@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/s3/command/get-object/get-object-authorizer.js

@@ -41,6 +41,7 @@ export class GetObjectAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: GetObjectAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/head-bucket/head-bucket-authorizer.js

@@ -39,6 +39,7 @@ export class HeadBucketAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: HeadBucketAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/lifecycle/sim-s3-lifecycle-authorizer.js

@@ -42,6 +42,7 @@ export class SimS3LifecycleAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/s3/command/list-buckets/list-buckets-authorizer.js

@@ -37,6 +37,7 @@ export class ListBucketsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ListBucketsAuthorizer.action,
                 resource: ListBucketsAuthorizer.resource,
             });

package/dist/service/s3/command/list-objects/list-objects-authorizer.js

@@ -48,6 +48,7 @@ export class ListObjectsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: ListObjectsAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/multipart/sim-s3-multipart-authorizer.js

@@ -42,6 +42,7 @@ export class SimS3MultipartAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: SimS3MultipartAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/notification/sim-s3-notification-authorizer.js

@@ -43,6 +43,7 @@ export class SimS3NotificationAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/s3/command/public-access-block/sim-s3-public-access-block-authorizer.js

@@ -41,6 +41,7 @@ export class SimS3PublicAccessBlockAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/s3/command/put-bucket-policy/put-bucket-policy-authorizer.js

@@ -23,6 +23,7 @@ export class PutBucketPolicyAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: PutBucketPolicyAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/put-bucket-website/put-bucket-website-authorizer.js

@@ -40,6 +40,7 @@ export class PutBucketWebsiteAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: PutBucketWebsiteAuthorizer.action,
                 resource,
             });

package/dist/service/s3/command/put-object/put-object-authorizer.js

@@ -41,6 +41,7 @@ export class PutObjectAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: PutObjectAuthorizer.action,
                 resource,
             });

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js

@@ -1,6 +1,7 @@
 import { SimLambdaServiceInvokeAuthorizer } from "../../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
 import { simS3ServicePrincipal } from "../sim-s3-service-principal.js";
 import { SimS3NotificationFunctionArn } from "./sim-s3-notification-function-arn.js";
+import { simScopeIamAuthZ } from "../../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * The simulated Lambda functions of one simulated AWS instance, as S3
  * notification destinations.
@@ -69,7 +70,7 @@ export class SimAwsS3NotificationFunctions {
             .getSimFunctionTarget(arn.functionName, arn.qualifier);
     }
     iam(arn) {
-        return this.scope(arn).iam();
+        return simScopeIamAuthZ(this.scope(arn));
     }
     scope(arn) {
         return this.simAws.accountRegionScope(arn.accountId, arn.regionName);

package/dist/service/s3/notification/destination/sns/sim-s3-notification-topic.js

@@ -1,5 +1,6 @@
 import { SimSnsServicePublishAuthorizer } from "../../../../sns/command/authorize/sim-sns-service-publish-authorizer.js";
 import { simS3ServicePrincipal } from "../sim-s3-service-principal.js";
+import { simScopeIamAuthZ } from "../../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * The subject real S3 publishes every event notification with.
  *
@@ -32,7 +33,7 @@ export class SimS3NotificationTopic {
             return `${request.destinationArn} is not a simulated SNS topic.`;
         }
         const decision = new SimSnsServicePublishAuthorizer({
-            iam: this.scope.iam(),
+            iam: simScopeIamAuthZ(this.scope),
         }).authorize({
             topic,
             servicePrincipal: simS3ServicePrincipal,

package/dist/service/s3/notification/destination/sqs/sim-s3-notification-queue.js

@@ -1,5 +1,6 @@
 import { SimSqsServiceSendAuthorizer } from "../../../../sqs/command/authorize/sim-sqs-service-send-authorizer.js";
 import { simS3ServicePrincipal } from "../sim-s3-service-principal.js";
+import { simScopeIamAuthZ } from "../../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * One queue an S3 Bucket is notifying, in the Account and Region its ARN names.
  *
@@ -23,7 +24,7 @@ export class SimS3NotificationQueue {
             return `${request.destinationArn} is not a simulated SQS queue.`;
         }
         const decision = new SimSqsServiceSendAuthorizer({
-            iam: this.scope.iam(),
+            iam: simScopeIamAuthZ(this.scope),
         }).authorize({
             queue,
             servicePrincipal: simS3ServicePrincipal,

