@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/route53/cfn/hosted-zone/sim-cfn-r53-zone-creator.js

@@ -11,7 +11,7 @@ export class SimCfnRoute53HostedZoneCreator {
     /**
      * Create a simulated Hosted Zone from an AWS::Route53::HostedZone Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const name = properties["Name"];
         if (typeof name !== "string") {
             throw new TypeError(`Invalid AWS::Route53::HostedZone ${resource.logicalId}: Name must be a string`);
@@ -34,7 +34,7 @@ export class SimCfnRoute53HostedZoneCreator {
                 CallerReference: resource.logicalId,
                 HostedZoneConfig: route53HostedZoneConfig,
             },
-        });
+        }, options);
         const hostedZoneId = hostedZoneCreation.HostedZone?.Id;
         assertIsSimRoute53HostedZoneId(hostedZoneId);
         const hostedZone = this.route53.hostedZones.get(hostedZoneId);

package/dist/service/route53/cfn/record-set/apply/sim-cfn-r53-record-set-applicator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../../cloudformation/resource/sim-cfn
 import type { SimCfnTemplateValueRecord } from "../../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53Record } from "../../../record/sim-route53-record.js";
 import type { SimRoute53 } from "../../../sim-route53.js";
+import type { SimCfnResourceCallerOptions } from "../../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnRoute53RecordSetApplicatorProperties {
     readonly route53: SimRoute53;
 }
@@ -15,6 +16,13 @@ export declare class SimCfnRoute53RecordSetApplicator {
     /**
      * Create a simulated Record Set from an AWS::Route53::RecordSet Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimRoute53Record>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimRoute53Record>;
+    /**
+     * Remove the Record Set a Resource created.
+     *
+     * Route53 only takes changes, so this is a ChangeResourceRecordSets carrying
+     * a DELETE change built from the same template properties that created it.
+     */
+    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/route53/cfn/record-set/apply/sim-cfn-r53-record-set-applicator.js

@@ -16,7 +16,7 @@ export class SimCfnRoute53RecordSetApplicator {
     /**
      * Create a simulated Record Set from an AWS::Route53::RecordSet Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         // The record set is built first because resolving the Hosted Zone can
         // register one, and a RecordSet that turns out to be unbuildable or of a
         // skipped record type would otherwise leave that zone behind.
@@ -37,7 +37,7 @@ export class SimCfnRoute53RecordSetApplicator {
                     ],
                 },
             },
-        });
+        }, options);
         const hostedZone = this.route53.hostedZones.get(hostedZoneId);
         assertDefined(hostedZone, "Sim Route53 Hosted Zone after update");
         await hostedZone.waitForSynchronizationComplete();
@@ -45,4 +45,25 @@ export class SimCfnRoute53RecordSetApplicator {
         assertDefined(record, "Sim Route53 Record after update");
         return record;
     }
+    /**
+     * Remove the Record Set a Resource created.
+     *
+     * Route53 only takes changes, so this is a ChangeResourceRecordSets carrying
+     * a DELETE change built from the same template properties that created it.
+     */
+    async delete(resource, properties, options) {
+        const hostedZoneId = this.hostedZoneResolver.hostedZoneId(resource, properties);
+        const recordSet = new SimCfnRoute53RecordSetBuilder(resource, properties).build();
+        await this.route53.changeResourceRecordSets({
+            input: {
+                HostedZoneId: hostedZoneId,
+                ChangeBatch: {
+                    Changes: [{ Action: "DELETE", ResourceRecordSet: recordSet }],
+                },
+            },
+        }, options);
+        await this.route53.hostedZones
+            .get(hostedZoneId)
+            ?.waitForSynchronizationComplete();
+    }
 }

