@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/sns/cfn/sim-cfn-sns-resource-deleter.js

@@ -1,6 +1,4 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
-import { simSnsPolicyAttributeName } from "../topic/sim-sns-topic-attribute-names.js";
-import { simCfnSnsPolicyTopicArns } from "./topic-policy/sim-cfn-sns-topic-policy-properties.js";
 /**
  * Deletes the simulated SNS resources a CloudFormation Stack created.
  *
@@ -16,24 +14,26 @@ import { simCfnSnsPolicyTopicArns } from "./topic-policy/sim-cfn-sns-topic-polic
  */
 export class SimCfnSnsResourceDeleter {
     sns;
+    topicPolicyCreator;
     constructor(properties) {
         this.sns = properties.sns;
+        this.topicPolicyCreator = properties.topicPolicyCreator;
     }
     /**
      * Delete a simulated SNS resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource, properties) {
+    async delete(resourceTypeName, resource, properties, options) {
         switch (resourceTypeName) {
             case "Topic": {
-                await this.deleteTopic(resource);
+                await this.deleteTopic(resource, options);
                 return;
             }
             case "Subscription": {
-                await this.unsubscribe(resource);
+                await this.unsubscribe(resource, options);
                 return;
             }
             case "TopicPolicy": {
-                await this.clearTopicPolicy(resource, properties);
+                await this.topicPolicyCreator.delete(resource, properties, options);
                 return;
             }
             default: {
@@ -41,32 +41,14 @@ export class SimCfnSnsResourceDeleter {
             }
         }
     }
-    async deleteTopic(resource) {
+    async deleteTopic(resource, options) {
         const topic = resource.simResource;
         assertDefined(topic, `sim SNS topic for CloudFormation Resource ${resource.logicalId}`);
-        await this.sns.deleteTopic({ input: { TopicArn: topic.arn.value } });
+        await this.sns.deleteTopic({ input: { TopicArn: topic.arn.value } }, options);
     }
-    async unsubscribe(resource) {
+    async unsubscribe(resource, options) {
         const subscription = resource.simResource;
         assertDefined(subscription, `sim SNS subscription for CloudFormation Resource ${resource.logicalId}`);
-        await this.sns.unsubscribe({
-            input: { SubscriptionArn: subscription.arn.value },
-        });
-    }
-    /**
-     * Take the policy back off every topic the Resource named.
-     *
-     * The Resource points at only the first of them, so the topics are read from
-     * the template the same way creation read them.
-     */
-    async clearTopicPolicy(resource, properties) {
-        const topicArns = simCfnSnsPolicyTopicArns(resource.logicalId, properties);
-        await Promise.all(topicArns.map(async (topicArn) => this.sns.setTopicAttributes({
-            input: {
-                TopicArn: topicArn,
-                AttributeName: simSnsPolicyAttributeName,
-                AttributeValue: "",
-            },
-        })));
+        await this.sns.unsubscribe({ input: { SubscriptionArn: subscription.arn.value } }, options);
     }
 }

package/dist/service/sns/cfn/sim-sns-cfn-resource-factory.js

@@ -2,6 +2,7 @@ import { SimCfnSnsResourceDeleter } from "./sim-cfn-sns-resource-deleter.js";
 import { SimCfnSnsSubscriptionCreator } from "./subscription/sim-cfn-sns-subscription-creator.js";
 import { SimCfnSnsTopicCreator } from "./topic/sim-cfn-sns-topic-creator.js";
 import { SimCfnSnsTopicPolicyCreator } from "./topic-policy/sim-cfn-sns-topic-policy-creator.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated SNS resources.
  */
@@ -18,7 +19,10 @@ export class SimSnsCfnResourceFactory {
         this.topicPolicyCreator = new SimCfnSnsTopicPolicyCreator({
             sns: properties.sns,
         });
-        this.deleter = new SimCfnSnsResourceDeleter({ sns: properties.sns });
+        this.deleter = new SimCfnSnsResourceDeleter({
+            sns: properties.sns,
+            topicPolicyCreator: this.topicPolicyCreator,
+        });
     }
     /**
      * Create a simulated SNS resource from a CloudFormation Resource.
@@ -29,15 +33,16 @@ export class SimSnsCfnResourceFactory {
      */
     async create(resourceTypeName, resource, context) {
         const properties = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Topic": {
-                return await this.topicCreator.create(resource, properties);
+                return await this.topicCreator.create(resource, properties, options);
             }
             case "Subscription": {
-                return await this.subscriptionCreator.create(resource, properties);
+                return await this.subscriptionCreator.create(resource, properties, options);
             }
             case "TopicPolicy": {
-                return await this.topicPolicyCreator.create(resource, properties);
+                return await this.topicPolicyCreator.create(resource, properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim SNS CloudFormation Resource ${resourceTypeName}`);
@@ -48,6 +53,6 @@ export class SimSnsCfnResourceFactory {
      * Delete a simulated SNS resource created from a CloudFormation Resource.
      */
     async delete(resourceTypeName, resource, context) {
-        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties);
+        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-creator.d.ts

