@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLogsDeliveryDestination } from "../../delivery/sim-logs-delivery-destination.js";
 import type { SimLogs } from "../../sim-logs.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnDeliveryDestinationCreatorProperties {
     readonly logs: SimLogs;
 }
@@ -20,10 +21,10 @@ export declare class SimCfnDeliveryDestinationCreator {
     /**
      * Create a delivery destination from a CloudFormation Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLogsDeliveryDestination>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLogsDeliveryDestination>;
     /**
      * Delete a delivery destination created from a CloudFormation Resource.
      */
-    delete(destination: SimLogsDeliveryDestination): Promise<void>;
+    delete(destination: SimLogsDeliveryDestination, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.js

@@ -24,7 +24,7 @@ export class SimCfnDeliveryDestinationCreator {
     /**
      * Create a delivery destination from a CloudFormation Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const reader = new SimCfnDeliveryProperties({
             resource,
             properties,
@@ -42,7 +42,7 @@ export class SimCfnDeliveryDestinationCreator {
                     destinationResourceArn: reader.requiredString("DestinationResourceArn"),
                 },
             },
-        });
+        }, options);
         const destination = this.#logs.findDeliveryDestination(name);
         assertDefined(destination, `sim CloudWatch Logs delivery destination for CloudFormation Resource ${resource.logicalId}`);
         return destination;
@@ -50,9 +50,7 @@ export class SimCfnDeliveryDestinationCreator {
     /**
      * Delete a delivery destination created from a CloudFormation Resource.
      */
-    async delete(destination) {
-        await this.#logs.deleteDeliveryDestination({
-            input: { name: destination.name },
-        });
+    async delete(destination, options) {
+        await this.#logs.deleteDeliveryDestination({ input: { name: destination.name } }, options);
     }
 }

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-source-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimLogsDeliverySource } from "../../delivery/sim-logs-delivery-source.js";
 import type { SimLogs } from "../../sim-logs.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnDeliverySourceCreatorProperties {
     readonly logs: SimLogs;
 }
@@ -19,10 +20,10 @@ export declare class SimCfnDeliverySourceCreator {
     /**
      * Create a delivery source from an AWS::Logs::DeliverySource Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLogsDeliverySource>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimLogsDeliverySource>;
     /**
      * Delete a delivery source created from a CloudFormation Resource.
      */
-    delete(source: SimLogsDeliverySource): Promise<void>;
+    delete(source: SimLogsDeliverySource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-source-creator.js

@@ -19,7 +19,7 @@ export class SimCfnDeliverySourceCreator {
     /**
      * Create a delivery source from an AWS::Logs::DeliverySource Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const reader = new SimCfnDeliveryProperties({
             resource,
             properties,
@@ -35,7 +35,7 @@ export class SimCfnDeliverySourceCreator {
                 resourceArn: reader.requiredString("ResourceArn"),
                 logType: reader.requiredString("LogType"),
             },
-        });
+        }, options);
         const source = this.#logs.findDeliverySource(name);
         assertDefined(source, `sim CloudWatch Logs delivery source for CloudFormation Resource ${resource.logicalId}`);
         return source;
@@ -43,7 +43,7 @@ export class SimCfnDeliverySourceCreator {
     /**
      * Delete a delivery source created from a CloudFormation Resource.
      */
-    async delete(source) {
-        await this.#logs.deleteDeliverySource({ input: { name: source.name } });
+    async delete(source, options) {
+        await this.#logs.deleteDeliverySource({ input: { name: source.name } }, options);
     }
 }

package/dist/service/logs/cfn/sim-logs-cfn-resource-deleter.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnDeliveryCreator } from "./delivery/sim-cfn-delivery-creator.
 import type { SimCfnDeliveryDestinationCreator } from "./delivery/sim-cfn-delivery-destination-creator.js";
 import type { SimCfnDeliverySourceCreator } from "./delivery/sim-cfn-delivery-source-creator.js";
 import type { SimCfnLogGroupCreator } from "./group/sim-cfn-log-group-creator.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimLogsCfnResourceDeleterProperties {
     readonly logGroups: SimCfnLogGroupCreator;
     readonly deliverySources: SimCfnDeliverySourceCreator;
@@ -21,6 +22,6 @@ export declare class SimLogsCfnResourceDeleter {
     /**
      * Delete the resource a CloudFormation Resource created.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/logs/cfn/sim-logs-cfn-resource-deleter.js