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.d.ts

@@ -1,10 +1,13 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimRoute53 } from "../sim-route53.js";
+import type { SimCfnRoute53RecordSetApplicator } from "./record-set/apply/sim-cfn-r53-record-set-applicator.js";
 import type { SimCfnRoute53KskCreator } from "./dnssec/sim-cfn-r53-ksk-creator.js";
 import type { SimCfnRoute53ZoneSigningCreator } from "./dnssec/sim-cfn-r53-zone-signing-creator.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnRoute53ResourceDeleterProperties {
     readonly route53: SimRoute53;
+    readonly recordSetCreator: SimCfnRoute53RecordSetApplicator;
     readonly keySigningKeyCreator: SimCfnRoute53KskCreator;
     readonly zoneSigningCreator: SimCfnRoute53ZoneSigningCreator;
 }
@@ -24,15 +27,14 @@ interface SimCfnRoute53ResourceDeleterProperties {
  */
 export declare class SimCfnRoute53ResourceDeleter {
     private readonly route53;
+    private readonly recordSetCreator;
     private readonly keySigningKeyCreator;
     private readonly zoneSigningCreator;
-    private readonly hostedZoneResolver;
     constructor(properties: SimCfnRoute53ResourceDeleterProperties);
     /**
      * Delete a simulated Route53 resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
     private deleteHostedZone;
-    private deleteRecordSet;
 }
 export {};

package/dist/service/route53/cfn/sim-cfn-route53-resource-deleter.js

@@ -1,5 +1,3 @@
-import { SimCfnRoute53RecordSetBuilder } from "./record-set/build/sim-cfn-r53-record-set-builder.js";
-import { SimCfnRoute53RecordSetHostedZoneResolver } from "./record-set/resolve/sim-cfn-r53-rec-set-zone-resolver.js";
 import { assertDefined } from "../../../util/type-guard/defined.js";
 /**
  * Deletes the simulated Route53 resources a CloudFormation Stack created.
@@ -17,36 +15,34 @@ import { assertDefined } from "../../../util/type-guard/defined.js";
  */
 export class SimCfnRoute53ResourceDeleter {
     route53;
+    recordSetCreator;
     keySigningKeyCreator;
     zoneSigningCreator;
-    hostedZoneResolver;
     constructor(properties) {
         this.route53 = properties.route53;
+        this.recordSetCreator = properties.recordSetCreator;
         this.keySigningKeyCreator = properties.keySigningKeyCreator;
         this.zoneSigningCreator = properties.zoneSigningCreator;
-        this.hostedZoneResolver = new SimCfnRoute53RecordSetHostedZoneResolver({
-            route53: this.route53,
-        });
     }
     /**
      * Delete a simulated Route53 resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource, properties) {
+    async delete(resourceTypeName, resource, properties, options) {
         switch (resourceTypeName) {
             case "HostedZone": {
-                await this.deleteHostedZone(resource);
+                await this.deleteHostedZone(resource, options);
                 return;
             }
             case "RecordSet": {
-                await this.deleteRecordSet(resource, properties);
+                await this.recordSetCreator.delete(resource, properties, options);
                 return;
             }
             case "KeySigningKey": {
-                await this.keySigningKeyCreator.delete(resource, properties);
+                await this.keySigningKeyCreator.delete(resource, properties, options);
                 return;
             }
             case "DNSSEC": {
-                await this.zoneSigningCreator.delete(resource, properties);
+                await this.zoneSigningCreator.delete(resource, properties, options);
                 return;
             }
             default: {
@@ -54,24 +50,9 @@ export class SimCfnRoute53ResourceDeleter {
             }
         }
     }
-    async deleteHostedZone(resource) {
+    async deleteHostedZone(resource, options) {
         const hostedZone = resource.simResource;
         assertDefined(hostedZone, `sim Route53 Hosted Zone for CloudFormation Resource ${resource.logicalId}`);
-        await this.route53.deleteHostedZone({ input: { Id: hostedZone.id } });
-    }
-    async deleteRecordSet(resource, properties) {
-        const hostedZoneId = this.hostedZoneResolver.hostedZoneId(resource, properties);
-        const recordSet = new SimCfnRoute53RecordSetBuilder(resource, properties).build();
-        await this.route53.changeResourceRecordSets({
-            input: {
-                HostedZoneId: hostedZoneId,
-                ChangeBatch: {
-                    Changes: [{ Action: "DELETE", ResourceRecordSet: recordSet }],
-                },
-            },
-        });
-        await this.route53.hostedZones
-            .get(hostedZoneId)
-            ?.waitForSynchronizationComplete();
+        await this.route53.deleteHostedZone({ input: { Id: hostedZone.id } }, options);
     }
 }

