaches them.
+ *
+ * Authorizing comes before the lookup here as it does everywhere else in this
+ * service. A caller with no permission for a stage never learns whether the
+ * stage is there.
+ */
+export class SimWafAssociationAccess {
+    #webAcls;
+    #protectedResources;
+    #authorizer;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#webAcls = properties.webAcls;
+        this.#protectedResources = properties.protectedResources;
+        this.#authorizer = properties.authorizer;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Authorize a caller for an action naming one web ACL by ARN.
+     */
+    authorizeWebAcl(action, arn, caller) {
+        this.#authorizer.authorizeResource(action, arn, caller);
+    }
+    /**
+     * Read the resource ARN a command carries, without authorizing for it.
+     *
+     * AssociateWebACL authorizes against the web ACL. The resource ARN is still
+     * read first, so a request naming both of them badly is refused for the ARN
+     * it wrote rather than for the one IAM happened to see.
+     */
+    resource(resourceArn) {
+        return simWafAssociationResource(resourceArn, this.#accountRegionScope);
+    }
+    /**
+     * Read a resource ARN, authorize the caller for it, and check it is there.
+     *
+     * This is for the two commands carrying only a resource ARN. The web ACL
+     * they are about is whatever the association turns out to hold, so the
+     * resource is the only thing IAM has to decide against.
+     */
+    authorizedResource(resourceArn, action, caller) {
+        const resource = this.resource(resourceArn);
+        this.#authorizer.authorizeResource(action, resource.arn, caller);
+        this.requireResource(resource);
+        return resource;
+    }
+    /**
+     * Ensure the resource an association names is one this simulation holds.
+     */
+    requireResource(resource) {
+        if (!this.#protectedResources.has(resource)) {
+            throw new SimWafUnavailableEntityException(`AWS WAF couldn't retrieve the resource that you requested. Retry ` +
+                `your request: ${resource.arn}.`);
+        }
+    }
+    /**
+     * Get the `REGIONAL` web ACL an ARN names.
+     */
+    webAcl(webAclArn) {
+        return requireRegionalSimWafWebAcl({
+            webAclArn,
+            webAcls: this.#webAcls,
+            accountRegionScope: this.#accountRegionScope,
+        });
+    }
+}
+//# sourceMappingURL=sim-wafv2-association-access.js.map

package/dist/service/wafv2/command/association/sim-wafv2-association-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-access.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-access.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAIlF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAS9E;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACzB,QAAQ,CAAoC;IAC5C,mBAAmB,CAA2B;IAC9C,WAAW,CAAmB;IAC9B,mBAAmB,CAA2B;IAEvD,YAAY,UAA6C;QACvD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAc,EAAE,GAAW,EAAE,MAAqB;QAChE,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,WAA+B;QACtC,OAAO,yBAAyB,CAAC,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAChB,WAA+B,EAC/B,MAAc,EACd,MAAqB;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE5C,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAiC;QAC/C,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,gCAAgC,CACxC,mEAAmE;gBACjE,iBAAiB,QAAQ,CAAC,GAAG,GAAG,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAiB;QACtB,OAAO,2BAA2B,CAAC;YACjC,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/wafv2/command/association/sim-wafv2-association-commands.d.ts