@@ -14,22 +14,22 @@ export class SimLogsCfnResourceDeleter {
     /**
      * Delete the resource a CloudFormation Resource created.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, options) {
         switch (resourceTypeName) {
             case "LogGroup": {
                 this.#creators.logGroups.delete(created(resource));
                 return;
             }
             case "DeliverySource": {
-                await this.#creators.deliverySources.delete(created(resource));
+                await this.#creators.deliverySources.delete(created(resource), options);
                 return;
             }
             case "DeliveryDestination": {
-                await this.#creators.deliveryDestinations.delete(created(resource));
+                await this.#creators.deliveryDestinations.delete(created(resource), options);
                 return;
             }
             case "Delivery": {
-                await this.#creators.deliveries.delete(created(resource));
+                await this.#creators.deliveries.delete(created(resource), options);
                 return;
             }
             default: {

package/dist/service/logs/cfn/sim-logs-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimLogs } from "../sim-logs.js";
 interface SimLogsCfnResourceFactoryProperties {
     readonly logs: SimLogs;
@@ -28,6 +28,6 @@ export declare class SimLogsCfnResourceFactory implements SimCfnServiceResourceF
      * Delete a simulated CloudWatch Logs resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};

package/dist/service/logs/cfn/sim-logs-cfn-resource-factory.js

@@ -1,3 +1,4 @@
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnDeliveryCreator } from "./delivery/sim-cfn-delivery-creator.js";
 import { SimCfnDeliveryDestinationCreator } from "./delivery/sim-cfn-delivery-destination-creator.js";
 import { SimCfnDeliverySourceCreator } from "./delivery/sim-cfn-delivery-source-creator.js";
@@ -40,18 +41,19 @@ export class SimLogsCfnResourceFactory {
      */
     async create(resourceTypeName, resource, context) {
         const values = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "LogGroup": {
                 return this.#logGroups.create(resource, values);
             }
             case "DeliverySource": {
-                return await this.#deliverySources.create(resource, values);
+                return await this.#deliverySources.create(resource, values, options);
             }
             case "DeliveryDestination": {
-                return await this.#deliveryDestinations.create(resource, values);
+                return await this.#deliveryDestinations.create(resource, values, options);
             }
             case "Delivery": {
-                return await this.#deliveries.create(resource, values);
+                return await this.#deliveries.create(resource, values, options);
             }
             default: {
                 throw unsupportedSimLogsResourceType(resourceTypeName, "");
@@ -62,7 +64,7 @@ export class SimLogsCfnResourceFactory {
      * Delete a simulated CloudWatch Logs resource created from a CloudFormation
      * Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.#deleter.delete(resourceTypeName, resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.#deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/logs/command/authorize/sim-logs-authorizer.js

@@ -52,6 +52,7 @@ export class SimLogsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/logs/sim-logs-commands.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimLogsDeliveryCommands } from "./command/delivery/sim-logs-delivery-commands.js";
 import { SimLogsDeliveryDestinationCommands } from "./command/delivery/sim-logs-delivery-destination-commands.js";
 import { SimLogsDeliverySourceCommands } from "./command/delivery/sim-logs-delivery-source-commands.js";

package/dist/service/logs/sim-logs-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimLogsAuthorizer } from "./command/authorize/sim-logs-authorizer.js";
 import { SimLogsDeliveryCommands } from "./command/delivery/sim-logs-delivery-commands.js";
 import { SimLogsDeliveryDestinationCommands } from "./command/delivery/sim-logs-delivery-destination-commands.js";
@@ -48,7 +48,8 @@ export class SimLogsCommands {
     deliveries;
     background;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), subscriptionDestinations = new SimLogsNoSubscriptionDestinations(), deliverySourceResources = new SimLogsUncheckedDeliverySourceResources(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), subscriptionDestinations = new SimLogsNoSubscriptionDestinations(), deliverySourceResources = new SimLogsUncheckedDeliverySourceResources(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const authorizer = new SimLogsAuthorizer({ iam, accountRegionScope });
         const groups = new SimLogsLogGroupStore({ accountRegionScope });
         const eventIds = new SimLogsEventIds();

