@kensio/yulin 1.18.0 → 1.18.2

package/dist/service/lambda/command/list-functions/list-functions-authorizer.js

@@ -0,0 +1,41 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a Lambda ListFunctions request.
+ *
+ * AWS maps the ListFunctions API operation to the lambda:ListFunctions IAM
+ * action. The operation reaches every function in the Account and Region, so
+ * AWS documents its resource as "*" rather than any one function ARN.
+ *
+ * Authorization therefore applies to the whole operation. A denied caller
+ * receives AccessDenied rather than a filtered listing.
+ */
+export class ListFunctionsAuthorizer {
+    static action = "lambda:ListFunctions";
+    static resource = "*";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may list the simulated Account's Lambda functions.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit anonymous
+     * caller.
+     */
+    authorize(caller) {
+        const decision = this.iam.authorize({
+            action: ListFunctionsAuthorizer.action,
+            resource: ListFunctionsAuthorizer.resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: ListFunctionsAuthorizer.action,
+                resource: ListFunctionsAuthorizer.resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=list-functions-authorizer.js.map

package/dist/service/lambda/command/list-functions/list-functions-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-functions-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-functions/list-functions-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IAC1B,MAAM,CAAU,MAAM,GAAG,sBAAsB,CAAC;IAChD,MAAM,CAAU,QAAQ,GAAG,GAAG,CAAC;IAEtB,GAAG,CAA0B;IAE9C,YAAY,UAA6C;QACvD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,uBAAuB,CAAC,MAAM;YACtC,QAAQ,EAAE,uBAAuB,CAAC,QAAQ;YAC1C,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,uBAAuB,CAAC,MAAM;gBACtC,QAAQ,EAAE,uBAAuB,CAAC,QAAQ;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/command/list-functions/list-functions.command.d.ts

@@ -0,0 +1,34 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionsCommand/
+ */
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimLambdaFunctionConfiguration } from "../../function/sim-lambda-function-configuration.js";
+/**
+ * Minimal structural sim Lambda ListFunctions command.
+ */
+export interface SimListFunctionsCommand {
+    readonly input: SimListFunctionsCommandInput;
+}
+/**
+ * Minimal structural sim Lambda ListFunctions input.
+ *
+ * `FunctionVersion` is the only member simulated Lambda reads. `"ALL"` adds
+ * each function's published versions to the listing, and anything else lists
+ * the functions themselves.
+ *
+ * Real Lambda pages the listing with `Marker` and `MaxItems`, and reaches
+ * another Region's functions with `MasterRegion`. Neither is simulated, so
+ * all three are left out rather than accepted and ignored, matching the other
+ * simulated Lambda listings.
+ */
+export interface SimListFunctionsCommandInput {
+    readonly FunctionVersion?: string | undefined;
+}
+/**
+ * Minimal structural sim Lambda ListFunctions output.
+ */
+export interface SimListFunctionsCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+    readonly Functions: readonly SimLambdaFunctionConfiguration[];
+}
+//# sourceMappingURL=list-functions.command.d.ts.map

package/dist/service/lambda/command/list-functions/list-functions.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-functions.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-functions/list-functions.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qDAAqD,CAAC;AAE1G;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAC/D"}

package/dist/service/lambda/command/list-functions/list-functions.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionsCommand/
+ */
+export {};
+//# sourceMappingURL=list-functions.command.js.map

package/dist/service/lambda/command/list-functions/list-functions.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-functions.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-functions/list-functions.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/lambda/command/list-functions/list-functions.handler.d.ts

@@ -0,0 +1,35 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionMap } from "../../function/sim-lambda-function.js";
+import type { SimLambdaFunctionVersionStore } from "../../function/version/sim-lambda-function-version-store.js";
+import type { SimListFunctionsCommand, SimListFunctionsCommandOutput } from "./list-functions.command.js";
+interface ListFunctionsCommandHandlerProperties {
+    readonly functions: SimLambdaFunctionMap;
+    readonly versions: SimLambdaFunctionVersionStore;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface ListFunctionsCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda ListFunctionsCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionsCommand/
+ */
+export declare class ListFunctionsCommandHandler implements CommandHandler<SimListFunctionsCommand, SimListFunctionsCommandOutput> {
+    private readonly functions;
+    private readonly versions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: ListFunctionsCommandHandlerProperties);
+    /**
+     * List the configuration of every sim Lambda function in this Account and
+     * Region, as GetFunction reports one.
+     */
+    handle(command: SimListFunctionsCommand, options?: ListFunctionsCommandHandlerOptions): Promise<SimListFunctionsCommandOutput>;
+}
+export {};
+//# sourceMappingURL=list-functions.handler.d.ts.map