package/dist/service/s3/sim-s3-commands.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket, SimS3BucketName } from "./bucket/sim-s3-bucket.js";
 import { SimS3BucketCommands } from "./command/bucket/sim-s3-bucket-commands.js";
 import { SimS3BucketPolicyCommands } from "./command/bucket-policy/sim-s3-bucket-policy-commands.js";

package/dist/service/s3/sim-s3-commands.js

@@ -1,5 +1,5 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimS3BucketCommands } from "./command/bucket/sim-s3-bucket-commands.js";
 import { SimS3BucketPolicyCommands } from "./command/bucket-policy/sim-s3-bucket-policy-commands.js";
 import { SimS3LifecycleCommands } from "./command/lifecycle/sim-s3-lifecycle-commands.js";
@@ -28,7 +28,8 @@ export class SimS3Commands {
     multipartUploads;
     objectNotifier;
     constructor(properties) {
-        const { iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), notificationDestinations = new SimS3NoNotificationDestinations(), } = properties;
+        const { background = new BackgroundTasks(), notificationDestinations = new SimS3NoNotificationDestinations(), } = properties;
+        const iam = simIamInRegion(properties.iam, properties.accountRegionScope.regionName);
         this.objectNotifier = new SimS3ObjectNotifier({
             destinations: notificationDestinations,
             background,

package/dist/service/scheduler/cfn/sim-cfn-schedule-creator.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.type.js";
+import type { SimSchedulerSchedule } from "../schedule/sim-scheduler-schedule.js";
+import type { SimScheduler } from "../sim-scheduler.js";
+/**
+ * Creates simulated schedules from AWS::Scheduler::Schedule Resources.
+ *
+ * The schedule goes through the ordinary CreateSchedule command rather than
+ * being constructed directly, so a schedule a template deployed is the same
+ * thing an SDK caller would have got, down to the refusals.
+ */
+export declare class SimCfnScheduleCreator {
+    private readonly scheduler;
+    constructor(properties: {
+        readonly scheduler: SimScheduler;
+    });
+    /**
+     * Create a schedule from an AWS::Scheduler::Schedule Resource.
+     */
+    create(resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<SimSchedulerSchedule>;
+    /**
+     * Delete the schedule a Resource created.
+     */
+    delete(resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
+    private read;
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-creator.js

@@ -0,0 +1,49 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
+import { SimCfnScheduleProperties } from "./sim-cfn-schedule-properties.js";
+import { createdSchedule } from "./sim-cfn-scheduler-resource-lookup.js";
+import { schedulerScheduleResourceType, simCfnSchedulerResourceCreation, simCfnSchedulerResourceDeletion, } from "./sim-cfn-scheduler-resource-error.js";
+/**
+ * Creates simulated schedules from AWS::Scheduler::Schedule Resources.
+ *
+ * The schedule goes through the ordinary CreateSchedule command rather than
+ * being constructed directly, so a schedule a template deployed is the same
+ * thing an SDK caller would have got, down to the refusals.
+ */
+export class SimCfnScheduleCreator {
+    scheduler;
+    constructor(properties) {
+        this.scheduler = properties.scheduler;
+    }
+    /**
+     * Create a schedule from an AWS::Scheduler::Schedule Resource.
+     */
+    async create(resource, context) {
+        const properties = this.read(resource, context.resolvedProperties ?? resource.properties);
+        const input = properties.scheduleInput();
+        return await simCfnSchedulerResourceCreation(schedulerScheduleResourceType, resource.logicalId, async () => {
+            await this.scheduler.createSchedule({ input }, simCfnResourceCallerOptions(context.caller));
+            const schedule = createdSchedule(this.scheduler, input);
+            assertDefined(schedule, `sim Scheduler schedule ${String(input.Name)} after ` +
+                `CloudFormation creation`);
+            return schedule;
+        });
+    }
+    /**
+     * Delete the schedule a Resource created.
+     */
+    async delete(resource, context) {
+        const properties = this.read(resource, context.resolvedProperties ?? resource.properties);
+        await simCfnSchedulerResourceDeletion(async () => {
+            await this.scheduler.deleteSchedule({
+                input: {
+                    Name: properties.name(),
+                    GroupName: properties.scheduleInput().GroupName,
+                },
+            }, simCfnResourceCallerOptions(context.caller));
+        });
+    }
+    read(resource, properties) {
+        return new SimCfnScheduleProperties({ resource, properties });
+    }
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-group-creator.d.ts