package/dist/service/logs/subscription/lambda/sim-logs-destination-permission.js

@@ -1,6 +1,7 @@
 import { SimLambdaServiceInvokeAuthorizer } from "../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
 import { SimLogsDeliveryNotPermitted } from "../../error/sim-logs-delivery.error.js";
 import { SimLogsResourceNotFoundException } from "../../error/sim-logs.error.js";
+import { simScopeIamAuthZ } from "../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * The service principal CloudWatch Logs invokes a destination function as.
  *
@@ -32,7 +33,7 @@ export function permittedSimLogsDestinationFunction(arn, scope) {
     }
     const servicePrincipal = simLogsServicePrincipal(scope.region.regionName);
     const decision = new SimLambdaServiceInvokeAuthorizer({
-        iam: scope.iam(),
+        iam: simScopeIamAuthZ(scope),
     }).authorize({ resource: target.resource, servicePrincipal });
     if (decision.isDenied) {
         throw new SimLogsDeliveryNotPermitted(`Could not execute the lambda function. Make sure you have given ` +

package/dist/service/organizations/cfn/sim-cfn-organization-creator.d.ts

@@ -0,0 +1,19 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCfnOrganization } from "./sim-cfn-organizations-record.js";
+/**
+ * Records the organization an `AWS::Organizations::Organization` declares.
+ *
+ * A SimAws already has one organization, so this brings nothing into being.
+ * The Resource earns its place by answering `RootId`, which is what the rest
+ * of a template hangs off.
+ */
+export declare class SimCfnOrganizationCreator {
+    #private;
+    constructor(simAws: SimAws);
+    /**
+     * Record the organization a template declares.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCfnOrganization;
+}

package/dist/service/organizations/cfn/sim-cfn-organization-creator.js

@@ -0,0 +1,25 @@
+import { SimCfnOrganization } from "./sim-cfn-organizations-record.js";
+import { SimCfnOrganizationsProperties } from "./sim-cfn-organizations-properties.js";
+/**
+ * Records the organization an `AWS::Organizations::Organization` declares.
+ *
+ * A SimAws already has one organization, so this brings nothing into being.
+ * The Resource earns its place by answering `RootId`, which is what the rest
+ * of a template hangs off.
+ */
+export class SimCfnOrganizationCreator {
+    #simAws;
+    constructor(simAws) {
+        this.#simAws = simAws;
+    }
+    /**
+     * Record the organization a template declares.
+     */
+    create(resource, properties) {
+        const values = new SimCfnOrganizationsProperties(resource, "AWS::Organizations::Organization");
+        const featureSet = properties["FeatureSet"];
+        values.ignore(featureSet, "FeatureSet", "Simulated Organizations evaluates service control policies whatever " +
+            "the feature set says");
+        return new SimCfnOrganization(this.#simAws.organizations().root().id, values.optionalString(featureSet) ?? "ALL", this.#simAws.defaultAccountId);
+    }
+}

package/dist/service/organizations/cfn/sim-cfn-organizational-unit-creator.d.ts

@@ -0,0 +1,16 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimOrganizationsOrganizationalUnit } from "../tree/sim-organizations-node.js";
+/**
+ * Creates organizational units from
+ * `AWS::Organizations::OrganizationalUnit` Resources.
+ */
+export declare class SimCfnOrganizationalUnitCreator {
+    #private;
+    constructor(simAws: SimAws);
+    /**
+     * Create a unit under the node its `ParentId` names.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimOrganizationsOrganizationalUnit;
+}

