@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/organizations/tree/sim-organizations-tree.js

@@ -0,0 +1,154 @@
+import { makeSimOrganizationsOrganizationalUnitId, makeSimOrganizationsRootId, SimOrganizationsOrganizationalUnit, SimOrganizationsRoot, } from "./sim-organizations-node.js";
+/**
+ * Thrown for an organizational unit this organization has never seen.
+ */
+export class SimOrganizationsUnknownNode extends Error {
+    constructor(nodeId) {
+        super(`Unknown simulated Organizations node "${nodeId}"`);
+        this.name = "SimOrganizationsUnknownNode";
+    }
+}
+/**
+ * Where the Accounts and organizational units of one simulated organization
+ * sit relative to each other.
+ *
+ * The tree answers one question for authorization: which nodes lie on the path
+ * from the root down to an Account. Every policy on that path applies to the
+ * Account, which is what makes an organizational unit worth modelling at all.
+ *
+ * An Account joins the organization the moment it is named, whether by being
+ * moved into a unit or by having a policy attached to it. An Account never
+ * named sits outside the organization and is unrestricted.
+ */
+export class SimOrganizationsTree {
+    root = new SimOrganizationsRoot(makeSimOrganizationsRootId());
+    organizationalUnits = new Map();
+    accountParents = new Map();
+    /**
+     * Create an organizational unit, under the root unless another unit is
+     * named as its parent.
+     */
+    createOrganizationalUnit(name, parentId = this.root.id) {
+        this.requireKnown(parentId);
+        const unit = new SimOrganizationsOrganizationalUnit(makeSimOrganizationsOrganizationalUnitId(this.root.id), name, parentId);
+        this.organizationalUnits.set(unit.id, unit);
+        return unit;
+    }
+    /**
+     * Place an Account under a node, joining the organization if it was outside
+     * it.
+     */
+    placeAccount(accountId, parentId = this.root.id) {
+        this.requireKnown(parentId);
+        this.accountParents.set(accountId, parentId);
+    }
+    /**
+     * Take an Account out of the organization.
+     */
+    removeAccount(accountId) {
+        this.accountParents.delete(accountId);
+    }
+    /**
+     * Take an organizational unit out of the organization.
+     *
+     * Whatever still sits under it moves up to its parent, which is the only
+     * answer that leaves every Account on a path back to the root. AWS refuses
+     * to delete a unit that still holds anything, and a Stack tears down in
+     * reverse dependency order, so nothing should still be there.
+     */
+    removeOrganizationalUnit(unitId) {
+        const unit = this.organizationalUnits.get(unitId);
+        if (unit === undefined) {
+            return;
+        }
+        this.organizationalUnits.delete(unitId);
+        this.reparent(unitId, unit.parentId);
+    }
+    /**
+     * Every Account in the organization.
+     */
+    accountIds() {
+        return this.accountParents.keys().toArray();
+    }
+    /**
+     * Whether this Account is in the organization.
+     */
+    holds(accountId) {
+        return this.accountParents.has(accountId);
+    }
+    /**
+     * Refuse a root or organizational unit this organization never created.
+     *
+     * A handle from another simulated organization would otherwise be attached
+     * to and then never read, because no Account here has it on its path. A
+     * policy that silently applies to nothing is worse than a refusal.
+     */
+    requireNode(nodeId) {
+        this.requireKnown(nodeId);
+    }
+    /**
+     * Whether this organization has a root or unit under an id.
+     */
+    hasNode(nodeId) {
+        return nodeId === this.root.id || this.organizationalUnits.has(nodeId);
+    }
+    /**
+     * The nodes a request against an Account is filtered by, root first.
+     *
+     * The Account itself is the last of them, because a policy attached to an
+     * Account applies alongside the ones it inherits.
+     */
+    pathTo(accountId) {
+        const parentId = this.accountParents.get(accountId);
+        if (parentId === undefined) {
+            return [];
+        }
+        return [...this.ancestors(parentId), accountId];
+    }
+    /**
+     * What to call a node in a denial.
+     */
+    nameOf(nodeId) {
+        if (nodeId === this.root.id) {
+            return this.root.name;
+        }
+        return this.organizationalUnits.get(nodeId)?.name ?? String(nodeId);
+    }
+    /**
+     * Move everything under one node up to another.
+     */
+    reparent(fromId, toId) {
+        for (const [accountId, parentId] of this.accountParents) {
+            if (parentId === fromId) {
+                this.accountParents.set(accountId, toId);
+            }
+        }
+        const orphaned = this.organizationalUnits
+            .values()
+            .filter((unit) => unit.parentId === fromId)
+            .toArray();
+        for (const unit of orphaned) {
+            this.organizationalUnits.set(unit.id, new SimOrganizationsOrganizationalUnit(unit.id, unit.name, toId));
+        }
+    }
+    /**
+     * The nodes from the root down to one node, root first.
+     */
+    ancestors(nodeId) {
+        const path = [];
+        let currentId = nodeId;
+        while (currentId !== undefined && currentId !== this.root.id) {
+            path.unshift(currentId);
+            currentId = this.organizationalUnits.get(currentId)?.parentId;
+        }
+        return [this.root.id, ...path];
+    }
+    /**
+     * Refuse a node this organization never created.
+     */
+    requireKnown(nodeId) {
+        if (nodeId !== this.root.id && !this.organizationalUnits.has(nodeId)) {
+            throw new SimOrganizationsUnknownNode(nodeId);
+        }
+    }
+}