@@ -0,0 +1,31 @@
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.type.js";
+import type { SimSchedulerScheduleGroup } from "../group/sim-scheduler-schedule-group.js";
+import type { SimScheduler } from "../sim-scheduler.js";
+/**
+ * Creates simulated schedule groups from AWS::Scheduler::ScheduleGroup
+ * Resources.
+ *
+ * A group is worth deploying for one reason. A schedule's name is unique
+ * within its group, and a construct deployed twice into one Account and Region
+ * collides on schedule names unless each deployment brings its own group.
+ */
+export declare class SimCfnScheduleGroupCreator {
+    private readonly scheduler;
+    constructor(properties: {
+        readonly scheduler: SimScheduler;
+    });
+    /**
+     * Create a group from an AWS::Scheduler::ScheduleGroup Resource.
+     */
+    create(resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<SimSchedulerScheduleGroup>;
+    /**
+     * Delete the group a Resource created, and the schedules still in it.
+     *
+     * Real Scheduler deletes a group's schedules with it, so a stack whose
+     * schedules come down alongside their group has nothing left over either
+     * way.
+     */
+    delete(resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
+    private read;
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-group-creator.js

@@ -0,0 +1,48 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
+import { SimCfnScheduleGroupProperties } from "./sim-cfn-schedule-group-properties.js";
+import { schedulerScheduleGroupResourceType, simCfnSchedulerResourceCreation, simCfnSchedulerResourceDeletion, } from "./sim-cfn-scheduler-resource-error.js";
+/**
+ * Creates simulated schedule groups from AWS::Scheduler::ScheduleGroup
+ * Resources.
+ *
+ * A group is worth deploying for one reason. A schedule's name is unique
+ * within its group, and a construct deployed twice into one Account and Region
+ * collides on schedule names unless each deployment brings its own group.
+ */
+export class SimCfnScheduleGroupCreator {
+    scheduler;
+    constructor(properties) {
+        this.scheduler = properties.scheduler;
+    }
+    /**
+     * Create a group from an AWS::Scheduler::ScheduleGroup Resource.
+     */
+    async create(resource, context) {
+        const properties = this.read(resource, context.resolvedProperties ?? resource.properties);
+        const name = properties.name();
+        properties.recordIgnoredProperties();
+        return await simCfnSchedulerResourceCreation(schedulerScheduleGroupResourceType, resource.logicalId, async () => {
+            await this.scheduler.createScheduleGroup({ input: { Name: name } }, simCfnResourceCallerOptions(context.caller));
+            const group = this.scheduler.findScheduleGroup(name);
+            assertDefined(group, `sim Scheduler schedule group ${name} after CloudFormation creation`);
+            return group;
+        });
+    }
+    /**
+     * Delete the group a Resource created, and the schedules still in it.
+     *
+     * Real Scheduler deletes a group's schedules with it, so a stack whose
+     * schedules come down alongside their group has nothing left over either
+     * way.
+     */
+    async delete(resource, context) {
+        const properties = this.read(resource, context.resolvedProperties ?? resource.properties);
+        await simCfnSchedulerResourceDeletion(async () => {
+            await this.scheduler.deleteScheduleGroup({ input: { Name: properties.name() } }, simCfnResourceCallerOptions(context.caller));
+        });
+    }
+    read(resource, properties) {
+        return new SimCfnScheduleGroupProperties({ resource, properties });
+    }
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-group-properties.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+/**
+ * Reads AWS::Scheduler::ScheduleGroup properties.
+ *
+ * A group is a name, which is the whole of the Resource beyond its tags.
+ */
+export declare class SimCfnScheduleGroupProperties {
+    private readonly resource;
+    private readonly properties;
+    constructor(properties: {
+        readonly resource: SimCfnResource;
+        readonly properties: SimCfnTemplateValueRecord;
+    });
+    /**
+     * The group name.
+     *
+     * An unnamed group is named after the stack and the logical ID, as real
+     * CloudFormation names one.
+     */
+    name(): string;
+    /**
+     * Record the properties the group is created without acting on.
+     */
+    recordIgnoredProperties(): void;
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-group-properties.js