@@ -1,6 +1,7 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSns } from "../../sim-sns.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import type { SimSnsSubscription } from "../../subscription/sim-sns-subscription.js";
 interface SimCfnSnsSubscriptionCreatorProperties {
     readonly sns: SimSns;
@@ -20,6 +21,6 @@ export declare class SimCfnSnsSubscriptionCreator {
     /**
      * Create a subscription from an AWS::SNS::Subscription Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSnsSubscription>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSnsSubscription>;
 }
 export {};

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-creator.js

@@ -19,13 +19,13 @@ export class SimCfnSnsSubscriptionCreator {
     /**
      * Create a subscription from an AWS::SNS::Subscription Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const input = new SimCfnSnsSubscriptionProperties({
             resource,
             properties,
         }).input();
         return simCfnSnsResourceCreation(snsSubscriptionResourceType, resource.logicalId, async () => {
-            const subscribed = await this.sns.subscribe({ input });
+            const subscribed = await this.sns.subscribe({ input }, options);
             const arn = subscribed.SubscriptionArn;
             assertDefined(arn, `sim SNS subscription ARN after CloudFormation creation of ${resource.logicalId}`);
             const subscription = this.sns.findSubscription(arn);

package/dist/service/sns/cfn/topic/sim-cfn-sns-topic-creator.d.ts

@@ -1,6 +1,7 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSns } from "../../sim-sns.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import type { SimSnsTopic } from "../../topic/sim-sns-topic.js";
 interface SimCfnSnsTopicCreatorProperties {
     readonly sns: SimSns;
@@ -19,7 +20,7 @@ export declare class SimCfnSnsTopicCreator {
     /**
      * Create a topic from an AWS::SNS::Topic Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSnsTopic>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSnsTopic>;
     /**
      * Subscribe everything the topic's own `Subscription` list declares.
      *

package/dist/service/sns/cfn/topic/sim-cfn-sns-topic-creator.js

@@ -18,7 +18,7 @@ export class SimCfnSnsTopicCreator {
     /**
      * Create a topic from an AWS::SNS::Topic Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const topicProperties = new SimCfnSnsTopicProperties({
             resource,
             properties,
@@ -27,12 +27,10 @@ export class SimCfnSnsTopicCreator {
         const attributes = topicProperties.attributes();
         const inline = topicProperties.inlineSubscriptions();
         return simCfnSnsResourceCreation(snsTopicResourceType, resource.logicalId, async () => {
-            await this.sns.createTopic({
-                input: { Name: name, Attributes: attributes },
-            });
+            await this.sns.createTopic({ input: { Name: name, Attributes: attributes } }, options);
             const topic = this.sns.findTopic(name);
             assertDefined(topic, `sim SNS topic ${name} after CloudFormation creation`);
-            await this.subscribeInline(topic, inline);
+            await this.subscribeInline(topic, inline, options);
             return topic;
         });
     }
@@ -44,7 +42,7 @@ export class SimCfnSnsTopicCreator {
      * with the earlier ones already subscribed, which is what a template asking
      * for two subscriptions and getting one has to look like.
      */
-    async subscribeInline(topic, subscriptions) {
+    async subscribeInline(topic, subscriptions, options) {
         for (const subscription of subscriptions) {
             // oxlint-disable-next-line no-await-in-loop -- one entry at a time, so a refused entry leaves the earlier ones subscribed
             await this.sns.subscribe({
@@ -53,7 +51,7 @@ export class SimCfnSnsTopicCreator {
                     Protocol: subscription.protocol,
                     Endpoint: subscription.endpoint,
                 },
-            });
+            }, options);
         }
     }
 }