package/dist/service/personalize/cfn/sim-cfn-personalize-dataset-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/va
 import type { SimPersonalizeDataset } from "../resource/sim-personalize-dataset.js";
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalize } from "../sim-personalize.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnPersonalizeDatasetCreatorProperties {
     readonly personalize: SimPersonalize;
     readonly resources: SimPersonalizeResources;
@@ -19,8 +20,8 @@ export declare class SimCfnPersonalizeDatasetCreator {
     #private;
     constructor(properties: SimCfnPersonalizeDatasetCreatorProperties);
     /** Create a dataset from an AWS::Personalize::Dataset Resource. */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimPersonalizeDataset>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimPersonalizeDataset>;
     /** Delete a dataset an AWS::Personalize::Dataset Resource made. */
-    delete(dataset: SimPersonalizeDataset): Promise<void>;
+    delete(dataset: SimPersonalizeDataset, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/personalize/cfn/sim-cfn-personalize-dataset-creator.js

@@ -31,7 +31,7 @@ export class SimCfnPersonalizeDatasetCreator {
         this.#resources = properties.resources;
     }
     /** Create a dataset from an AWS::Personalize::Dataset Resource. */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const read = new SimCfnPersonalizeProperties({
             resourceType: personalizeDatasetResourceType,
             resource,
@@ -47,14 +47,12 @@ export class SimCfnPersonalizeDatasetCreator {
         };
         read.recordUnreadProperties();
         return await simCfnPersonalizeResourceCreation(personalizeDatasetResourceType, resource.logicalId, async () => {
-            const created = await this.#personalize.createDataset({ input });
+            const created = await this.#personalize.createDataset({ input }, options);
             return simCfnPersonalizeCreated(this.#resources.datasets, created.datasetArn, "dataset");
         });
     }
     /** Delete a dataset an AWS::Personalize::Dataset Resource made. */
-    async delete(dataset) {
-        await this.#personalize.deleteDataset({
-            input: { datasetArn: dataset.arn },
-        });
+    async delete(dataset, options) {
+        await this.#personalize.deleteDataset({ input: { datasetArn: dataset.arn } }, options);
     }
 }

package/dist/service/personalize/cfn/sim-cfn-personalize-dataset-group-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/va
 import type { SimPersonalizeDatasetGroup } from "../resource/sim-personalize-dataset-group.js";
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalize } from "../sim-personalize.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnPersonalizeDatasetGroupCreatorProperties {
     readonly personalize: SimPersonalize;
     readonly resources: SimPersonalizeResources;
@@ -20,8 +21,8 @@ export declare class SimCfnPersonalizeDatasetGroupCreator {
     #private;
     constructor(properties: SimCfnPersonalizeDatasetGroupCreatorProperties);
     /** Create a dataset group from an AWS::Personalize::DatasetGroup Resource. */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimPersonalizeDatasetGroup>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimPersonalizeDatasetGroup>;
     /** Delete a dataset group an AWS::Personalize::DatasetGroup Resource made. */
-    delete(datasetGroup: SimPersonalizeDatasetGroup): Promise<void>;
+    delete(datasetGroup: SimPersonalizeDatasetGroup, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/personalize/cfn/sim-cfn-personalize-dataset-group-creator.js