package/dist/service/organizations/cfn/sim-cfn-organizational-unit-creator.js

@@ -0,0 +1,21 @@
+import { SimCfnOrganizationsProperties } from "./sim-cfn-organizations-properties.js";
+/**
+ * Creates organizational units from
+ * `AWS::Organizations::OrganizationalUnit` Resources.
+ */
+export class SimCfnOrganizationalUnitCreator {
+    #simAws;
+    constructor(simAws) {
+        this.#simAws = simAws;
+    }
+    /**
+     * Create a unit under the node its `ParentId` names.
+     */
+    create(resource, properties) {
+        const values = new SimCfnOrganizationsProperties(resource, "AWS::Organizations::OrganizationalUnit");
+        values.ignore(properties["Tags"], "Tags", "Simulated Organizations reads no unit tags");
+        return this.#simAws
+            .organizations()
+            .createOrganizationalUnit(values.requiredString(properties["Name"], "Name"), values.requiredString(properties["ParentId"], "ParentId"));
+    }
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-account-creator.d.ts

@@ -0,0 +1,20 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCfnOrganizationsAccount } from "./sim-cfn-organizations-record.js";
+/**
+ * Puts Accounts in the organization from `AWS::Organizations::Account`
+ * Resources.
+ *
+ * AWS creates a new account here and gives it an id nobody chose, so this does
+ * the same. A template reads that id back with `Ref` or with
+ * `Fn::GetAtt AccountId`.
+ */
+export declare class SimCfnOrganizationsAccountCreator {
+    #private;
+    constructor(simAws: SimAws);
+    /**
+     * Create an Account under the first node its `ParentIds` names.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCfnOrganizationsAccount;
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-account-creator.js

@@ -0,0 +1,34 @@
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+import { SimCfnOrganizationsAccount } from "./sim-cfn-organizations-record.js";
+import { SimCfnOrganizationsProperties } from "./sim-cfn-organizations-properties.js";
+/**
+ * Puts Accounts in the organization from `AWS::Organizations::Account`
+ * Resources.
+ *
+ * AWS creates a new account here and gives it an id nobody chose, so this does
+ * the same. A template reads that id back with `Ref` or with
+ * `Fn::GetAtt AccountId`.
+ */
+export class SimCfnOrganizationsAccountCreator {
+    #simAws;
+    constructor(simAws) {
+        this.#simAws = simAws;
+    }
+    /**
+     * Create an Account under the first node its `ParentIds` names.
+     */
+    create(resource, properties) {
+        const values = new SimCfnOrganizationsProperties(resource, "AWS::Organizations::Account");
+        values.ignore(properties["Tags"], "Tags", "Simulated Organizations reads no Account tags");
+        values.ignore(properties["RoleName"], "RoleName", "Simulated Organizations creates no cross-account access Role");
+        // Everything the Resource needs is read before the organization changes.
+        // A property that fails after the Account was placed would leave it in the
+        // organization with no record for a teardown to take it out again.
+        const accountName = values.requiredString(properties["AccountName"], "AccountName");
+        const email = values.requiredString(properties["Email"], "Email");
+        const parentId = values.stringList(properties["ParentIds"])[0];
+        const accountId = makeSimAwsAccountId();
+        this.#simAws.organizations().moveAccount(accountId, parentId);
+        return new SimCfnOrganizationsAccount(accountId, accountName, email, this.#simAws.now());
+    }
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-policy-creator.d.ts

@@ -0,0 +1,21 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCfnOrganizationsPolicy } from "./sim-cfn-organizations-record.js";
+/**
+ * Attaches service control policies from `AWS::Organizations::Policy`
+ * Resources to the nodes they target.
+ *
+ * A policy of any other type is refused as an unsupported Resource, so the
+ * Stack records it and deploys on. Simulated Organizations evaluates service
+ * control policies and nothing else, and a tag policy stored here would look
+ * like one that does something.
+ */
+export declare class SimCfnOrganizationsPolicyCreator {
+    #private;
+    constructor(simAws: SimAws);
+    /**
+     * Attach a policy to every node its `TargetIds` names.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCfnOrganizationsPolicy;
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-policy-creator.js