@@ -0,0 +1,45 @@
+import type { SimWafAssociations } from "../../association/sim-waf-associations.js";
+import type { SimWafRequestOptions } from "../sim-wafv2-request-options.js";
+import type { SimWafAssociationAccess } from "./sim-wafv2-association-access.js";
+import type { SimAssociateWebAclCommand, SimAssociateWebAclCommandOutput, SimDisassociateWebAclCommand, SimDisassociateWebAclCommandOutput, SimGetWebAclForResourceCommand, SimGetWebAclForResourceCommandOutput, SimListResourcesForWebAclCommand, SimListResourcesForWebAclCommandOutput } from "./association.command.js";
+interface SimWafAssociationCommandsProperties {
+    readonly associations: SimWafAssociations;
+    readonly access: SimWafAssociationAccess;
+}
+/**
+ * The commands that put a web ACL in front of a resource and take it away
+ * again.
+ *
+ * A resource is named by ARN and nothing else. Reading that ARN for what it
+ * names, authorizing the caller and finding the web ACL are all in
+ * `sim-wafv2-association-access.ts`, which leaves these four as the operations
+ * themselves.
+ */
+export declare class SimWafAssociationCommands {
+    #private;
+    constructor(properties: SimWafAssociationCommandsProperties);
+    /**
+     * Put a web ACL in front of one resource.
+     */
+    associateWebAcl(command: SimAssociateWebAclCommand, options?: SimWafRequestOptions): SimAssociateWebAclCommandOutput;
+    /**
+     * Take the web ACL in front of one resource away.
+     *
+     * A resource with no web ACL is left as it is. AWS reports a resource that
+     * is not there and says nothing about an association that was never made.
+     */
+    disassociateWebAcl(command: SimDisassociateWebAclCommand, options?: SimWafRequestOptions): SimDisassociateWebAclCommandOutput;
+    /**
+     * Read the web ACL in front of one resource.
+     *
+     * A resource with no web ACL answers with nothing, as AWS does. The question
+     * has an answer, and reporting an error for it would be a different one.
+     */
+    getWebAclForResource(command: SimGetWebAclForResourceCommand, options?: SimWafRequestOptions): SimGetWebAclForResourceCommandOutput;
+    /**
+     * List the resources one web ACL is in front of.
+     */
+    listResourcesForWebAcl(command: SimListResourcesForWebAclCommand, options?: SimWafRequestOptions): SimListResourcesForWebAclCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-wafv2-association-commands.d.ts.map

package/dist/service/wafv2/command/association/sim-wafv2-association-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,EAClC,8BAA8B,EAC9B,oCAAoC,EACpC,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,0BAA0B,CAAC;AAElC,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAAyB;;IAIpC,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,eAAe,CACb,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,+BAA+B,CAiBjC;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,kCAAkC,CAUpC;IAED;;;;;OAKG;IACH,oBAAoB,CAClB,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oCAAoC,CAatC;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,sCAAsC,CAkBxC;CACF"}