@@ -23,7 +23,7 @@ export class SimCfnPersonalizeDatasetGroupCreator {
         this.#resources = properties.resources;
     }
     /** Create a dataset group from an AWS::Personalize::DatasetGroup Resource. */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const read = new SimCfnPersonalizeProperties({
             resourceType: personalizeDatasetGroupResourceType,
             resource,
@@ -39,14 +39,12 @@ export class SimCfnPersonalizeDatasetGroupCreator {
         };
         read.recordUnreadProperties();
         return await simCfnPersonalizeResourceCreation(personalizeDatasetGroupResourceType, resource.logicalId, async () => {
-            const created = await this.#personalize.createDatasetGroup({ input });
+            const created = await this.#personalize.createDatasetGroup({ input }, options);
             return simCfnPersonalizeCreated(this.#resources.datasetGroups, created.datasetGroupArn, "dataset group");
         });
     }
     /** Delete a dataset group an AWS::Personalize::DatasetGroup Resource made. */
-    async delete(datasetGroup) {
-        await this.#personalize.deleteDatasetGroup({
-            input: { datasetGroupArn: datasetGroup.arn },
-        });
+    async delete(datasetGroup, options) {
+        await this.#personalize.deleteDatasetGroup({ input: { datasetGroupArn: datasetGroup.arn } }, options);
     }
 }

package/dist/service/personalize/cfn/sim-cfn-personalize-event-tracker-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/va
 import type { SimPersonalizeEventTracker } from "../resource/sim-personalize-event-tracker.js";
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalize } from "../sim-personalize.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnPersonalizeEventTrackerCreatorProperties {
     readonly personalize: SimPersonalize;
     readonly resources: SimPersonalizeResources;
@@ -20,8 +21,8 @@ export declare class SimCfnPersonalizeEventTrackerCreator {
     #private;
     constructor(properties: SimCfnPersonalizeEventTrackerCreatorProperties);
     /** Create a tracker from an AWS::Personalize::EventTracker Resource. */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimPersonalizeEventTracker>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimPersonalizeEventTracker>;
     /** Delete a tracker an AWS::Personalize::EventTracker Resource made. */
-    delete(eventTracker: SimPersonalizeEventTracker): Promise<void>;
+    delete(eventTracker: SimPersonalizeEventTracker, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/personalize/cfn/sim-cfn-personalize-event-tracker-creator.js

@@ -20,7 +20,7 @@ export class SimCfnPersonalizeEventTrackerCreator {
         this.#resources = properties.resources;
     }
     /** Create a tracker from an AWS::Personalize::EventTracker Resource. */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const read = new SimCfnPersonalizeProperties({
             resourceType: personalizeEventTrackerResourceType,
             resource,
@@ -33,14 +33,12 @@ export class SimCfnPersonalizeEventTrackerCreator {
         };
         read.recordUnreadProperties();
         return await simCfnPersonalizeResourceCreation(personalizeEventTrackerResourceType, resource.logicalId, async () => {
-            const created = await this.#personalize.createEventTracker({ input });
+            const created = await this.#personalize.createEventTracker({ input }, options);
             return simCfnPersonalizeCreated(this.#resources.eventTrackers, created.eventTrackerArn, "event tracker");
         });
     }
     /** Delete a tracker an AWS::Personalize::EventTracker Resource made. */
-    async delete(eventTracker) {
-        await this.#personalize.deleteEventTracker({
-            input: { eventTrackerArn: eventTracker.arn },
-        });
+    async delete(eventTracker, options) {
+        await this.#personalize.deleteEventTracker({ input: { eventTrackerArn: eventTracker.arn } }, options);
     }
 }

package/dist/service/personalize/cfn/sim-cfn-personalize-schema-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/va
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalizeSchema } from "../resource/sim-personalize-schema.js";
 import type { SimPersonalize } from "../sim-personalize.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnPersonalizeSchemaCreatorProperties {
     readonly personalize: SimPersonalize;
     readonly resources: SimPersonalizeResources;
@@ -18,8 +19,8 @@ export declare class SimCfnPersonalizeSchemaCreator {
     #private;
     constructor(properties: SimCfnPersonalizeSchemaCreatorProperties);
     /** Create a schema from an AWS::Personalize::Schema Resource. */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimPersonalizeSchema>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimPersonalizeSchema>;
     /** Delete a schema an AWS::Personalize::Schema Resource made. */
-    delete(schema: SimPersonalizeSchema): Promise<void>;
+    delete(schema: SimPersonalizeSchema, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/personalize/cfn/sim-cfn-personalize-schema-creator.js