package/dist/service/route53/cfn/sim-cfn-route53-resource-factory.js

@@ -4,6 +4,7 @@ import { SimCfnRoute53RecordSetApplicator } from "./record-set/apply/sim-cfn-r53
 import { SimCfnRoute53KskCreator } from "./dnssec/sim-cfn-r53-ksk-creator.js";
 import { SimCfnRoute53ZoneSigningCreator } from "./dnssec/sim-cfn-r53-zone-signing-creator.js";
 import { SimCfnRoute53ResourceDeleter } from "./sim-cfn-route53-resource-deleter.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated Route53 resources.
  */
@@ -21,6 +22,7 @@ export class SimRoute53CloudFormationResourceFactory {
         this.zoneSigningCreator = new SimCfnRoute53ZoneSigningCreator({ route53 });
         this.deleter = new SimCfnRoute53ResourceDeleter({
             route53,
+            recordSetCreator: this.recordSetCreator,
             keySigningKeyCreator: this.keySigningKeyCreator,
             zoneSigningCreator: this.zoneSigningCreator,
         });
@@ -29,18 +31,20 @@ export class SimRoute53CloudFormationResourceFactory {
      * Create a simulated Route53 resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "HostedZone": {
-                return await this.hostedZoneCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.hostedZoneCreator.create(resource, properties, options);
             }
             case "RecordSet": {
-                return await this.recordSetCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.recordSetCreator.create(resource, properties, options);
             }
             case "KeySigningKey": {
-                return await this.keySigningKeyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.keySigningKeyCreator.create(resource, properties, options);
             }
             case "DNSSEC": {
-                return await this.zoneSigningCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.zoneSigningCreator.create(resource, properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim Route53 CloudFormation Resource ${resourceTypeName}`);
@@ -51,6 +55,6 @@ export class SimRoute53CloudFormationResourceFactory {
      * Delete a simulated Route53 resource created from a CloudFormation Resource.
      */
     async delete(resourceTypeName, resource, context) {
-        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties);
+        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/route53/command/change-resource-record-sets/change-resource-record-sets-authorizer.js

@@ -33,6 +33,7 @@ export class ChangeResourceRecordSetsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ChangeResourceRecordSetsAuthorizer.action,
                 resource: hostedZoneArn,
             });

package/dist/service/route53/command/create-hosted-zone/create-hosted-zone-authorizer.js

@@ -29,6 +29,7 @@ export class CreateHostedZoneAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: CreateHostedZoneAuthorizer.action,
                 resource: CreateHostedZoneAuthorizer.resource,
             });

package/dist/service/route53/command/delete-hosted-zone/delete-hosted-zone-authorizer.js

@@ -27,6 +27,7 @@ export class DeleteHostedZoneAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteHostedZoneAuthorizer.action,
                 resource: hostedZoneArn,
             });

package/dist/service/route53/command/dnssec/sim-route53-dnssec-authorizer.js

@@ -22,6 +22,7 @@ export class SimRoute53DnssecAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/route53/command/get-hosted-zone/get-hosted-zone-authorizer.js

@@ -31,6 +31,7 @@ export class GetHostedZoneAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: GetHostedZoneAuthorizer.action,
                 resource: hostedZoneArn,
             });

package/dist/service/route53/command/list-hosted-zones-by-name/list-hosted-zones-by-name-authorizer.js