package/dist/service/wafv2/command/association/sim-wafv2-association-commands.js

@@ -0,0 +1,72 @@
+import { requiredSimWafArn } from "../sim-wafv2-input.js";
+import { simWafWebAclOutput } from "../web-acl/sim-waf-web-acl-output.js";
+import { simWafListedResourceType } from "./sim-wafv2-association-input.js";
+/**
+ * The commands that put a web ACL in front of a resource and take it away
+ * again.
+ *
+ * A resource is named by ARN and nothing else. Reading that ARN for what it
+ * names, authorizing the caller and finding the web ACL are all in
+ * `sim-wafv2-association-access.ts`, which leaves these four as the operations
+ * themselves.
+ */
+export class SimWafAssociationCommands {
+    #associations;
+    #access;
+    constructor(properties) {
+        this.#associations = properties.associations;
+        this.#access = properties.access;
+    }
+    /**
+     * Put a web ACL in front of one resource.
+     */
+    associateWebAcl(command, options) {
+        const { input } = command;
+        const webAclArn = requiredSimWafArn(input.WebACLArn, "WebACLArn");
+        const resource = this.#access.resource(input.ResourceArn);
+        this.#access.authorizeWebAcl("wafv2:AssociateWebACL", webAclArn, options?.caller);
+        const webAcl = this.#access.webAcl(webAclArn);
+        this.#access.requireResource(resource);
+        this.#associations.associate(resource, webAcl);
+        return { $metadata: {} };
+    }
+    /**
+     * Take the web ACL in front of one resource away.
+     *
+     * A resource with no web ACL is left as it is. AWS reports a resource that
+     * is not there and says nothing about an association that was never made.
+     */
+    disassociateWebAcl(command, options) {
+        const resource = this.#access.authorizedResource(command.input.ResourceArn, "wafv2:DisassociateWebACL", options?.caller);
+        this.#associations.release(resource.arn);
+        return { $metadata: {} };
+    }
+    /**
+     * Read the web ACL in front of one resource.
+     *
+     * A resource with no web ACL answers with nothing, as AWS does. The question
+     * has an answer, and reporting an error for it would be a different one.
+     */
+    getWebAclForResource(command, options) {
+        const resource = this.#access.authorizedResource(command.input.ResourceArn, "wafv2:GetWebACLForResource", options?.caller);
+        const webAcl = this.#associations.webAclFor(resource.arn);
+        if (webAcl === undefined) {
+            return { $metadata: {} };
+        }
+        return { $metadata: {}, WebACL: simWafWebAclOutput(webAcl) };
+    }
+    /**
+     * List the resources one web ACL is in front of.
+     */
+    listResourcesForWebAcl(command, options) {
+        const { input } = command;
+        const webAclArn = requiredSimWafArn(input.WebACLArn, "WebACLArn");
+        const resourceType = simWafListedResourceType(input.ResourceType);
+        this.#access.authorizeWebAcl("wafv2:ListResourcesForWebACL", webAclArn, options?.caller);
+        return {
+            $metadata: {},
+            ResourceArns: this.#associations.resourceArnsFor(this.#access.webAcl(webAclArn), resourceType),
+        };
+    }
+}
+//# sourceMappingURL=sim-wafv2-association-commands.js.map

package/dist/service/wafv2/command/association/sim-wafv2-association-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-commands.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAiB5E;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAC3B,aAAa,CAAqB;IAClC,OAAO,CAA0B;IAE1C,YAAY,UAA+C;QACzD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,eAAe,CACb,OAAkC,EAClC,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE1D,IAAI,CAAC,OAAO,CAAC,eAAe,CAC1B,uBAAuB,EACvB,SAAS,EACT,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,OAAqC,EACrC,OAA8B;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAC9C,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,0BAA0B,EAC1B,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEzC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAClB,OAAuC,EACvC,OAA8B;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAC9C,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,4BAA4B,EAC5B,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAyC,EACzC,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAElE,IAAI,CAAC,OAAO,CAAC,eAAe,CAC1B,8BAA8B,EAC9B,SAAS,EACT,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,eAAe,CAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9B,YAAY,CACb;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/command/association/sim-wafv2-association-input.d.ts

@@ -0,0 +1,18 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import { type SimWafProtectedResource, type SimWafProtectedResourceType } from "../../association/sim-waf-protected-resource.js";
+/**
+ * Read the resource an association named, and hold it to one Account and
+ * Region.
+ *
+ * A web ACL protects what is in its own Account and Region, as it does on AWS.
+ * A REST API stage ARN carries neither, so the Region is read out of the ARN
+ * and the Account falls out of the lookup afterwards. A user pool ARN carries
+ * both, and one naming another Account is refused here.
+ */
+export declare function simWafAssociationResource(resourceArn: string | undefined, accountRegionScope: SimAwsAccountRegionScope): SimWafProtectedResource;
+/**
+ * Read the resource type a listing named, refusing one this simulation does
+ * not hold.
+ */
+export declare function simWafListedResourceType(resourceType: string | undefined): SimWafProtectedResourceType;
+//# sourceMappingURL=sim-wafv2-association-input.d.ts.map

package/dist/service/wafv2/command/association/sim-wafv2-association-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAGjC,MAAM,iDAAiD,CAAC;AAgBzD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,kBAAkB,EAAE,wBAAwB,GAC3C,uBAAuB,CAuBzB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,2BAA2B,CAiB7B"}

