@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/lambda/cfn/event-invoke-config/sim-cfn-lambda-event-invoke-config-remover.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Take an AWS::Lambda::EventInvokeConfig off the function it was written on,
  * so what is left of the function retries the default number of times and
@@ -9,4 +10,4 @@ import type { SimLambda } from "../../sim-lambda.js";
  * takes its configs with it, so a teardown that reached the function first
  * would otherwise fail here over work it had already done.
  */
-export declare function simCfnLambdaRemoveEventInvokeConfig(lambda: SimLambda, resource: SimCfnResource): Promise<void>;
+export declare function simCfnLambdaRemoveEventInvokeConfig(lambda: SimLambda, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;

package/dist/service/lambda/cfn/event-invoke-config/sim-cfn-lambda-event-invoke-config-remover.js

@@ -8,12 +8,10 @@ import { simCfnLambdaCreatedResource } from "../sim-cfn-lambda-created-resource.
  * takes its configs with it, so a teardown that reached the function first
  * would otherwise fail here over work it had already done.
  */
-export async function simCfnLambdaRemoveEventInvokeConfig(lambda, resource) {
+export async function simCfnLambdaRemoveEventInvokeConfig(lambda, resource, options) {
     const { functionName, qualifier } = simCfnLambdaCreatedResource(resource, "event invoke config");
     if (lambda.getSimEventInvokeConfig(functionName, qualifier) === undefined) {
         return;
     }
-    await lambda.deleteFunctionEventInvokeConfig({
-        input: { FunctionName: functionName, Qualifier: qualifier },
-    });
+    await lambda.deleteFunctionEventInvokeConfig({ input: { FunctionName: functionName, Qualifier: qualifier } }, options);
 }

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLambdaEventSourceMapping } from "../../event-source/sim-lambda-event-source-mapping.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaEventSourceMappingCreatorProperties {
     readonly lambda: SimLambda;
 }
@@ -20,6 +21,6 @@ export declare class SimCfnLambdaEventSourceMappingCreator {
     /**
      * Create a mapping from an AWS::Lambda::EventSourceMapping Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaEventSourceMapping>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLambdaEventSourceMapping>;
 }
 export {};

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.js

@@ -17,13 +17,13 @@ export class SimCfnLambdaEventSourceMappingCreator {
     /**
      * Create a mapping from an AWS::Lambda::EventSourceMapping Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const created = await this.lambda.createEventSourceMapping({
             input: new SimCfnLambdaEventSourceMappingProperties({
                 resource,
                 properties,
             }).createInput(),
-        });
+        }, options);
         const mapping = this.lambda.getSimEventSourceMapping(created.UUID);
         assertDefined(mapping, `Sim Lambda event source mapping ${resource.logicalId} after ` +
             "CloudFormation creation");

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaFunctionCreatorProperties {
     readonly lambda: SimLambda;
 }
@@ -23,6 +24,6 @@ export declare class SimCfnLambdaFunctionCreator {
      * through their actual handler while still deploying it through
      * CloudFormation.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, bindings?: readonly SimCfnBinding[]): Promise<SimLambdaFunction>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, bindings?: readonly SimCfnBinding[], options?: SimCfnResourceCallerOptions): Promise<SimLambdaFunction>;
 }
 export {};

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.js

@@ -21,7 +21,7 @@ export class SimCfnLambdaFunctionCreator {
      * through their actual handler while still deploying it through
      * CloudFormation.
      */
-    async create(resource, properties, bindings) {
+    async create(resource, properties, bindings, options) {
         const functionProperties = this.propertiesParser.parse(resource, properties);
         const codeInput = simCfnLambdaCodeInput({
             resource,
@@ -33,10 +33,9 @@ export class SimCfnLambdaFunctionCreator {
         if (skipError !== undefined) {
             throw skipError;
         }
+        const input = simCfnLambdaCreateFunctionInput(functionProperties, codeInput.code);
         try {
-            await this.lambda.createFunction({
-                input: simCfnLambdaCreateFunctionInput(functionProperties, codeInput.code),
-            });
+            await this.lambda.createFunction({ input }, options);
         }
         catch (error) {
             const assetsSkipError = this.skips.fromCreateFailure(resource, functionProperties, error);