@@ -30,6 +30,7 @@ export class ListHostedZonesByNameAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ListHostedZonesByNameAuthorizer.action,
                 resource: ListHostedZonesByNameAuthorizer.resource,
             });

package/dist/service/route53/command/list-resource-record-sets/list-resource-record-sets-authorizer.js

@@ -33,6 +33,7 @@ export class ListResourceRecordSetsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ListResourceRecordSetsAuthorizer.action,
                 resource: hostedZoneArn,
             });

package/dist/service/route53/sim-route53.d.ts

@@ -7,7 +7,7 @@ import type { SimRoute53HostedZoneId } from "./command/create-hosted-zone/sim-ro
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimCfnServiceResourceFactory } from "../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import { SimRoute53Registry } from "./registry/sim-route53-registry.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSdkCommandRouter } from "../../sdk/index.js";
 import type { SimKmsKeyResolver } from "../kms/registry/sim-kms-registry.js";
 import type { SimRoute53RequestOptions } from "./sim-route53-request-options.js";

package/dist/service/route53/sim-route53.js

@@ -3,7 +3,7 @@ import { registerSimRoute53HostedZone, } from "./hosted-zone/register-sim-route5
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { SimRoute53CloudFormationResourceFactory } from "./cfn/sim-cfn-route53-resource-factory.js";
 import { SimRoute53Registry } from "./registry/sim-route53-registry.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamGlobalServiceRegion, simIamInRegion, } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimRoute53SdkCommandRouter } from "./sdk/sim-route53-sdk-command-router.js";
 import { SimRoute53Commands } from "./sim-route53-commands.js";
 /**
@@ -19,7 +19,10 @@ export class SimRoute53 {
     resolver;
     commands;
     constructor(properties = {}) {
-        const { iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), route53Registry = new SimRoute53Registry(), } = properties;
+        const { background = new BackgroundTasks(), route53Registry = new SimRoute53Registry(), } = properties;
+        // Route53 is global rather than Region-scoped, so its requests are made in
+        // the Region its one endpoint is in.
+        const iam = simIamInRegion(properties.iam, simIamGlobalServiceRegion);
         this.route53Registry = route53Registry;
         this.resolver = new SimRoute53Resolver({
             hostedZones: route53Registry.hostedZones,

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-configurator.d.ts

@@ -1,11 +1,13 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimS3 } from "../../sim-s3.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnS3BucketConfiguratorProperties {
     readonly simS3: SimS3;
     readonly resource: SimCfnResource;
     readonly properties: SimCfnTemplateValueRecord;
     readonly bucketName: string;
+    readonly options?: SimCfnResourceCallerOptions;
 }
 /**
  * Applies the configurations an AWS::S3::Bucket Resource declares to the
@@ -19,6 +21,7 @@ export declare class SimCfnS3BucketConfigurator {
     private readonly resource;
     private readonly properties;
     private readonly bucketName;
+    private readonly options;
     constructor(properties: SimCfnS3BucketConfiguratorProperties);
     /**
      * Apply every configuration the Resource declares.