package/dist/service/lambda/command/list-functions/list-functions.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-functions.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-functions/list-functions.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAElF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AAEjH,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAQrC,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,qCAAqC,EAW5D;IAED;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,kCAAkC,GAC3C,OAAO,CAAC,6BAA6B,CAAC,CAsBxC;CACF"}

package/dist/service/lambda/command/list-functions/list-functions.handler.js

@@ -0,0 +1,46 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { ListFunctionsAuthorizer } from "./list-functions-authorizer.js";
+/**
+ * What a caller asks for to have published versions listed alongside the
+ * functions themselves.
+ */
+const allVersions = "ALL";
+/**
+ * Simulated Lambda ListFunctionsCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionsCommand/
+ */
+export class ListFunctionsCommandHandler {
+    functions;
+    versions;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { functions, versions, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.functions = functions;
+        this.versions = versions;
+        this.authorizer = new ListFunctionsAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * List the configuration of every sim Lambda function in this Account and
+     * Region, as GetFunction reports one.
+     */
+    async handle(command, options) {
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        this.authorizer.authorize(options?.caller);
+        const listed = this.functions
+            .values()
+            .flatMap((simFunction) => command.input.FunctionVersion === allVersions
+            ? this.versions.all(simFunction)
+            : [simFunction])
+            .toArray();
+        return {
+            $metadata: {},
+            Functions: listed.map((simFunction) => simFunction.configuration()),
+        };
+    }
+}
+//# sourceMappingURL=list-functions.handler.js.map

package/dist/service/lambda/command/list-functions/list-functions.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-functions.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-functions/list-functions.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAKhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAMzE;;;GAGG;AACH,MAAM,WAAW,GAAG,KAAK,CAAC;AAa1B;;;;GAIG;AACH,MAAM,OAAO,2BAA2B;IAIrB,SAAS,CAAuB;IAChC,QAAQ,CAAgC;IACxC,UAAU,CAA0B;IACpC,UAAU,CAAsB;IAEjD,YAAY,UAAiD;QAC3D,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,OAAgC,EAChC,OAA4C;QAE5C,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS;aAC1B,MAAM,EAAE;aACR,OAAO,CACN,CAAC,WAA8B,EAAgC,EAAE,CAC/D,OAAO,CAAC,KAAK,CAAC,eAAe,KAAK,WAAW;YAC3C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;YAChC,CAAC,CAAC,CAAC,WAAW,CAAC,CACpB;aACA,OAAO,EAAE,CAAC;QAEb,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAkC,EAAE,CACpE,WAAW,CAAC,aAAa,EAAE,CAC5B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/sim-lambda-command.types.d.ts

@@ -19,10 +19,13 @@ export type { SimGetFunctionUrlConfigCommand, SimGetFunctionUrlConfigCommandOutp
 export type { SimGetPolicyCommand, SimGetPolicyCommandOutput, } from "./get-policy/get-policy.command.js";
 export type { SimInvokeCommand, SimInvokeCommandOutput, } from "./invoke/invoke.command.js";
 export type { SimListAliasesCommand, SimListAliasesCommandOutput, } from "./list-aliases/list-aliases.command.js";
+export type { SimListFunctionsCommand, SimListFunctionsCommandOutput, } from "./list-functions/list-functions.command.js";
 export type { SimListFunctionUrlConfigsCommand, SimListFunctionUrlConfigsCommandOutput, } from "./list-function-url-configs/list-function-url-configs.command.js";
 export type { SimListVersionsByFunctionCommand, SimListVersionsByFunctionCommandOutput, } from "./list-versions-by-function/list-versions-by-function.command.js";
 export type { SimPublishVersionCommand, SimPublishVersionCommandOutput, } from "./publish-version/publish-version.command.js";
 export type { SimRemovePermissionCommand, SimRemovePermissionCommandOutput, } from "./remove-permission/remove-permission.command.js";
 export type { SimUpdateAliasCommand, SimUpdateAliasCommandOutput, } from "./update-alias/update-alias.command.js";
+export type { SimUpdateFunctionCodeCommand, SimUpdateFunctionCodeCommandOutput, } from "./update-function-code/update-function-code.command.js";
+export type { SimUpdateFunctionConfigurationCommand, SimUpdateFunctionConfigurationCommandOutput, } from "./update-function-configuration/update-function-configuration.command.js";
 export type { SimUpdateFunctionUrlConfigCommand, SimUpdateFunctionUrlConfigCommandOutput, } from "./update-function-url-config/update-function-url-config.command.js";
 //# sourceMappingURL=sim-lambda-command.types.d.ts.map