package/dist/service/lambda/cfn/permission/sim-cfn-lambda-permission-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLambdaPermission } from "../../function/policy/sim-lambda-permission.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaPermissionCreatorProperties {
     readonly lambda: SimLambda;
 }
@@ -30,6 +31,6 @@ export declare class SimCfnLambdaPermissionCreator {
      * statement after the logical ID, so that is what the permission is
      * addressed by afterwards, including by a later `RemovePermission`.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaPermission>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLambdaPermission>;
 }
 export {};

package/dist/service/lambda/cfn/permission/sim-cfn-lambda-permission-creator.js

@@ -28,7 +28,7 @@ export class SimCfnLambdaPermissionCreator {
      * statement after the logical ID, so that is what the permission is
      * addressed by afterwards, including by a later `RemovePermission`.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const { functionName, qualifier } = simCfnLambdaTargetFunction(this.propertyParser.requiredString(resource, properties["FunctionName"], "FunctionName"));
         await this.lambda.addPermission({
             input: {
@@ -43,7 +43,7 @@ export class SimCfnLambdaPermissionCreator {
                 PrincipalOrgID: this.propertyParser.optionalString(resource, properties["PrincipalOrgID"], "PrincipalOrgID"),
                 InvokedViaFunctionUrl: this.propertyParser.optionalBoolean(resource, properties["InvokedViaFunctionUrl"], "InvokedViaFunctionUrl"),
             },
-        });
+        }, options);
         const permission = this.lambda
             .getSimFunctionTarget(functionName, qualifier)
             ?.resource.resourcePolicy.get(resource.logicalId);

package/dist/service/lambda/cfn/permission/sim-cfn-lambda-permission-revoker.d.ts

@@ -1,5 +1,6 @@
 import type { SimLambda } from "../../sim-lambda.js";
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Take an AWS::Lambda::Permission back off what it was granted on.
  *
@@ -8,4 +9,4 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
  * addresses it again here. A grant made on a version or an alias is revoked
  * from that same qualified resource, which the statement's own ARN names.
  */
-export declare function simCfnLambdaRevokePermission(lambda: SimLambda, resource: SimCfnResource): Promise<void>;
+export declare function simCfnLambdaRevokePermission(lambda: SimLambda, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;

package/dist/service/lambda/cfn/permission/sim-cfn-lambda-permission-revoker.js

@@ -8,7 +8,7 @@ import { simCfnLambdaTargetFunction } from "../function/sim-cfn-lambda-target-fu
  * addresses it again here. A grant made on a version or an alias is revoked
  * from that same qualified resource, which the statement's own ARN names.
  */
-export async function simCfnLambdaRevokePermission(lambda, resource) {
+export async function simCfnLambdaRevokePermission(lambda, resource, options) {
     const permission = simCfnLambdaCreatedResource(resource, "permission");
     const { functionName, qualifier } = simCfnLambdaTargetFunction(permission.resourceArn);
     await lambda.removePermission({
@@ -17,5 +17,5 @@ export async function simCfnLambdaRevokePermission(lambda, resource) {
             Qualifier: qualifier,
             StatementId: permission.statementId,
         },
-    });
+    }, options);
 }

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-deleter.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimLambda } from "../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaResourceDeleterProperties {
     readonly lambda: SimLambda;
 }
@@ -16,13 +17,6 @@ export declare class SimCfnLambdaResourceDeleter {
     /**
      * Delete a simulated Lambda resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
-    private deleteFunction;
-    private deleteFunctionUrl;
-    private deleteEventSourceMapping;
-    /**
-     * Drop an alias, leaving the version it pointed at where it is.
-     */
-    private deleteAlias;
+    delete(resourceTypeName: string, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-deleter.js