@@ -0,0 +1,68 @@
+import { SimCfnGeneratedResourceName } from "../../cloudformation/resource/name/sim-cfn-generated-resource-name.js";
+import { schedulerScheduleGroupResourceType, simCfnSchedulerResourceError, } from "./sim-cfn-scheduler-resource-error.js";
+const maximumNameLength = 64;
+/**
+ * The properties an AWS::Scheduler::ScheduleGroup Resource is read for.
+ */
+const readNames = new Set(["Name", "Tags"]);
+/**
+ * Why a group is deployed without its tags, rather than the tags failing it.
+ *
+ * Every other unmodelled Scheduler input is refused, and this one is not, for
+ * two reasons. Nothing a simulation runs reads a schedule group tag, so a group
+ * without them behaves exactly as the template's does. And the CDK propagates a
+ * Stack's tags onto every taggable Resource in it, so refusing them would fail
+ * any tagged Stack that happened to contain a group, over a property nobody
+ * writing that Stack asked the group for.
+ */
+const tagsReason = "Tags is a real AWS::Scheduler::ScheduleGroup property no simulated " +
+    "service reads, so the group is created without them";
+/**
+ * Reads AWS::Scheduler::ScheduleGroup properties.
+ *
+ * A group is a name, which is the whole of the Resource beyond its tags.
+ */
+export class SimCfnScheduleGroupProperties {
+    resource;
+    properties;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * The group name.
+     *
+     * An unnamed group is named after the stack and the logical ID, as real
+     * CloudFormation names one.
+     */
+    name() {
+        const name = this.properties["Name"];
+        if (name === undefined) {
+            return new SimCfnGeneratedResourceName({
+                stackName: this.resource.stackName,
+                logicalId: this.resource.logicalId,
+                maximumLength: maximumNameLength,
+            }).value;
+        }
+        if (typeof name !== "string") {
+            throw simCfnSchedulerResourceError(schedulerScheduleGroupResourceType, this.resource.logicalId, "Name must be a string");
+        }
+        return name;
+    }
+    /**
+     * Record the properties the group is created without acting on.
+     */
+    recordIgnoredProperties() {
+        for (const name of Object.keys(this.properties)) {
+            if (name === "Tags") {
+                this.resource.ignoreProperty(name, tagsReason);
+                continue;
+            }
+            if (!readNames.has(name)) {
+                this.resource.ignoreProperty(name, `${name} is not an ${schedulerScheduleGroupResourceType} property ` +
+                    `simulated Scheduler knows about, so the group is created ` +
+                    `without it`);
+            }
+        }
+    }
+}

package/dist/service/scheduler/cfn/sim-cfn-schedule-properties.js

@@ -1,6 +1,6 @@
 import { isRecord } from "../../../util/type-guard/record.js";
 import { SimCfnGeneratedResourceName } from "../../cloudformation/resource/name/sim-cfn-generated-resource-name.js";
-import { simCfnSchedulerResourceError } from "./sim-cfn-scheduler-resource-error.js";
+import { schedulerScheduleResourceType, simCfnSchedulerResourceError, } from "./sim-cfn-scheduler-resource-error.js";
 const maximumNameLength = 64;
 /**
  * Reads AWS::Scheduler::Schedule properties into the shape CreateSchedule
@@ -98,14 +98,8 @@ export class SimCfnScheduleProperties {
         return target;
     }
     dateProperty(name) {
-        const value = this.properties.get(name);
-        if (value === undefined) {
-            return undefined;
-        }
-        if (typeof value !== "string") {
-            throw this.propertyError(`${name} must be a string`);
-        }
-        return new Date(value);
+        const value = this.stringProperty(name);
+        return value === undefined ? undefined : new Date(value);
     }
     stringProperty(name) {
         const value = this.properties.get(name);
@@ -118,6 +112,6 @@ export class SimCfnScheduleProperties {
         return value;
     }
     propertyError(reason) {
-        return simCfnSchedulerResourceError(this.resource.logicalId, reason);
+        return simCfnSchedulerResourceError(schedulerScheduleResourceType, this.resource.logicalId, reason);
     }
 }