package/dist/service/wafv2/command/association/sim-wafv2-association-input.js

@@ -0,0 +1,56 @@
+import { simWafProtectedResource, simWafProtectedResourceTypes, } from "../../association/sim-waf-protected-resource.js";
+import { SimWafInvalidParameterException, SimWafUnsimulatedInputException, } from "../../error/sim-wafv2.error.js";
+import { requiredSimWafArn } from "../sim-wafv2-input.js";
+/**
+ * What ListResourcesForWebACL lists when the request names no resource type.
+ *
+ * Real WAFv2 documents that default, and it is not one of the types simulated
+ * here. A listing that names nothing is refused, because the empty list a load
+ * balancer listing produces reads as a web ACL protecting nothing.
+ */
+const defaultResourceType = "APPLICATION_LOAD_BALANCER";
+/**
+ * Read the resource an association named, and hold it to one Account and
+ * Region.
+ *
+ * A web ACL protects what is in its own Account and Region, as it does on AWS.
+ * A REST API stage ARN carries neither, so the Region is read out of the ARN
+ * and the Account falls out of the lookup afterwards. A user pool ARN carries
+ * both, and one naming another Account is refused here.
+ */
+export function simWafAssociationResource(resourceArn, accountRegionScope) {
+    const resource = simWafProtectedResource(requiredSimWafArn(resourceArn, "ResourceArn"));
+    const { accountId, regionName } = accountRegionScope;
+    if (resource.regionName !== regionName) {
+        throw refusedResourceArn(`The resource ${resource.arn} is in ${resource.regionName}, and this ` +
+            `request was made in ${regionName}.`, resource.arn);
+    }
+    if (resource.accountId !== undefined && resource.accountId !== accountId) {
+        throw refusedResourceArn(`The resource ${resource.arn} is in Account ${resource.accountId}, and ` +
+            `this request was made in ${accountId}.`, resource.arn);
+    }
+    return resource;
+}
+/**
+ * Read the resource type a listing named, refusing one this simulation does
+ * not hold.
+ */
+export function simWafListedResourceType(resourceType) {
+    const listed = resourceType ?? defaultResourceType;
+    const simulated = simWafProtectedResourceTypes.find((candidate) => candidate === listed);
+    if (simulated === undefined) {
+        throw new SimWafUnsimulatedInputException(`AWS WAF lists ${listed} resources, and ` +
+            `${simWafProtectedResourceTypes.join(" and ")} are the types Yulin ` +
+            `simulates. ListResourcesForWebACL lists ${defaultResourceType} when ` +
+            `a request names no ResourceType, so name one of the simulated types ` +
+            `to list the resources a web ACL protects.`);
+    }
+    return simulated;
+}
+/**
+ * The refusal a bad resource ARN reports, in the form WAFv2 writes.
+ */
+function refusedResourceArn(reason, resourceArn) {
+    return new SimWafInvalidParameterException(`Error reason: ${reason}, field: RESOURCE_ARN, parameter: ${resourceArn}`);
+}
+//# sourceMappingURL=sim-wafv2-association-input.js.map

package/dist/service/wafv2/command/association/sim-wafv2-association-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-association-input.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-association-input.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,WAA+B,EAC/B,kBAA4C;IAE5C,MAAM,QAAQ,GAAG,uBAAuB,CACtC,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC,CAC9C,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;IAErD,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,kBAAkB,CACtB,gBAAgB,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC,UAAU,aAAa;YACpE,uBAAuB,UAAU,GAAG,EACtC,QAAQ,CAAC,GAAG,CACb,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,kBAAkB,CACtB,gBAAgB,QAAQ,CAAC,GAAG,kBAAkB,QAAQ,CAAC,SAAS,QAAQ;YACtE,4BAA4B,SAAS,GAAG,EAC1C,QAAQ,CAAC,GAAG,CACb,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC;IAEhC,MAAM,MAAM,GAAG,YAAY,IAAI,mBAAmB,CAAC;IACnD,MAAM,SAAS,GAAG,4BAA4B,CAAC,IAAI,CACjD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CACpC,CAAC;IAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,+BAA+B,CACvC,iBAAiB,MAAM,kBAAkB;YACvC,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB;YACpE,2CAA2C,mBAAmB,QAAQ;YACtE,sEAAsE;YACtE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,MAAc,EACd,WAAmB;IAEnB,OAAO,IAAI,+BAA+B,CACxC,iBAAiB,MAAM,qCAAqC,WAAW,EAAE,CAC1E,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/command/association/sim-wafv2-regional-web-acl.d.ts