@@ -1,4 +1,4 @@
-import { simCfnLambdaCreatedResource } from "./sim-cfn-lambda-created-resource.js";
+import { simCfnLambdaCreatedResource as created } from "./sim-cfn-lambda-created-resource.js";
 import { simCfnLambdaRemoveEventInvokeConfig } from "./event-invoke-config/sim-cfn-lambda-event-invoke-config-remover.js";
 import { simCfnLambdaRevokePermission } from "./permission/sim-cfn-lambda-permission-revoker.js";
 import { simCfnLambdaTargetFunctionName } from "./function/sim-cfn-lambda-target-function.js";
@@ -17,26 +17,29 @@ export class SimCfnLambdaResourceDeleter {
     /**
      * Delete a simulated Lambda resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, options) {
         switch (resourceTypeName) {
             case "Function": {
-                await this.deleteFunction(resource);
+                const { name } = created(resource, "function");
+                await this.lambda.deleteFunction({ input: { FunctionName: name } }, options);
                 return;
             }
             case "Url": {
-                await this.deleteFunctionUrl(resource);
+                const url = created(resource, "Function URL");
+                await this.lambda.deleteFunctionUrlConfig({ input: { FunctionName: url.functionName } }, options);
                 return;
             }
             case "EventSourceMapping": {
-                await this.deleteEventSourceMapping(resource);
+                const { uuid } = created(resource, "event source mapping");
+                await this.lambda.deleteEventSourceMapping({ input: { UUID: uuid } }, options);
                 return;
             }
             case "EventInvokeConfig": {
-                await simCfnLambdaRemoveEventInvokeConfig(this.lambda, resource);
+                await simCfnLambdaRemoveEventInvokeConfig(this.lambda, resource, options);
                 return;
             }
             case "Permission": {
-                await simCfnLambdaRevokePermission(this.lambda, resource);
+                await simCfnLambdaRevokePermission(this.lambda, resource, options);
                 return;
             }
             case "Version": {
@@ -48,7 +51,14 @@ export class SimCfnLambdaResourceDeleter {
                 return;
             }
             case "Alias": {
-                await this.deleteAlias(resource);
+                // The version the alias pointed at is left where it is.
+                const alias = created(resource, "alias");
+                await this.lambda.deleteAlias({
+                    input: {
+                        FunctionName: simCfnLambdaTargetFunctionName(alias.arn),
+                        Name: alias.name,
+                    },
+                }, options);
                 return;
             }
             default: {
@@ -56,34 +66,4 @@ export class SimCfnLambdaResourceDeleter {
             }
         }
     }
-    async deleteFunction(resource) {
-        const simFunction = simCfnLambdaCreatedResource(resource, "function");
-        await this.lambda.deleteFunction({
-            input: { FunctionName: simFunction.name },
-        });
-    }
-    async deleteFunctionUrl(resource) {
-        const functionUrl = simCfnLambdaCreatedResource(resource, "Function URL");
-        await this.lambda.deleteFunctionUrlConfig({
-            input: { FunctionName: functionUrl.functionName },
-        });
-    }
-    async deleteEventSourceMapping(resource) {
-        const mapping = simCfnLambdaCreatedResource(resource, "event source mapping");
-        await this.lambda.deleteEventSourceMapping({
-            input: { UUID: mapping.uuid },
-        });
-    }
-    /**
-     * Drop an alias, leaving the version it pointed at where it is.
-     */
-    async deleteAlias(resource) {
-        const alias = simCfnLambdaCreatedResource(resource, "alias");
-        await this.lambda.deleteAlias({
-            input: {
-                FunctionName: simCfnLambdaTargetFunctionName(alias.arn),
-                Name: alias.name,
-            },
-        });
-    }
 }

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.d.ts

@@ -1,4 +1,4 @@
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimLambda } from "../sim-lambda.js";
 /**
@@ -21,5 +21,5 @@ export declare class SimLambdaCloudFormationResourceFactory implements SimCfnSer
     /**
      * Delete a simulated Lambda resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }

package/dist/service/lambda/cfn/sim-cfn-lambda-resource-factory.js

@@ -1,3 +1,4 @@
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnLambdaAliasCreator } from "./alias/sim-cfn-lambda-alias-creator.js";
 import { SimCfnLambdaEventInvokeConfigCreator } from "./event-invoke-config/sim-cfn-lambda-event-invoke-config-creator.js";
 import { SimCfnLambdaEventSourceMappingCreator } from "./event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.js";
@@ -36,27 +37,29 @@ export class SimLambdaCloudFormationResourceFactory {
      * Create a simulated Lambda resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Function": {
-                return await this.functionCreator.create(resource, context.resolvedProperties ?? resource.properties, context.bindings);
+                return await this.functionCreator.create(resource, properties, context.bindings, options);
             }
             case "Url": {
-                return await this.urlCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.urlCreator.create(resource, properties, options);
             }
             case "EventSourceMapping": {
-                return await this.eventSourceMappingCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.eventSourceMappingCreator.create(resource, properties, options);
             }
             case "EventInvokeConfig": {
-                return await this.eventInvokeConfigCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.eventInvokeConfigCreator.create(resource, properties, options);
             }
             case "Permission": {
-                return await this.permissionCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.permissionCreator.create(resource, properties, options);
             }
             case "Version": {
-                return await this.versionCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.versionCreator.create(resource, properties, options);
             }
             case "Alias": {
-                return await this.aliasCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.aliasCreator.create(resource, properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim Lambda CloudFormation Resource ${resourceTypeName}`);
@@ -66,7 +69,7 @@ export class SimLambdaCloudFormationResourceFactory {
     /**
      * Delete a simulated Lambda resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.deleter.delete(resourceTypeName, resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/lambda/cfn/url/sim-cfn-lambda-url-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaUrlCreatorProperties {
     readonly lambda: SimLambda;
 }
@@ -19,6 +20,6 @@ export declare class SimCfnLambdaUrlCreator {
     /**
      * Create a simulated Function URL from an AWS::Lambda::Url Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaFunctionUrl>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLambdaFunctionUrl>;
 }
 export {};