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-configurator.js

@@ -14,11 +14,13 @@ export class SimCfnS3BucketConfigurator {
     resource;
     properties;
     bucketName;
+    options;
     constructor(properties) {
         this.simS3 = properties.simS3;
         this.resource = properties.resource;
         this.properties = properties.properties;
         this.bucketName = properties.bucketName;
+        this.options = properties.options;
     }
     /**
      * Apply every configuration the Resource declares.
@@ -38,9 +40,7 @@ export class SimCfnS3BucketConfigurator {
         if (config === undefined) {
             return;
         }
-        await this.simS3.putBucketWebsite({
-            input: { Bucket: this.bucketName, WebsiteConfiguration: config },
-        });
+        await this.simS3.putBucketWebsite({ input: { Bucket: this.bucketName, WebsiteConfiguration: config } }, this.options);
     }
     async configurePublicAccess() {
         const config = new SimCfnS3BucketPublicAccessConfiguration(this.resource.logicalId, this.properties).read();
@@ -52,16 +52,14 @@ export class SimCfnS3BucketConfigurator {
                 Bucket: this.bucketName,
                 PublicAccessBlockConfiguration: config,
             },
-        });
+        }, this.options);
     }
     async configureLifecycle() {
         const config = new SimCfnS3BucketLifecycleConfiguration(this.resource.logicalId, this.properties).read();
         if (config === undefined) {
             return;
         }
-        await this.simS3.putBucketLifecycleConfiguration({
-            input: { Bucket: this.bucketName, LifecycleConfiguration: config },
-        });
+        await this.simS3.putBucketLifecycleConfiguration({ input: { Bucket: this.bucketName, LifecycleConfiguration: config } }, this.options);
     }
     async configureNotifications() {
         const declared = this.properties["NotificationConfiguration"];
@@ -69,11 +67,6 @@ export class SimCfnS3BucketConfigurator {
             return;
         }
         const config = new SimCfnS3BucketNotificationConfiguration(this.resource.logicalId).read(declared);
-        await this.simS3.putBucketNotificationConfiguration({
-            input: {
-                Bucket: this.bucketName,
-                NotificationConfiguration: config,
-            },
-        });
+        await this.simS3.putBucketNotificationConfiguration({ input: { Bucket: this.bucketName, NotificationConfiguration: config } }, this.options);
     }
 }

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimS3 } from "../../sim-s3.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnS3BucketCreatorProperties {
     readonly simS3: SimS3;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnS3BucketCreator {
      * Resource and the Bucket is created without it. What each of the remaining
      * ones says is then checked as it is applied.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimS3Bucket>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimS3Bucket>;
     /**
      * A Resource without a BucketName is named after its logical id, rather than
      * the generated name real CloudFormation invents.

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.js

@@ -18,7 +18,7 @@ export class SimCfnS3BucketCreator {
      * Resource and the Bucket is created without it. What each of the remaining
      * ones says is then checked as it is applied.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         new SimCfnS3BucketPropertyRules({
             logicalId: resource.logicalId,
             properties,
@@ -26,7 +26,7 @@ export class SimCfnS3BucketCreator {
         }).apply();
         const bucketName = this.bucketNameForResource(resource, properties);
         validateS3BucketName(bucketName);
-        await this.simS3.createBucket({ input: { Bucket: bucketName } });
+        await this.simS3.createBucket({ input: { Bucket: bucketName } }, options);
         const bucket = this.simS3.getSimBucketByName(bucketName);
         assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation creation`);
         await new SimCfnS3BucketConfigurator({
@@ -34,6 +34,7 @@ export class SimCfnS3BucketCreator {
             resource,
             properties,
             bucketName,
+            options,
         }).configure();
         return bucket;
     }

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
 import type { SimS3 } from "../../sim-s3.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnS3BucketPolicyCreatorProperties {
     readonly simS3: SimS3;
 }
@@ -24,7 +25,7 @@ export declare class SimCfnS3BucketPolicyCreator {
      * because a Bucket policy has no existence of its own in S3: it is state on
      * the Bucket it is attached to.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimS3Bucket>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimS3Bucket>;
     private bucketNameForResource;
     private policyDocumentForResource;
 }