package/dist/service/sns/cfn/topic-policy/sim-cfn-sns-topic-policy-creator.d.ts

@@ -1,6 +1,7 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSns } from "../../sim-sns.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import type { SimSnsTopic } from "../../topic/sim-sns-topic.js";
 interface SimCfnSnsTopicPolicyCreatorProperties {
     readonly sns: SimSns;
@@ -24,7 +25,14 @@ export declare class SimCfnSnsTopicPolicyCreator {
      * topic policy has no existence of its own in SNS: it is the `Policy`
      * attribute of the topics it names.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSnsTopic>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSnsTopic>;
+    /**
+     * Take the policy back off every topic the Resource named.
+     *
+     * The Resource points at only the first of them, so the topics are read from
+     * the template the same way creation read them.
+     */
+    delete(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
     /**
      * Set the policy on one topic and hand back the topic it was set on.
      */

package/dist/service/sns/cfn/topic-policy/sim-cfn-sns-topic-policy-creator.js

@@ -26,28 +26,44 @@ export class SimCfnSnsTopicPolicyCreator {
      * topic policy has no existence of its own in SNS: it is the `Policy`
      * attribute of the topics it names.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const { logicalId } = resource;
         const topicArns = simCfnSnsPolicyTopicArns(logicalId, properties);
         const policy = jsonStringify(simCfnSnsPolicyDocument(logicalId, properties));
         return simCfnSnsResourceCreation(snsTopicPolicyResourceType, logicalId, async () => {
-            const topics = await Promise.all(topicArns.map(async (topicArn) => this.policyApplied(topicArn, policy)));
+            const topics = await Promise.all(topicArns.map(async (topicArn) => this.policyApplied(topicArn, policy, options)));
             const first = topics[0];
             assertDefined(first, `sim SNS topic after CloudFormation topic policy creation for ${logicalId}`);
             return first;
         });
     }
+    /**
+     * Take the policy back off every topic the Resource named.
+     *
+     * The Resource points at only the first of them, so the topics are read from
+     * the template the same way creation read them.
+     */
+    async delete(resource, properties, options) {
+        const topicArns = simCfnSnsPolicyTopicArns(resource.logicalId, properties);
+        await Promise.all(topicArns.map(async (topicArn) => this.sns.setTopicAttributes({
+            input: {
+                TopicArn: topicArn,
+                AttributeName: simSnsPolicyAttributeName,
+                AttributeValue: "",
+            },
+        }, options)));
+    }
     /**
      * Set the policy on one topic and hand back the topic it was set on.
      */
-    async policyApplied(topicArn, policy) {
+    async policyApplied(topicArn, policy, options) {
         await this.sns.setTopicAttributes({
             input: {
                 TopicArn: topicArn,
                 AttributeName: simSnsPolicyAttributeName,
                 AttributeValue: policy,
             },
-        });
+        }, options);
         const parts = parseSnsTopicArn(topicArn);
         assertDefined(parts, `topic ARN ${topicArn} SetTopicAttributes accepted`);
         const topic = this.sns.findTopic(parts.name);

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js

@@ -3,6 +3,7 @@ import { SimSnsDeliveryNotPermitted } from "../../error/sim-sns-delivery.error.j
 import { SimSnsNotFoundException } from "../../error/sim-sns.error.js";
 import { simSnsDeliverySource, simSnsServicePrincipal, } from "../sim-sns-delivery.js";
 import { simSnsLambdaEventDocument } from "./sim-sns-lambda-event.js";
+import { simScopeIamAuthZ } from "../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * One function a simulated topic is delivering to, in the Account and Region
  * its ARN names.
@@ -45,7 +46,7 @@ export class SimSnsDeliveryFunction {
                     "alias.");
         }
         const decision = new SimLambdaServiceInvokeAuthorizer({
-            iam: this.scope.iam(),
+            iam: simScopeIamAuthZ(this.scope),
         }).authorize({
             resource: target.resource,
             servicePrincipal: simSnsServicePrincipal,