package/dist/service/lambda/cfn/url/sim-cfn-lambda-url-creator.js

@@ -17,7 +17,7 @@ export class SimCfnLambdaUrlCreator {
     /**
      * Create a simulated Function URL from an AWS::Lambda::Url Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const targetFunctionArn = this.propertyParser.requiredString(resource, properties["TargetFunctionArn"], "TargetFunctionArn");
         const functionName = simCfnLambdaTargetFunctionName(targetFunctionArn);
         await this.lambda.createFunctionUrlConfig({
@@ -26,7 +26,7 @@ export class SimCfnLambdaUrlCreator {
                 AuthType: this.propertyParser.requiredString(resource, properties["AuthType"], "AuthType"),
                 InvokeMode: this.propertyParser.optionalString(resource, properties["InvokeMode"], "InvokeMode"),
             },
-        });
+        }, options);
         const functionUrl = this.lambda.getSimFunctionUrl(functionName);
         assertDefined(functionUrl, `Sim Lambda Function URL for ${functionName} after CloudFormation creation`);
         return functionUrl;

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
 import type { SimLambda } from "../../sim-lambda.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnLambdaVersionCreatorProperties {
     readonly lambda: SimLambda;
 }
@@ -25,6 +26,6 @@ export declare class SimCfnLambdaVersionCreator {
     /**
      * Publish a version from an AWS::Lambda::Version Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaFunction>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLambdaFunction>;
 }
 export {};

package/dist/service/lambda/cfn/version/sim-cfn-lambda-version-creator.js

@@ -23,14 +23,14 @@ export class SimCfnLambdaVersionCreator {
     /**
      * Publish a version from an AWS::Lambda::Version Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const functionName = simCfnLambdaTargetFunctionName(this.propertyParser.requiredString(resource, properties["FunctionName"], "FunctionName"));
         const published = await this.lambda.publishVersion({
             input: {
                 FunctionName: functionName,
                 Description: this.propertyParser.optionalString(resource, properties["Description"], "Description"),
             },
-        });
+        }, options);
         const version = this.lambda.getSimFunctionTarget(functionName, published.Version)?.simFunction;
         assertDefined(version, `Sim Lambda version ${published.Version} of ${functionName} after ` +
             "CloudFormation creation");

package/dist/service/lambda/command/create-function/create-function-authorizer.js

@@ -27,6 +27,7 @@ export class CreateFunctionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: CreateFunctionAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/delete-function/delete-function-authorizer.js

@@ -23,6 +23,7 @@ export class DeleteFunctionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteFunctionAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/event-invoke-config/event-invoke-config-authorizer.js

@@ -30,6 +30,7 @@ export class EventInvokeConfigAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: this.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/function-url/function-url-authorizer.js

@@ -30,6 +30,7 @@ export class FunctionUrlAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: this.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/get-function/get-function-authorizer.js

@@ -27,6 +27,7 @@ export class GetFunctionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: GetFunctionAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/invoke/invoke-authorizer.js

@@ -37,6 +37,7 @@ export class InvokeAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: InvokeAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/list-functions/list-functions-authorizer.js

@@ -32,6 +32,7 @@ export class ListFunctionsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ListFunctionsAuthorizer.action,
                 resource: ListFunctionsAuthorizer.resource,
             });

package/dist/service/lambda/command/update-function-code/update-function-code-authorizer.js

@@ -28,6 +28,7 @@ export class UpdateFunctionCodeAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: UpdateFunctionCodeAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/update-function-configuration/update-function-configuration-authorizer.js