@@ -0,0 +1,22 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimWafResourceStore } from "../../resource/sim-waf-resource-store.js";
+import type { SimWafWebAcl } from "../../web-acl/sim-waf-web-acl.js";
+interface SimWafRegionalWebAclLookup {
+    readonly webAclArn: string;
+    readonly webAcls: SimWafResourceStore<SimWafWebAcl>;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Get the `REGIONAL` web ACL an association's ARN names.
+ *
+ * Three things are checked before the store is asked, and each of them says
+ * something the store could not. A string that is not a WAFv2 ARN was never a
+ * web ACL. A `CLOUDFRONT` scope web ACL protects a CloudFront distribution,
+ * which takes its web ACL from the distribution and not from
+ * `AssociateWebACL`. A web ACL in another Account or Region belongs to a WAFv2
+ * this one has no reach into, and the caller is told where it is rather than
+ * that it does not exist.
+ */
+export declare function requireRegionalSimWafWebAcl(lookup: SimWafRegionalWebAclLookup): SimWafWebAcl;
+export {};
+//# sourceMappingURL=sim-wafv2-regional-web-acl.d.ts.map

package/dist/service/wafv2/command/association/sim-wafv2-regional-web-acl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-regional-web-acl.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-regional-web-acl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAK7F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,UAAU,0BAA0B;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,0BAA0B,GACjC,YAAY,CAuCd"}

package/dist/service/wafv2/command/association/sim-wafv2-regional-web-acl.js

@@ -0,0 +1,43 @@
+import { SimWafInvalidParameterException, SimWafNonexistentItemException, } from "../../error/sim-wafv2.error.js";
+import { simWafArnParts } from "../../sim-wafv2-arn.js";
+/**
+ * Get the `REGIONAL` web ACL an association's ARN names.
+ *
+ * Three things are checked before the store is asked, and each of them says
+ * something the store could not. A string that is not a WAFv2 ARN was never a
+ * web ACL. A `CLOUDFRONT` scope web ACL protects a CloudFront distribution,
+ * which takes its web ACL from the distribution and not from
+ * `AssociateWebACL`. A web ACL in another Account or Region belongs to a WAFv2
+ * this one has no reach into, and the caller is told where it is rather than
+ * that it does not exist.
+ */
+export function requireRegionalSimWafWebAcl(lookup) {
+    const { webAclArn } = lookup;
+    const parts = simWafArnParts(webAclArn);
+    const { accountId, regionName } = lookup.accountRegionScope;
+    if (parts === undefined) {
+        throw invalidWebAclArn(`The ARN isn't valid. A valid ARN begins with arn: and includes other ` +
+            `information separated by colons or slashes.`, webAclArn);
+    }
+    if (parts.scope === "CLOUDFRONT") {
+        throw invalidWebAclArn(`A CLOUDFRONT scope web ACL protects a CloudFront distribution, which ` +
+            `takes its web ACL from the distribution and not from AssociateWebACL.`, webAclArn);
+    }
+    if (parts.regionName !== regionName || parts.accountId !== accountId) {
+        throw invalidWebAclArn(`The web ACL is in ${parts.accountId} ${parts.regionName}, and this ` +
+            `request was made in ${accountId} ${regionName}.`, webAclArn);
+    }
+    const webAcl = lookup.webAcls.findByArn(webAclArn);
+    if (webAcl === undefined) {
+        throw new SimWafNonexistentItemException(`AWS WAF couldn't perform the operation because your resource ` +
+            `doesn't exist: web ACL ${webAclArn}.`);
+    }
+    return webAcl;
+}
+/**
+ * The refusal each of those checks reports, in the form WAFv2 writes.
+ */
+function invalidWebAclArn(reason, webAclArn) {
+    return new SimWafInvalidParameterException(`Error reason: ${reason}, field: WEB_ACL_ARN, parameter: ${webAclArn}`);
+}
+//# sourceMappingURL=sim-wafv2-regional-web-acl.js.map