@@ -0,0 +1,40 @@
+import { makeSimOrganizationsPolicyId, } from "../tree/sim-organizations-node.js";
+import { SimCfnOrganizationsPolicy } from "./sim-cfn-organizations-record.js";
+import { SimCfnOrganizationsPolicyInput } from "./sim-cfn-organizations-policy-input.js";
+/**
+ * Attaches service control policies from `AWS::Organizations::Policy`
+ * Resources to the nodes they target.
+ *
+ * A policy of any other type is refused as an unsupported Resource, so the
+ * Stack records it and deploys on. Simulated Organizations evaluates service
+ * control policies and nothing else, and a tag policy stored here would look
+ * like one that does something.
+ */
+export class SimCfnOrganizationsPolicyCreator {
+    #simAws;
+    constructor(simAws) {
+        this.#simAws = simAws;
+    }
+    /**
+     * Attach a policy to every node its `TargetIds` names.
+     */
+    create(resource, properties) {
+        const input = new SimCfnOrganizationsPolicyInput(resource, properties);
+        const organizations = this.#simAws.organizations();
+        // Every target is resolved before any of them is attached to. Refusing one
+        // partway through would leave the earlier targets holding a policy no
+        // teardown knows about.
+        organizations.requireTargets(input.targetIds);
+        // An id of its own, rather than one derived from the logical id. Two
+        // Stacks can each declare a Policy called the same thing, and a shared id
+        // would let one Stack's teardown take the other's policy off.
+        const policyId = makeSimOrganizationsPolicyId();
+        for (const targetId of input.targetIds) {
+            organizations.attachServiceControlPolicy(targetId, input.document, {
+                policyName: input.name,
+                policyId,
+            });
+        }
+        return new SimCfnOrganizationsPolicy(policyId, input.name, input.policyType, input.targetIds);
+    }
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-policy-input.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIamPolicyDocument } from "../../iam/policy/sim-iam-policy.js";
+/**
+ * What an `AWS::Organizations::Policy` Resource asks for.
+ *
+ * Every property is read here before the creator changes anything, so a
+ * Resource that cannot be satisfied fails with the organization untouched.
+ */
+export declare class SimCfnOrganizationsPolicyInput {
+    readonly name: string;
+    readonly document: SimIamPolicyDocument;
+    readonly targetIds: readonly string[];
+    constructor(resource: SimCfnResource, properties: SimCfnTemplateValueRecord);
+    /**
+     * The policy type this Resource carries, which is the only one simulated
+     * Organizations evaluates.
+     */
+    get policyType(): string;
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-policy-input.js

@@ -0,0 +1,33 @@
+import { SimCfnOrganizationsProperties } from "./sim-cfn-organizations-properties.js";
+const SERVICE_CONTROL_POLICY = "SERVICE_CONTROL_POLICY";
+/**
+ * What an `AWS::Organizations::Policy` Resource asks for.
+ *
+ * Every property is read here before the creator changes anything, so a
+ * Resource that cannot be satisfied fails with the organization untouched.
+ */
+export class SimCfnOrganizationsPolicyInput {
+    name;
+    document;
+    targetIds;
+    constructor(resource, properties) {
+        const values = new SimCfnOrganizationsProperties(resource, "AWS::Organizations::Policy");
+        const policyType = values.requiredString(properties["Type"], "Type");
+        if (policyType !== SERVICE_CONTROL_POLICY) {
+            throw new Error(`Unsupported sim Organizations CloudFormation Resource Policy of ` +
+                `type ${policyType}`);
+        }
+        values.ignore(properties["Tags"], "Tags", "Simulated Organizations reads no policy tags");
+        values.ignore(properties["Description"], "Description", "A policy description decides nothing");
+        this.name = values.requiredString(properties["Name"], "Name");
+        this.document = values.documentValue(properties["Content"], "Content");
+        this.targetIds = values.stringList(properties["TargetIds"]);
+    }
+    /**
+     * The policy type this Resource carries, which is the only one simulated
+     * Organizations evaluates.
+     */
+    get policyType() {
+        return SERVICE_CONTROL_POLICY;
+    }
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-properties.d.ts