package/dist/service/lambda/command/sim-lambda-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/command/sim-lambda-command.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,kCAAkC,EAClC,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,iCAAiC,EACjC,sCAAsC,EACtC,uCAAuC,GACxC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,kEAAkE,CAAC;AAC1E,YAAY,EACV,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,kEAAkE,CAAC;AAC1E,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC"}
+{"version":3,"file":"sim-lambda-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/command/sim-lambda-command.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,kCAAkC,EAClC,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,iCAAiC,EACjC,sCAAsC,EACtC,uCAAuC,GACxC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,kEAAkE,CAAC;AAC1E,YAAY,EACV,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,kEAAkE,CAAC;AAC1E,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,qCAAqC,EACrC,2CAA2C,GAC5C,MAAM,0EAA0E,CAAC;AAClF,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC"}

package/dist/service/lambda/command/update-function-code/update-function-code-authorizer.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface UpdateFunctionCodeAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a Lambda UpdateFunctionCode request.
+ *
+ * AWS maps the UpdateFunctionCode API operation to the
+ * lambda:UpdateFunctionCode IAM action. The resource is the ARN of the
+ * function whose code is being replaced.
+ */
+export declare class UpdateFunctionCodeAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: UpdateFunctionCodeAuthorizerProperties);
+    /**
+     * Ensure the caller may replace the code of the function with the given ARN.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit anonymous
+     * caller.
+     */
+    authorize(functionArn: string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=update-function-code-authorizer.d.ts.map

package/dist/service/lambda/command/update-function-code/update-function-code-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAE7D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;;;;;OAMG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAc1D;CACF"}

package/dist/service/lambda/command/update-function-code/update-function-code-authorizer.js

@@ -0,0 +1,37 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a Lambda UpdateFunctionCode request.
+ *
+ * AWS maps the UpdateFunctionCode API operation to the
+ * lambda:UpdateFunctionCode IAM action. The resource is the ARN of the
+ * function whose code is being replaced.
+ */
+export class UpdateFunctionCodeAuthorizer {
+    static action = "lambda:UpdateFunctionCode";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may replace the code of the function with the given ARN.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit anonymous
+     * caller.
+     */
+    authorize(functionArn, caller) {
+        const decision = this.iam.authorize({
+            action: UpdateFunctionCodeAuthorizer.action,
+            resource: functionArn,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: UpdateFunctionCodeAuthorizer.action,
+                resource: functionArn,
+            });
+        }
+    }
+}
+//# sourceMappingURL=update-function-code-authorizer.js.map

package/dist/service/lambda/command/update-function-code/update-function-code-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,2BAA2B,CAAC;IAE5C,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,WAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ,EAAE,WAAW;YACrB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/command/update-function-code/update-function-code-input.d.ts

@@ -0,0 +1,16 @@
+import { type SimLambdaCodeSource } from "../../function/code/lambda-code-source.js";
+import type { SimUpdateFunctionCodeCommand } from "./update-function-code.command.js";
+/**
+ * Validated UpdateFunctionCode input, in sim Lambda function model terms.
+ */
+export interface UpdateFunctionCodeInput {
+    name: string;
+    codeSource: SimLambdaCodeSource;
+    publish: boolean;
+}
+/**
+ * Require the AWS-required UpdateFunctionCode input fields, and validate the
+ * function code input into a sim Lambda code source.
+ */
+export declare function requireUpdateFunctionCodeInput(command: SimUpdateFunctionCodeCommand): UpdateFunctionCodeInput;
+//# sourceMappingURL=update-function-code-input.d.ts.map

package/dist/service/lambda/command/update-function-code/update-function-code-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code-input.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAWtF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,mBAAmB,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,4BAA4B,GACpC,uBAAuB,CAqBzB"}

package/dist/service/lambda/command/update-function-code/update-function-code-input.js