package/dist/service/scheduler/cfn/sim-cfn-scheduler-resource-error.d.ts

@@ -1,7 +1,8 @@
 /**
- * The CloudFormation Resource type simulated Scheduler creates.
+ * The CloudFormation Resource types simulated Scheduler creates.
  */
 export declare const schedulerScheduleResourceType = "AWS::Scheduler::Schedule";
+export declare const schedulerScheduleGroupResourceType = "AWS::Scheduler::ScheduleGroup";
 /**
  * Build the error a Resource of a simulated Scheduler type is refused with.
  *
@@ -10,7 +11,7 @@ export declare const schedulerScheduleResourceType = "AWS::Scheduler::Schedule";
  * the template asked for it is the wrong answer: the Stack would look deployed
  * while nothing ever fired. So a refusal here says the Resource is invalid.
  */
-export declare function simCfnSchedulerResourceError(logicalId: string, reason: string, cause?: unknown): Error;
+export declare function simCfnSchedulerResourceError(resourceType: string, logicalId: string, reason: string, cause?: unknown): Error;
 /**
  * Run the simulated Scheduler commands one Resource is made of, naming the
  * Resource in whatever they refuse.
@@ -20,4 +21,14 @@ export declare function simCfnSchedulerResourceError(logicalId: string, reason:
  * again in the CloudFormation layer. Only Scheduler's own errors are renamed,
  * so a refusal the CloudFormation layer decided keeps its own wording.
  */
-export declare function simCfnSchedulerResourceCreation<T>(logicalId: string, create: () => Promise<T>): Promise<T>;
+export declare function simCfnSchedulerResourceCreation<T>(resourceType: string, logicalId: string, create: () => Promise<T>): Promise<T>;
+/**
+ * Remove the resource one Resource created, leaving one that has already gone.
+ *
+ * Real CloudFormation treats deleting a Resource that has already gone as
+ * done rather than as a failure, and a Scheduler teardown reaches that case. A
+ * schedule group takes its schedules with it. A schedule whose template named
+ * its group as a string rather than by `Ref` declares no dependency on it, and
+ * may find itself already deleted by the time its own turn comes.
+ */
+export declare function simCfnSchedulerResourceDeletion(remove: () => Promise<void>): Promise<void>;

package/dist/service/scheduler/cfn/sim-cfn-scheduler-resource-error.js

@@ -1,8 +1,9 @@
-import { SimSchedulerError } from "../error/sim-scheduler.error.js";
+import { SimSchedulerError, SimSchedulerResourceNotFoundException, } from "../error/sim-scheduler.error.js";
 /**
- * The CloudFormation Resource type simulated Scheduler creates.
+ * The CloudFormation Resource types simulated Scheduler creates.
  */
 export const schedulerScheduleResourceType = "AWS::Scheduler::Schedule";
+export const schedulerScheduleGroupResourceType = "AWS::Scheduler::ScheduleGroup";
 /**
  * Build the error a Resource of a simulated Scheduler type is refused with.
  *
@@ -11,8 +12,10 @@ export const schedulerScheduleResourceType = "AWS::Scheduler::Schedule";
  * the template asked for it is the wrong answer: the Stack would look deployed
  * while nothing ever fired. So a refusal here says the Resource is invalid.
  */
-export function simCfnSchedulerResourceError(logicalId, reason, cause) {
-    return new Error(`Invalid ${schedulerScheduleResourceType} Resource ${logicalId}: ${reason}`, { cause });
+export function simCfnSchedulerResourceError(resourceType, logicalId, reason, cause) {
+    return new Error(`Invalid ${resourceType} Resource ${logicalId}: ${reason}`, {
+        cause,
+    });
 }
 /**
  * Run the simulated Scheduler commands one Resource is made of, naming the
@@ -23,14 +26,33 @@ export function simCfnSchedulerResourceError(logicalId, reason, cause) {
  * again in the CloudFormation layer. Only Scheduler's own errors are renamed,
  * so a refusal the CloudFormation layer decided keeps its own wording.
  */
-export async function simCfnSchedulerResourceCreation(logicalId, create) {
+export async function simCfnSchedulerResourceCreation(resourceType, logicalId, create) {
     try {
         return await create();
     }
     catch (error) {
         if (error instanceof SimSchedulerError) {
-            throw simCfnSchedulerResourceError(logicalId, error.message, error);
+            throw simCfnSchedulerResourceError(resourceType, logicalId, error.message, error);
         }
         throw error;
     }
 }
+/**
+ * Remove the resource one Resource created, leaving one that has already gone.
+ *
+ * Real CloudFormation treats deleting a Resource that has already gone as
+ * done rather than as a failure, and a Scheduler teardown reaches that case. A
+ * schedule group takes its schedules with it. A schedule whose template named
+ * its group as a string rather than by `Ref` declares no dependency on it, and
+ * may find itself already deleted by the time its own turn comes.
+ */
+export async function simCfnSchedulerResourceDeletion(remove) {
+    try {
+        await remove();
+    }
+    catch (error) {
+        if (!(error instanceof SimSchedulerResourceNotFoundException)) {
+            throw error;
+        }
+    }
+}