package/dist/service/s3/cfn/bucket-policy/sim-cfn-s3-bucket-policy-creator.js

@@ -21,7 +21,7 @@ export class SimCfnS3BucketPolicyCreator {
      * because a Bucket policy has no existence of its own in S3: it is state on
      * the Bucket it is attached to.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const bucketName = this.bucketNameForResource(resource, properties);
         const policyDocument = this.policyDocumentForResource(resource, properties);
         await this.simS3.putBucketPolicy({
@@ -29,7 +29,7 @@ export class SimCfnS3BucketPolicyCreator {
                 Bucket: bucketName,
                 Policy: jsonStringify(policyDocument),
             },
-        });
+        }, options);
         const bucket = this.simS3.getSimBucketByName(bucketName);
         assertDefined(bucket, `sim S3 Bucket ${bucketName} after CloudFormation Bucket policy creation`);
         return bucket;

package/dist/service/s3/cfn/sim-cfn-s3-resource-deleter.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimS3 } from "../sim-s3.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnS3ResourceDeleterProperties {
     readonly simS3: SimS3;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnS3ResourceDeleter {
     /**
      * Delete a simulated S3 resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
     /**
      * The Bucket a Resource was created against.
      *

package/dist/service/s3/cfn/sim-cfn-s3-resource-deleter.js

@@ -17,18 +17,14 @@ export class SimCfnS3ResourceDeleter {
     /**
      * Delete a simulated S3 resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, options) {
         switch (resourceTypeName) {
             case "Bucket": {
-                await this.simS3.deleteBucket({
-                    input: { Bucket: this.bucketName(resource) },
-                });
+                await this.simS3.deleteBucket({ input: { Bucket: this.bucketName(resource) } }, options);
                 return;
             }
             case "BucketPolicy": {
-                await this.simS3.deleteBucketPolicy({
-                    input: { Bucket: this.bucketName(resource) },
-                });
+                await this.simS3.deleteBucketPolicy({ input: { Bucket: this.bucketName(resource) } }, options);
                 return;
             }
             default: {

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.d.ts

@@ -1,4 +1,4 @@
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimS3 } from "../sim-s3.js";
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 /**
@@ -16,5 +16,5 @@ export declare class SimS3CloudFormationResourceFactory implements SimCfnService
     /**
      * Delete a simulated S3 resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }

package/dist/service/s3/cfn/sim-cfn-s3-resource-factory.js

@@ -1,6 +1,7 @@
 import { SimCfnS3BucketCreator } from "./bucket/sim-cfn-s3-bucket-creator.js";
 import { SimCfnS3BucketPolicyCreator } from "./bucket-policy/sim-cfn-s3-bucket-policy-creator.js";
 import { SimCfnS3ResourceDeleter } from "./sim-cfn-s3-resource-deleter.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated S3 resources.
  */
@@ -17,12 +18,13 @@ export class SimS3CloudFormationResourceFactory {
      * Create a simulated S3 resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Bucket": {
-                return await this.bucketCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.bucketCreator.create(resource, context.resolvedProperties ?? resource.properties, options);
             }
             case "BucketPolicy": {
-                return await this.bucketPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.bucketPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim S3 CloudFormation Resource ${resourceTypeName}`);
@@ -32,7 +34,7 @@ export class SimS3CloudFormationResourceFactory {
     /**
      * Delete a simulated S3 resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.deleter.delete(resourceTypeName, resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/s3/command/create-bucket/create-bucket.handler.js

@@ -44,6 +44,7 @@ export class CreateBucketCommandHandler {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: "s3:CreateBucket",
                 resource,
             });

package/dist/service/s3/command/delete-bucket/delete-bucket-authorizer.js

@@ -30,6 +30,7 @@ export class DeleteBucketAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteBucketAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/delete-bucket-policy/delete-bucket-policy-authorizer.js

@@ -29,6 +29,7 @@ export class DeleteBucketPolicyAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteBucketPolicyAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/delete-object/delete-object-authorizer.js

@@ -38,6 +38,7 @@ export class DeleteObjectAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteObjectAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/get-bucket-policy/get-bucket-policy-authorizer.js

@@ -26,6 +26,7 @@ export class GetBucketPolicyAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: GetBucketPolicyAuthorizer.action,
                 resource,
             });