@@ -0,0 +1,30 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { requireLambdaCodeSource, } from "../../function/code/lambda-code-source.js";
+/**
+ * Where UpdateFunctionCode carries its code members, which is the top level
+ * of its input.
+ */
+const updateFunctionCodeNaming = {
+    path: "UpdateFunctionCodeCommand.input",
+    memberPrefix: "",
+};
+/**
+ * Require the AWS-required UpdateFunctionCode input fields, and validate the
+ * function code input into a sim Lambda code source.
+ */
+export function requireUpdateFunctionCodeInput(command) {
+    const { input } = command;
+    assertDefined(input.FunctionName, "UpdateFunctionCodeCommand.input.FunctionName required");
+    return {
+        name: input.FunctionName,
+        codeSource: requireLambdaCodeSource({
+            ZipFile: input.ZipFile,
+            S3Bucket: input.S3Bucket,
+            S3Key: input.S3Key,
+            S3ObjectVersion: input.S3ObjectVersion,
+            ImageUri: input.ImageUri,
+        }, updateFunctionCodeNaming),
+        publish: input.Publish ?? false,
+    };
+}
+//# sourceMappingURL=update-function-code-input.js.map

package/dist/service/lambda/command/update-function-code/update-function-code-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code-input.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,uBAAuB,GAExB,MAAM,2CAA2C,CAAC;AAGnD;;;GAGG;AACH,MAAM,wBAAwB,GAA6B;IACzD,IAAI,EAAE,iCAAiC;IACvC,YAAY,EAAE,EAAE;CACjB,CAAC;AAWF;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAqC;IAErC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,aAAa,CACX,KAAK,CAAC,YAAY,EAClB,uDAAuD,CACxD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,UAAU,EAAE,uBAAuB,CACjC;YACE,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,EACD,wBAAwB,CACzB;QACD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK;KAChC,CAAC;AACJ,CAAC"}

package/dist/service/lambda/command/update-function-code/update-function-code.command.d.ts

@@ -0,0 +1,41 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionCodeCommand/
+ */
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimLambdaFunctionConfiguration } from "../../function/sim-lambda-function-configuration.js";
+/**
+ * Minimal structural sim Lambda UpdateFunctionCode command.
+ */
+export interface SimUpdateFunctionCodeCommand {
+    readonly input: SimUpdateFunctionCodeCommandInput;
+}
+/**
+ * Minimal structural sim Lambda UpdateFunctionCode input.
+ *
+ * The code members sit at the top level here, unlike CreateFunction, which
+ * nests the same members under `Code`.
+ *
+ * Real Lambda takes a `RevisionId` and a `DryRun` to update only code the
+ * caller has already seen, and `Architectures` and `SourceKMSKeyArn` to
+ * describe how the code was built and encrypted. None of those are simulated,
+ * so all four are left out rather than accepted and ignored.
+ */
+export interface SimUpdateFunctionCodeCommandInput {
+    readonly FunctionName?: string | undefined;
+    readonly ZipFile?: Uint8Array | undefined;
+    readonly S3Bucket?: string | undefined;
+    readonly S3Key?: string | undefined;
+    readonly S3ObjectVersion?: string | undefined;
+    readonly ImageUri?: string | undefined;
+    readonly Publish?: boolean | undefined;
+}
+/**
+ * Minimal structural sim Lambda UpdateFunctionCode output.
+ *
+ * The configuration is the updated function's, or the published version's
+ * where `Publish` asked for one, as real Lambda answers.
+ */
+export interface SimUpdateFunctionCodeCommandOutput extends SimLambdaFunctionConfiguration {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=update-function-code.command.d.ts.map

package/dist/service/lambda/command/update-function-code/update-function-code.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qDAAqD,CAAC;AAE1G;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kCAAmC,SAAQ,8BAA8B;IACxF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/lambda/command/update-function-code/update-function-code.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionCodeCommand/
+ */
+export {};
+//# sourceMappingURL=update-function-code.command.js.map

package/dist/service/lambda/command/update-function-code/update-function-code.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/lambda/command/update-function-code/update-function-code.handler.d.ts