@@ -18,7 +18,7 @@ export class SimCfnPersonalizeSchemaCreator {
         this.#resources = properties.resources;
     }
     /** Create a schema from an AWS::Personalize::Schema Resource. */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const read = new SimCfnPersonalizeProperties({
             resourceType: personalizeSchemaResourceType,
             resource,
@@ -32,12 +32,12 @@ export class SimCfnPersonalizeSchemaCreator {
         };
         read.recordUnreadProperties();
         return await simCfnPersonalizeResourceCreation(personalizeSchemaResourceType, resource.logicalId, async () => {
-            const created = await this.#personalize.createSchema({ input });
+            const created = await this.#personalize.createSchema({ input }, options);
             return simCfnPersonalizeCreated(this.#resources.schemas, created.schemaArn, "schema");
         });
     }
     /** Delete a schema an AWS::Personalize::Schema Resource made. */
-    async delete(schema) {
-        await this.#personalize.deleteSchema({ input: { schemaArn: schema.arn } });
+    async delete(schema, options) {
+        await this.#personalize.deleteSchema({ input: { schemaArn: schema.arn } }, options);
     }
 }

package/dist/service/personalize/cfn/sim-cfn-personalize-solution-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/va
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalizeSolution } from "../resource/sim-personalize-solution.js";
 import type { SimPersonalize } from "../sim-personalize.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnPersonalizeSolutionCreatorProperties {
     readonly personalize: SimPersonalize;
     readonly resources: SimPersonalizeResources;
@@ -19,8 +20,8 @@ export declare class SimCfnPersonalizeSolutionCreator {
     #private;
     constructor(properties: SimCfnPersonalizeSolutionCreatorProperties);
     /** Create a solution from an AWS::Personalize::Solution Resource. */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimPersonalizeSolution>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimPersonalizeSolution>;
     /** Delete a solution an AWS::Personalize::Solution Resource made. */
-    delete(solution: SimPersonalizeSolution): Promise<void>;
+    delete(solution: SimPersonalizeSolution, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/personalize/cfn/sim-cfn-personalize-solution-creator.js

@@ -33,7 +33,7 @@ export class SimCfnPersonalizeSolutionCreator {
         this.#resources = properties.resources;
     }
     /** Create a solution from an AWS::Personalize::Solution Resource. */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const read = new SimCfnPersonalizeProperties({
             resourceType: personalizeSolutionResourceType,
             resource,
@@ -51,14 +51,12 @@ export class SimCfnPersonalizeSolutionCreator {
         };
         read.recordUnreadProperties();
         return await simCfnPersonalizeResourceCreation(personalizeSolutionResourceType, resource.logicalId, async () => {
-            const created = await this.#personalize.createSolution({ input });
+            const created = await this.#personalize.createSolution({ input }, options);
             return simCfnPersonalizeCreated(this.#resources.solutions, created.solutionArn, "solution");
         });
     }
     /** Delete a solution an AWS::Personalize::Solution Resource made. */
-    async delete(solution) {
-        await this.#personalize.deleteSolution({
-            input: { solutionArn: solution.arn },
-        });
+    async delete(solution, options) {
+        await this.#personalize.deleteSolution({ input: { solutionArn: solution.arn } }, options);
     }
 }

package/dist/service/personalize/cfn/sim-personalize-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimPersonalizeResources } from "../resource/sim-personalize-resources.js";
 import type { SimPersonalize } from "../sim-personalize.js";
 interface SimPersonalizeCfnResourceFactoryProperties {
@@ -27,7 +27,7 @@ export declare class SimPersonalizeCfnResourceFactory implements SimCfnServiceRe
      * Delete a simulated Personalize resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
     private handler;
 }
 export {};

package/dist/service/personalize/cfn/sim-personalize-cfn-resource-factory.js

@@ -1,4 +1,5 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions, } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnPersonalizeDatasetCreator } from "./sim-cfn-personalize-dataset-creator.js";
 import { SimCfnPersonalizeDatasetGroupCreator } from "./sim-cfn-personalize-dataset-group-creator.js";
 import { SimCfnPersonalizeEventTrackerCreator } from "./sim-cfn-personalize-event-tracker-creator.js";
@@ -45,14 +46,14 @@ export class SimPersonalizeCfnResourceFactory {
      * Create a simulated Personalize resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
-        return await this.handler(resourceTypeName, "").create(resource, context.resolvedProperties ?? resource.properties);
+        return await this.handler(resourceTypeName, "").create(resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
     /**
      * Delete a simulated Personalize resource created from a CloudFormation
      * Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.handler(resourceTypeName, " deletion").delete(resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.handler(resourceTypeName, " deletion").delete(resource, simCfnResourceCallerOptions(context.caller));
     }
     handler(resourceTypeName, operationSuffix) {
         const handler = this.#handlers.get(resourceTypeName);
@@ -70,9 +71,9 @@ export class SimPersonalizeCfnResourceFactory {
  */
 function handler(creator, described) {
     return {
-        create: async (resource, properties) => await creator.create(resource, properties),
-        delete: async (resource) => {
-            await creator.delete(created(resource, described));
+        create: async (resource, properties, options) => await creator.create(resource, properties, options),
+        delete: async (resource, options) => {
+            await creator.delete(created(resource, described), options);
         },
     };
 }