@@ -0,0 +1,36 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+/**
+ * Reading the properties of an `AWS::Organizations::*` Resource.
+ *
+ * Each property is passed in by the caller under its own literal name, the way
+ * the other services read a template. A required one that is absent or of the
+ * wrong shape fails the Resource rather than quietly creating something else.
+ */
+export declare class SimCfnOrganizationsProperties {
+    #private;
+    constructor(resource: SimCfnResource, resourceType: string);
+    /**
+     * A property that has to be a string for the Resource to mean anything.
+     */
+    requiredString(value: SimCfnTemplateValue | undefined, name: string): string;
+    /**
+     * A property that is a string where a template gives one.
+     */
+    optionalString(value: SimCfnTemplateValue | undefined): string | undefined;
+    /**
+     * A list-valued property, read as the strings in it.
+     *
+     * A template may give one value where a list is allowed, which
+     * CloudFormation accepts, so a bare string reads as a list of one.
+     */
+    stringList(value: SimCfnTemplateValue | undefined): readonly string[];
+    /**
+     * A property holding an IAM policy document, given inline or as JSON text.
+     */
+    documentValue(value: SimCfnTemplateValue | undefined, name: string): Readonly<Record<string, unknown>>;
+    /**
+     * Record a property the simulation creates the Resource without acting on.
+     */
+    ignore(value: SimCfnTemplateValue | undefined, name: string, reason: string): void;
+}

package/dist/service/organizations/cfn/sim-cfn-organizations-properties.js

@@ -0,0 +1,78 @@
+/**
+ * Reading the properties of an `AWS::Organizations::*` Resource.
+ *
+ * Each property is passed in by the caller under its own literal name, the way
+ * the other services read a template. A required one that is absent or of the
+ * wrong shape fails the Resource rather than quietly creating something else.
+ */
+export class SimCfnOrganizationsProperties {
+    #resource;
+    #resourceType;
+    constructor(resource, resourceType) {
+        this.#resource = resource;
+        this.#resourceType = resourceType;
+    }
+    /**
+     * A property that has to be a string for the Resource to mean anything.
+     */
+    requiredString(value, name) {
+        if (typeof value !== "string" || value.length === 0) {
+            throw new Error(`${this.#resourceType} ${this.#resource.logicalId} requires ${name}`);
+        }
+        return value;
+    }
+    /**
+     * A property that is a string where a template gives one.
+     */
+    optionalString(value) {
+        return typeof value === "string" ? value : undefined;
+    }
+    /**
+     * A list-valued property, read as the strings in it.
+     *
+     * A template may give one value where a list is allowed, which
+     * CloudFormation accepts, so a bare string reads as a list of one.
+     */
+    stringList(value) {
+        if (typeof value === "string") {
+            return [value];
+        }
+        if (!Array.isArray(value)) {
+            return [];
+        }
+        return value.filter((item) => typeof item === "string");
+    }
+    /**
+     * A property holding an IAM policy document, given inline or as JSON text.
+     */
+    documentValue(value, name) {
+        const document = typeof value === "string" ? this.#parse(value, name) : value;
+        if (typeof document !== "object" ||
+            document === null ||
+            Array.isArray(document)) {
+            throw new Error(`${this.#resourceType} ${this.#resource.logicalId} requires ${name} ` +
+                `to be a policy document`);
+        }
+        return document;
+    }
+    /**
+     * Record a property the simulation creates the Resource without acting on.
+     */
+    ignore(value, name, reason) {
+        if (value !== undefined) {
+            this.#resource.ignoreProperty(name, reason);
+        }
+    }
+    /**
+     * Read a document a template gave as JSON text.
+     */
+    #parse(value, name) {
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            throw new Error(`${this.#resourceType} ${this.#resource.logicalId} ${name} is not ` +
+                `valid JSON`);
+        }
+    }
+}