@@ -0,0 +1,52 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaContainerImages } from "../../function/code/image/sim-lambda-container-images.js";
+import type { SimLambdaCodeStore } from "../../function/code/store/sim-lambda-code-store.js";
+import type { SimLambdaVmSdkModuleProvider } from "../../function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
+import type { SimLambdaOutboundHttp } from "../../function/outbound/sim-lambda-outbound-http.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimLambdaFunctionVersionStore } from "../../function/version/sim-lambda-function-version-store.js";
+import type { SimUpdateFunctionCodeCommand, SimUpdateFunctionCodeCommandOutput } from "./update-function-code.command.js";
+interface UpdateFunctionCodeCommandHandlerProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly versions: SimLambdaFunctionVersionStore;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+    readonly codeStore?: SimLambdaCodeStore | undefined;
+    readonly containerImages?: SimLambdaContainerImages | undefined;
+    readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider | undefined;
+    readonly outboundHttp?: SimLambdaOutboundHttp | undefined;
+}
+interface UpdateFunctionCodeCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda UpdateFunctionCodeCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionCodeCommand/
+ */
+export declare class UpdateFunctionCodeCommandHandler implements CommandHandler<SimUpdateFunctionCodeCommand, SimUpdateFunctionCodeCommandOutput> {
+    private readonly functions;
+    private readonly versions;
+    private readonly authorizer;
+    private readonly background;
+    private readonly codeResolver;
+    constructor(properties: UpdateFunctionCodeCommandHandlerProperties);
+    /**
+     * Replace the code a sim Lambda function runs.
+     *
+     * The function keeps its name, ARN, execution Role, resource-based policy,
+     * Function URL, published versions and aliases. A version published before
+     * this still runs the code it was published with.
+     */
+    handle(command: SimUpdateFunctionCodeCommand, options?: UpdateFunctionCodeCommandHandlerOptions): Promise<SimUpdateFunctionCodeCommandOutput>;
+    /**
+     * What the caller is answered with, which is a version of the updated code
+     * where `Publish` asked for one.
+     */
+    private publishedOrUpdated;
+}
+export {};
+//# sourceMappingURL=update-function-code.handler.d.ts.map

package/dist/service/lambda/command/update-function-code/update-function-code.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iEAAiE,CAAC;AACpH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAGjG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AAGjH,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,mCAAmC,CAAC;AAE3C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC3D;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IAErD,YAAY,UAAU,EAAE,0CAA0C,EAwBjE;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CA+B7C;IAED;;;OAGG;IACH,OAAO,CAAC,kBAAkB;CAM3B"}

package/dist/service/lambda/command/update-function-code/update-function-code.handler.js

@@ -0,0 +1,72 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimLambdaCodeResolver } from "../../function/code/sim-lambda-code-resolver.js";
+import { simLambdaUnqualifiedFunctionOf } from "../../function/sim-lambda-function-reference.js";
+import { UpdateFunctionCodeAuthorizer } from "./update-function-code-authorizer.js";
+import { requireUpdateFunctionCodeInput } from "./update-function-code-input.js";
+/**
+ * Simulated Lambda UpdateFunctionCodeCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionCodeCommand/
+ */
+export class UpdateFunctionCodeCommandHandler {
+    functions;
+    versions;
+    authorizer;
+    background;
+    codeResolver;
+    constructor(properties) {
+        const { functions, versions, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, containerImages, vmSdkModuleProvider, outboundHttp, } = properties;
+        this.functions = functions;
+        this.versions = versions;
+        this.authorizer = new UpdateFunctionCodeAuthorizer({ iam });
+        this.background = background;
+        this.codeResolver = new SimLambdaCodeResolver({
+            codeStore,
+            containerImages,
+            vmSdkModuleProvider,
+            outboundHttp,
+            // The background scheduler is this simulation's clock, and the same one
+            // the function being updated was given.
+            clock: background,
+        });
+    }
+    /**
+     * Replace the code a sim Lambda function runs.
+     *
+     * The function keeps its name, ARN, execution Role, resource-based policy,
+     * Function URL, published versions and aliases. A version published before
+     * this still runs the code it was published with.
+     */
+    async handle(command, options) {
+        const input = requireUpdateFunctionCodeInput(command);
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const functionName = simLambdaUnqualifiedFunctionOf(input.name);
+        this.authorizer.authorize(this.functions.functionArn(functionName), options?.caller);
+        const simFunction = this.functions.require(functionName);
+        const code = await this.codeResolver.resolve(input.codeSource, {
+            // The function's own handler name and environment stand, because
+            // UpdateFunctionCode carries neither. UpdateFunctionConfiguration is
+            // where those change.
+            handlerName: simFunction.handlerName,
+            environment: simFunction.environment,
+            caller: options?.caller,
+            missingHandlerMessage: `Function ${functionName} has no Handler to find zip code's export ` +
+                "in. Set one with UpdateFunctionConfiguration first.",
+        });
+        simFunction.updateCode(code);
+        return {
+            $metadata: {},
+            ...this.publishedOrUpdated(simFunction, input.publish).configuration(),
+        };
+    }
+    /**
+     * What the caller is answered with, which is a version of the updated code
+     * where `Publish` asked for one.
+     */
+    publishedOrUpdated(simFunction, publish) {
+        return publish ? this.versions.publish(simFunction) : simFunction;
+    }
+}
+//# sourceMappingURL=update-function-code.handler.js.map