package/dist/service/personalize/sim-personalize-data-operations.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type * as simPersonalizeCommands from "./command/sim-personalize-command.types.js";
 import { SimPersonalizeCommands } from "./command/sim-personalize-commands.js";
 import type { SimPersonalizeRequestOptions } from "./command/sim-personalize-request-options.js";

package/dist/service/personalize/sim-personalize-data-operations.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimPersonalizeCommands } from "./command/sim-personalize-commands.js";
 import { SimPersonalizeResources } from "./resource/sim-personalize-resources.js";
 /**
@@ -20,7 +20,8 @@ export class SimPersonalizeDataOperations {
     commands;
     background;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         this.background = background;
         this.commands = new SimPersonalizeCommands({
             resources: this.resources,

package/dist/service/rekognition/sim-rekognition.d.ts

@@ -3,7 +3,7 @@ import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-route
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import type { SimDeleteFacesCommand, SimDeleteFacesCommandOutput, SimIndexFacesCommand, SimIndexFacesCommandOutput, SimListFacesCommand, SimListFacesCommandOutput, SimSearchFacesByImageCommand, SimSearchFacesByImageCommandOutput } from "./command/face/face.command.js";
 import type { SimCreateCollectionCommand, SimCreateCollectionCommandOutput, SimDeleteCollectionCommand, SimDeleteCollectionCommandOutput, SimListCollectionsCommand, SimListCollectionsCommandOutput } from "./command/collection/collection.command.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimDetectFacesCommand, SimDetectFacesCommandOutput } from "./command/detect-faces/detect-faces.command.js";
 import type { SimDetectLabelsCommand, SimDetectLabelsCommandOutput } from "./command/detect-labels/detect-labels.command.js";
 import type { SimDetectModerationLabelsCommand, SimDetectModerationLabelsCommandOutput } from "./command/detect-moderation-labels/detect-moderation-labels.command.js";

package/dist/service/rekognition/sim-rekognition.js

@@ -3,7 +3,7 @@ import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-s
 import { SimRekognitionCollections } from "./collection/sim-rekognition-collections.js";
 import { SimRekognitionFaceHandler } from "./command/face/face.handler.js";
 import { SimRekognitionCollectionHandler } from "./command/collection/collection.handler.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimRekognitionAuthorizer } from "./command/authorize/sim-rekognition-authorizer.js";
 import { SimRekognitionDetectionHandlers } from "./command/sim-rekognition-detection-handlers.js";
 import { SimRekognitionFaces } from "./face/sim-rekognition-faces.js";
@@ -36,7 +36,8 @@ export class SimRekognition {
     collectionCommands;
     collectionFaceCommands;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), images = new SimRekognitionUnreachableImageObjects(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), images = new SimRekognitionUnreachableImageObjects(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const authorizer = new SimRekognitionAuthorizer({ iam });
         this.collectionStore = new SimRekognitionCollections({
             accountRegionScope,

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-ksk-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53KeySigningKey } from "../../dnssec/sim-route53-key-signing-key.js";
 import type { SimRoute53 } from "../../sim-route53.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnRoute53KskCreatorProperties {
     readonly route53: SimRoute53;
 }
@@ -18,7 +19,7 @@ export declare class SimCfnRoute53KskCreator {
     /**
      * Create a key-signing key from an AWS::Route53::KeySigningKey Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimRoute53KeySigningKey>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimRoute53KeySigningKey>;
     /**
      * Delete a key-signing key an AWS::Route53::KeySigningKey Resource created.
      *
@@ -26,7 +27,7 @@ export declare class SimCfnRoute53KskCreator {
      * active would otherwise be undeployable, so it is deactivated first. Real
      * CloudFormation does the same thing on its way to removing the Resource.
      */
-    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
     private string;
 }
 export {};