package/dist/service/wafv2/command/association/sim-wafv2-regional-web-acl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-regional-web-acl.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/association/sim-wafv2-regional-web-acl.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AASxD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAkC;IAElC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAE5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,gBAAgB,CACpB,uEAAuE;YACrE,6CAA6C,EAC/C,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,gBAAgB,CACpB,uEAAuE;YACrE,uEAAuE,EACzE,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,gBAAgB,CACpB,qBAAqB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,aAAa;YACnE,uBAAuB,SAAS,IAAI,UAAU,GAAG,EACnD,SAAS,CACV,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,8BAA8B,CACtC,+DAA+D;YAC7D,0BAA0B,SAAS,GAAG,CACzC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,MAAc,EACd,SAAiB;IAEjB,OAAO,IAAI,+BAA+B,CACxC,iBAAiB,MAAM,oCAAoC,SAAS,EAAE,CACvE,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/command/authorize/sim-wafv2-authorizer.d.ts

@@ -0,0 +1,34 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimWafAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies simulated IAM authorization to WAFv2 requests.
+ *
+ * An operation on one resource authorizes against that resource's ARN, which
+ * is the form WAFv2 policies are written in. The id is generated, so a policy
+ * that names a resource ends in a wildcard where the id goes:
+ * `arn:aws:wafv2:us-east-1:111111111111:regional/webacl/api-acl/*`.
+ */
+export declare class SimWafAuthorizer {
+    #private;
+    constructor(properties: SimWafAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on one WAFv2 resource.
+     *
+     * The resource need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the resource is there, and a create authorizes against the ARN the
+     * resource is about to have.
+     */
+    authorizeResource(action: string, resource: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action real WAFv2 gives no resource type,
+     * which is each of the three listings.
+     */
+    authorizeNoResource(action: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+}
+export {};
+//# sourceMappingURL=sim-wafv2-authorizer.d.ts.map

package/dist/service/wafv2/command/authorize/sim-wafv2-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/authorize/sim-wafv2-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAatG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;;IAG3B,YAAY,UAAU,EAAE,0BAA0B,EAEjD;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAYtB;IAED;;;OAGG;IACH,mBAAmB,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;CACF"}

package/dist/service/wafv2/command/authorize/sim-wafv2-authorizer.js

@@ -0,0 +1,51 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * The resource an action with no resource type authorizes against.
+ *
+ * The three listings have no resource type on real WAFv2, so IAM evaluates
+ * them against `*` and only a policy whose Resource is `*` allows them. A
+ * policy naming web ACL ARNs allows no listing, however broadly those ARNs are
+ * written.
+ */
+const noResource = "*";
+/**
+ * Applies simulated IAM authorization to WAFv2 requests.
+ *
+ * An operation on one resource authorizes against that resource's ARN, which
+ * is the form WAFv2 policies are written in. The id is generated, so a policy
+ * that names a resource ends in a wildcard where the id goes:
+ * `arn:aws:wafv2:us-east-1:111111111111:regional/webacl/api-acl/*`.
+ */
+export class SimWafAuthorizer {
+    #iam;
+    constructor(properties) {
+        this.#iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may perform an action on one WAFv2 resource.
+     *
+     * The resource need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the resource is there, and a create authorizes against the ARN the
+     * resource is about to have.
+     */
+    authorizeResource(action, resource, caller) {
+        const decision = this.#iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+        return decision.caller;
+    }
+    /**
+     * Ensure the caller may perform an action real WAFv2 gives no resource type,
+     * which is each of the three listings.
+     */
+    authorizeNoResource(action, caller) {
+        return this.authorizeResource(action, noResource, caller);
+    }
+}
+//# sourceMappingURL=sim-wafv2-authorizer.js.map