package/dist/service/lambda/command/update-function-code/update-function-code.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-code.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-code/update-function-code.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAKxF,OAAO,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AAIjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAqBjF;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,SAAS,CAA0B;IACnC,QAAQ,CAAgC;IACxC,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,YAAY,CAAwB;IAErD,YAAY,UAAsD;QAChE,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,YAAY,GACb,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC;YAC5C,SAAS;YACT,eAAe;YACf,mBAAmB;YACnB,YAAY;YACZ,wEAAwE;YACxE,wCAAwC;YACxC,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;QAEtD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE;YAC7D,iEAAiE;YACjE,qEAAqE;YACrE,sBAAsB;YACtB,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,qBAAqB,EACnB,YAAY,YAAY,4CAA4C;gBACpE,qDAAqD;SACxD,CAAC,CAAC;QAEH,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE7B,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE;SACvE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,WAA8B,EAC9B,OAAgB;QAEhB,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACpE,CAAC;CACF"}

package/dist/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.d.ts

@@ -0,0 +1,28 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface UpdateFunctionConfigurationAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a Lambda UpdateFunctionConfiguration request.
+ *
+ * AWS maps the UpdateFunctionConfiguration API operation to the
+ * lambda:UpdateFunctionConfiguration IAM action. The resource is the ARN of
+ * the function whose settings are changing.
+ */
+export declare class UpdateFunctionConfigurationAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: UpdateFunctionConfigurationAuthorizerProperties);
+    /**
+     * Ensure the caller may change the settings of the function with the given
+     * ARN.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit anonymous
+     * caller.
+     */
+    authorize(functionArn: string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=update-function-configuration-authorizer.d.ts.map

package/dist/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-configuration-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,+CAA+C;IACvD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAEtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,+CAA+C,EAEtE;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAc1D;CACF"}

package/dist/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.js

@@ -0,0 +1,38 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a Lambda UpdateFunctionConfiguration request.
+ *
+ * AWS maps the UpdateFunctionConfiguration API operation to the
+ * lambda:UpdateFunctionConfiguration IAM action. The resource is the ARN of
+ * the function whose settings are changing.
+ */
+export class UpdateFunctionConfigurationAuthorizer {
+    static action = "lambda:UpdateFunctionConfiguration";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may change the settings of the function with the given
+     * ARN.
+     *
+     * The caller is passed through unchanged so sim IAM can distinguish an
+     * omitted caller, which defaults to Account root, from an explicit anonymous
+     * caller.
+     */
+    authorize(functionArn, caller) {
+        const decision = this.iam.authorize({
+            action: UpdateFunctionConfigurationAuthorizer.action,
+            resource: functionArn,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: UpdateFunctionConfigurationAuthorizer.action,
+                resource: functionArn,
+            });
+        }
+    }
+}
+//# sourceMappingURL=update-function-configuration-authorizer.js.map

package/dist/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-configuration-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;GAMG;AACH,MAAM,OAAO,qCAAqC;IACxC,MAAM,CAAU,MAAM,GAAG,oCAAoC,CAAC;IAErD,GAAG,CAA0B;IAE9C,YAAY,UAA2D;QACrE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,WAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qCAAqC,CAAC,MAAM;YACpD,QAAQ,EAAE,WAAW;YACrB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qCAAqC,CAAC,MAAM;gBACpD,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}