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-ksk-creator.js

@@ -17,7 +17,7 @@ export class SimCfnRoute53KskCreator {
     /**
      * Create a key-signing key from an AWS::Route53::KeySigningKey Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const hostedZoneId = this.string(resource, properties["HostedZoneId"], "HostedZoneId");
         const name = this.string(resource, properties["Name"], "Name");
         await this.route53.createKeySigningKey({
@@ -28,7 +28,7 @@ export class SimCfnRoute53KskCreator {
                 Name: name,
                 Status: this.string(resource, properties["Status"], "Status"),
             },
-        });
+        }, options);
         const keySigningKey = this.route53.hostedZones
             .get(normalizeSimRoute53HostedZoneId(hostedZoneId))
             ?.dnssec.keys()
@@ -43,13 +43,13 @@ export class SimCfnRoute53KskCreator {
      * active would otherwise be undeployable, so it is deactivated first. Real
      * CloudFormation does the same thing on its way to removing the Resource.
      */
-    async delete(resource, properties) {
+    async delete(resource, properties, options) {
         const input = {
             HostedZoneId: this.string(resource, properties["HostedZoneId"], "HostedZoneId"),
             Name: this.string(resource, properties["Name"], "Name"),
         };
-        await this.route53.deactivateKeySigningKey({ input });
-        await this.route53.deleteKeySigningKey({ input });
+        await this.route53.deactivateKeySigningKey({ input }, options);
+        await this.route53.deleteKeySigningKey({ input }, options);
     }
     string(resource, value, name) {
         return simCfnRoute53String(resource, value, resourceType, name);

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53HostedZone } from "../../hosted-zone/sim-route53-hosted-zone.js";
 import type { SimRoute53 } from "../../sim-route53.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnRoute53ZoneSigningCreatorProperties {
     readonly route53: SimRoute53;
 }
@@ -19,11 +20,11 @@ export declare class SimCfnRoute53ZoneSigningCreator {
     /**
      * Start signing the zone an AWS::Route53::DNSSEC Resource names.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimRoute53HostedZone>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimRoute53HostedZone>;
     /**
      * Stop signing the zone as the Resource is removed.
      */
-    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
     private hostedZoneId;
 }
 export {};

package/dist/service/route53/cfn/dnssec/sim-cfn-r53-zone-signing-creator.js

@@ -18,11 +18,9 @@ export class SimCfnRoute53ZoneSigningCreator {
     /**
      * Start signing the zone an AWS::Route53::DNSSEC Resource names.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const hostedZoneId = this.hostedZoneId(resource, properties);
-        await this.route53.enableHostedZoneDnssec({
-            input: { HostedZoneId: hostedZoneId },
-        });
+        await this.route53.enableHostedZoneDnssec({ input: { HostedZoneId: hostedZoneId } }, options);
         const hostedZone = this.route53.hostedZones.get(normalizeSimRoute53HostedZoneId(hostedZoneId));
         assertDefined(hostedZone, `sim Route53 Hosted Zone ${hostedZoneId} after enabling DNSSEC`);
         return hostedZone;
@@ -30,10 +28,8 @@ export class SimCfnRoute53ZoneSigningCreator {
     /**
      * Stop signing the zone as the Resource is removed.
      */
-    async delete(resource, properties) {
-        await this.route53.disableHostedZoneDnssec({
-            input: { HostedZoneId: this.hostedZoneId(resource, properties) },
-        });
+    async delete(resource, properties, options) {
+        await this.route53.disableHostedZoneDnssec({ input: { HostedZoneId: this.hostedZoneId(resource, properties) } }, options);
     }
     hostedZoneId(resource, properties) {
         return simCfnRoute53String(resource, properties["HostedZoneId"], resourceType, "HostedZoneId");

package/dist/service/route53/cfn/hosted-zone/sim-cfn-r53-zone-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53HostedZone } from "../../hosted-zone/sim-route53-hosted-zone.js";
 import type { SimRoute53 } from "../../sim-route53.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnRoute53HostedZoneCreatorProperties {
     readonly route53: SimRoute53;
 }
@@ -14,7 +15,7 @@ export declare class SimCfnRoute53HostedZoneCreator {
     /**
      * Create a simulated Hosted Zone from an AWS::Route53::HostedZone Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimRoute53HostedZone>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimRoute53HostedZone>;
     private hostedZoneConfigComment;
     private hostedZoneConfigPrivateZone;
 }