@@ -29,6 +29,7 @@ export class UpdateFunctionConfigurationAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: UpdateFunctionConfigurationAuthorizer.action,
                 resource: functionArn,
             });

package/dist/service/lambda/command/version/version-authorizer.js

@@ -30,6 +30,7 @@ export class VersionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: this.action,
                 resource: functionArn,
             });

package/dist/service/lambda/serve/sim-lambda-url-router.js

@@ -1,4 +1,5 @@
 import { SimAws } from "../../aws/sim-aws.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * Routes a served Function URL request to the function behind it.
  *
@@ -41,6 +42,6 @@ export class SimLambdaUrlRouter {
         if (simFunction === undefined) {
             return undefined;
         }
-        return { functionUrl, simFunction, iam: scope.iam() };
+        return { functionUrl, simFunction, iam: simScopeIamAuthZ(scope) };
     }
 }

package/dist/service/lambda/sim-lambda-commands.d.ts

@@ -2,7 +2,7 @@ import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsRunAsOwner } from "../aws/caller/sim-aws-run-as-context.js";
 import type { SimSqsPollQueues } from "../sqs/poll/sim-sqs-poll-queues.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimLambdaAliasCommands } from "./command/alias/sim-lambda-alias-commands.js";
 import { SimLambdaEventInvokeConfigCommands } from "./command/event-invoke-config/sim-lambda-event-invoke-config-commands.js";
 import { SimLambdaEventSourceMappingCommands } from "./command/event-source-mapping/sim-lambda-event-source-mapping-commands.js";

package/dist/service/lambda/sim-lambda-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimLambdaAliasCommands } from "./command/alias/sim-lambda-alias-commands.js";
 import { SimLambdaEventInvokeConfigCommands } from "./command/event-invoke-config/sim-lambda-event-invoke-config-commands.js";
 import { SimLambdaEventSourceMappingCommands } from "./command/event-source-mapping/sim-lambda-event-source-mapping-commands.js";
@@ -51,7 +51,7 @@ export class SimLambdaCommands {
     eventSourceMappings;
     eventInvokeConfigs;
     constructor(properties) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, logs, outboundHttp, 
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, logs, outboundHttp, 
         // A standalone SimLambda is not reachable over HTTP, so its own registry
         // is enough; a SimAws-created one shares the environment-wide registry
         // the serving layer routes with.
@@ -63,6 +63,7 @@ export class SimLambdaCommands {
         // A standalone SimLambda has no simulated ECR beside it, so a container
         // image function created on one has nothing to resolve its image in.
         containerImages = new SimLambdaNoContainerImages(), destinations = new SimLambdaNoDestinationTargets(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         this.containerImages = containerImages;
         this.eventInvokeConfigStore = new SimLambdaEventInvokeConfigStore({
             clock: background,

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLogsDelivery } from "../../delivery/sim-logs-delivery.js";
 import type { SimLogs } from "../../sim-logs.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnDeliveryCreatorProperties {
     readonly logs: SimLogs;
 }
@@ -18,10 +19,10 @@ export declare class SimCfnDeliveryCreator {
     /**
      * Create a delivery from an AWS::Logs::Delivery Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLogsDelivery>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLogsDelivery>;
     /**
      * Delete a delivery created from a CloudFormation Resource.
      */
-    delete(delivery: SimLogsDelivery): Promise<void>;
+    delete(delivery: SimLogsDelivery, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.js

@@ -26,7 +26,7 @@ export class SimCfnDeliveryCreator {
     /**
      * Create a delivery from an AWS::Logs::Delivery Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const reader = new SimCfnDeliveryProperties({
             resource,
             properties,
@@ -35,9 +35,7 @@ export class SimCfnDeliveryCreator {
             unsimulatedReasons: deliveryUnsimulatedReasons,
         });
         reader.recordIgnoredProperties();
-        const created = await this.#logs.createDelivery({
-            input: simCfnDeliveryInput(reader),
-        });
+        const created = await this.#logs.createDelivery({ input: simCfnDeliveryInput(reader) }, options);
         const delivery = this.#logs.findDelivery(created.delivery?.id ?? "");
         assertDefined(delivery, `sim CloudWatch Logs delivery for CloudFormation Resource ${resource.logicalId}`);
         return delivery;
@@ -45,7 +43,7 @@ export class SimCfnDeliveryCreator {
     /**
      * Delete a delivery created from a CloudFormation Resource.
      */
-    async delete(delivery) {
-        await this.#logs.deleteDelivery({ input: { id: delivery.id } });
+    async delete(delivery, options) {
+        await this.#logs.deleteDelivery({ input: { id: delivery.id } }, options);
     }
 }