package/dist/service/scheduler/cfn/sim-cfn-scheduler-resource-lookup.d.ts

@@ -1,6 +1,10 @@
 import type { SimSchedulerScheduleInput } from "../command/schedule/schedule.command.js";
 import type { SimSchedulerSchedule } from "../schedule/sim-scheduler-schedule.js";
 import type { SimScheduler } from "../sim-scheduler.js";
+/**
+ * The `AWS::Scheduler::*` Resource types this service creates.
+ */
+export type SimSchedulerCfnResourceTypeName = "Schedule" | "ScheduleGroup";
 /**
  * Find the schedule a Resource just created, in whichever group it went into.
  *
@@ -10,9 +14,11 @@ import type { SimScheduler } from "../sim-scheduler.js";
  */
 export declare function createdSchedule(scheduler: SimScheduler, input: SimSchedulerScheduleInput): SimSchedulerSchedule | undefined;
 /**
- * Refuse a Resource type this service does not create.
+ * Read the Resource type a request names, refusing one this service does not
+ * create.
  *
- * Schedule groups are the other `AWS::Scheduler::*` type, and are reported as
- * unsupported rather than quietly treated as deployed.
+ * A schedule and a schedule group are the whole of `AWS::Scheduler::*`, so
+ * anything else is a type AWS has added since, reported as unsupported rather
+ * than quietly treated as deployed.
  */
-export declare function refuseUnknownType(resourceTypeName: string): void;
+export declare function schedulerResourceTypeName(resourceTypeName: string): SimSchedulerCfnResourceTypeName;

package/dist/service/scheduler/cfn/sim-cfn-scheduler-resource-lookup.js

@@ -15,13 +15,16 @@ export function createdSchedule(scheduler, input) {
         : scheduler.findSchedule(name, input.GroupName);
 }
 /**
- * Refuse a Resource type this service does not create.
+ * Read the Resource type a request names, refusing one this service does not
+ * create.
  *
- * Schedule groups are the other `AWS::Scheduler::*` type, and are reported as
- * unsupported rather than quietly treated as deployed.
+ * A schedule and a schedule group are the whole of `AWS::Scheduler::*`, so
+ * anything else is a type AWS has added since, reported as unsupported rather
+ * than quietly treated as deployed.
  */
-export function refuseUnknownType(resourceTypeName) {
-    if (resourceTypeName !== "Schedule") {
-        throw new Error(`Unsupported sim Scheduler CloudFormation Resource ${resourceTypeName}`);
+export function schedulerResourceTypeName(resourceTypeName) {
+    if (resourceTypeName === "Schedule" || resourceTypeName === "ScheduleGroup") {
+        return resourceTypeName;
     }
+    throw new Error(`Unsupported sim Scheduler CloudFormation Resource ${resourceTypeName}`);
 }

package/dist/service/scheduler/cfn/sim-scheduler-cfn-resource-factory.d.ts

@@ -8,22 +8,20 @@ interface SimSchedulerCfnResourceFactoryProperties {
 /**
  * CloudFormation Resource factory for simulated Scheduler resources.
  *
- * There is one type, and the schedule goes through the ordinary CreateSchedule
- * command rather than being constructed directly, so a schedule a template
- * deployed is the same thing an SDK caller would have got, down to the
- * refusals.
+ * Two types, a schedule and the group it goes in, both created through the
+ * ordinary Scheduler commands rather than constructed directly.
  */
 export declare class SimSchedulerCfnResourceFactory implements SimCfnServiceResourceFactory {
-    private readonly scheduler;
+    private readonly scheduleCreator;
+    private readonly groupCreator;
     constructor(properties: SimSchedulerCfnResourceFactoryProperties);
     /**
-     * Create a simulated schedule from a CloudFormation Resource.
+     * Create a simulated Scheduler resource from a CloudFormation Resource.
      */
     create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
     /**
-     * Delete the schedule a Resource created.
+     * Delete the resource a Resource created.
      */
     delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
-    private read;
 }
 export {};