package/dist/service/wafv2/command/authorize/sim-wafv2-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-wafv2-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/authorize/sim-wafv2-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AAMvB;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,CAA0B;IAEvC,YAAY,UAAsC;QAChD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAc,EACd,QAAgB,EAChB,MAAqB;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CACjB,MAAc,EACd,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/wafv2/command/ip-set/ip-set.command.d.ts

@@ -0,0 +1,107 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimWafSummaryOutput } from "../web-acl/web-acl.command.js";
+/**
+ * Minimal structural sim WAFv2 CreateIPSet command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/CreateIPSetCommand/
+ */
+export interface SimCreateIpSetCommand {
+    readonly input: SimCreateIpSetCommandInput;
+}
+export interface SimCreateIpSetCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly IPAddressVersion?: string | undefined;
+    readonly Addresses?: readonly string[] | undefined;
+    readonly Description?: string | undefined;
+    readonly Tags?: readonly unknown[] | undefined;
+}
+export interface SimCreateIpSetCommandOutput {
+    readonly Summary?: SimWafSummaryOutput | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 GetIPSet command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/GetIPSetCommand/
+ */
+export interface SimGetIpSetCommand {
+    readonly input: SimGetIpSetCommandInput;
+}
+export interface SimGetIpSetCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+}
+/**
+ * What GetIPSet reports about one IP set.
+ */
+export interface SimWafIpSetOutput {
+    readonly Name: string;
+    readonly Id: string;
+    readonly ARN: string;
+    readonly Description: string | undefined;
+    readonly IPAddressVersion: string;
+    readonly Addresses: readonly string[];
+}
+export interface SimGetIpSetCommandOutput {
+    readonly IPSet?: SimWafIpSetOutput | undefined;
+    readonly LockToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 UpdateIPSet command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/UpdateIPSetCommand/
+ */
+export interface SimUpdateIpSetCommand {
+    readonly input: SimUpdateIpSetCommandInput;
+}
+export interface SimUpdateIpSetCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly Addresses?: readonly string[] | undefined;
+    readonly Description?: string | undefined;
+    readonly LockToken?: string | undefined;
+}
+export interface SimUpdateIpSetCommandOutput {
+    readonly NextLockToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 ListIPSets command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/ListIPSetsCommand/
+ */
+export interface SimListIpSetsCommand {
+    readonly input: SimListIpSetsCommandInput;
+}
+export interface SimListIpSetsCommandInput {
+    readonly Scope?: string | undefined;
+    readonly Limit?: number | undefined;
+    readonly NextMarker?: string | undefined;
+}
+export interface SimListIpSetsCommandOutput {
+    readonly IPSets?: readonly SimWafSummaryOutput[] | undefined;
+    readonly NextMarker?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim WAFv2 DeleteIPSet command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/wafv2/command/DeleteIPSetCommand/
+ */
+export interface SimDeleteIpSetCommand {
+    readonly input: SimDeleteIpSetCommandInput;
+}
+export interface SimDeleteIpSetCommandInput {
+    readonly Name?: string | undefined;
+    readonly Scope?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly LockToken?: string | undefined;
+}
+export interface SimDeleteIpSetCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=ip-set.command.d.ts.map

package/dist/service/wafv2/command/ip-set/ip-set.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-set.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/ip-set/ip-set.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/wafv2/command/ip-set/ip-set.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ip-set.command.js.map