package/dist/service/sns/delivery/sqs/sim-sns-delivery-queue.js

@@ -3,6 +3,7 @@ import { SimSnsDeliveryNotPermitted } from "../../error/sim-sns-delivery.error.j
 import { SimSnsNotFoundException } from "../../error/sim-sns.error.js";
 import { simSnsDeliverySource, simSnsServicePrincipal, } from "../sim-sns-delivery.js";
 import { SimSnsQueueMessage } from "./sim-sns-queue-message.js";
+import { simScopeIamAuthZ } from "../../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * One queue a simulated topic is delivering to, in the Account and Region its
  * ARN names.
@@ -38,7 +39,7 @@ export class SimSnsDeliveryQueue {
             throw new SimSnsNotFoundException(`${endpointArn} is not a simulated SQS queue.`);
         }
         const decision = new SimSqsServiceSendAuthorizer({
-            iam: this.scope.iam(),
+            iam: simScopeIamAuthZ(this.scope),
         }).authorize({
             queue,
             servicePrincipal: simSnsServicePrincipal,

package/dist/service/sns/sim-sns.d.ts

@@ -2,7 +2,7 @@ import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import { SimAwsMessageLog } from "../aws/message/sim-aws-message-log.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSnsDeliveryFailure } from "./delivery/sim-sns-delivery-failures.js";
 import type { SimSnsOutwardDeliveryEndpoints } from "./delivery/sim-sns-protocol-delivery-endpoints.js";
 import type * as simSnsCommands from "./command/sim-sns-command.types.js";

package/dist/service/sns/sim-sns.js

@@ -1,7 +1,7 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimAwsMessageLog } from "../aws/message/sim-aws-message-log.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { simSnsNoDeliveryEndpoints } from "./delivery/sim-sns-no-delivery-endpoints.js";
 import { SimSnsCommands } from "./command/sim-sns-commands.js";
 import { SimSnsCfnResourceFactory } from "./cfn/sim-sns-cfn-resource-factory.js";
@@ -24,7 +24,8 @@ export class SimSns extends SimSnsSms {
     sdkRouter;
     cfnFactory;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), deliveryEndpoints = simSnsNoDeliveryEndpoints(), messageLog = new SimAwsMessageLog(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), deliveryEndpoints = simSnsNoDeliveryEndpoints(), messageLog = new SimAwsMessageLog(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const topics = new SimSnsTopicStore();
         const subscriptions = new SimSnsSubscriptionStore();
         super({

package/dist/service/sqs/cfn/queue/sim-cfn-sqs-queue-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSqs } from "../../sim-sqs.js";
 import type { SimSqsQueue } from "../../queue/sim-sqs-queue.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnSqsQueueCreatorProperties {
     readonly sqs: SimSqs;
 }
@@ -19,6 +20,6 @@ export declare class SimCfnSqsQueueCreator {
     /**
      * Create a queue from an AWS::SQS::Queue Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSqsQueue>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSqsQueue>;
 }
 export {};

package/dist/service/sqs/cfn/queue/sim-cfn-sqs-queue-creator.js

@@ -16,15 +16,13 @@ export class SimCfnSqsQueueCreator {
     /**
      * Create a queue from an AWS::SQS::Queue Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const queueProperties = new SimCfnSqsQueueProperties({
             resource,
             properties,
         });
         const name = queueProperties.name();
-        await this.sqs.createQueue({
-            input: { QueueName: name, Attributes: queueProperties.attributes() },
-        });
+        await this.sqs.createQueue({ input: { QueueName: name, Attributes: queueProperties.attributes() } }, options);
         const queue = this.sqs.findQueue(name);
         assertDefined(queue, `sim SQS queue ${name} after CloudFormation creation`);
         return queue;

package/dist/service/sqs/cfn/queue-policy/sim-cfn-sqs-queue-policy-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSqsQueue } from "../../queue/sim-sqs-queue.js";
 import type { SimSqs } from "../../sim-sqs.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnSqsQueuePolicyCreatorProperties {
     readonly sqs: SimSqs;
 }
@@ -24,7 +25,7 @@ export declare class SimCfnSqsQueuePolicyCreator {
      * queue policy has no existence of its own in SQS: it is the `Policy`
      * attribute of the queues it names.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSqsQueue>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSqsQueue>;
     /**
      * Set the policy on one queue and hand back the queue it was set on.
      */

package/dist/service/sqs/cfn/queue-policy/sim-cfn-sqs-queue-policy-creator.js

@@ -23,10 +23,10 @@ export class SimCfnSqsQueuePolicyCreator {
      * queue policy has no existence of its own in SQS: it is the `Policy`
      * attribute of the queues it names.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const queueUrls = this.queueUrlsForResource(resource, properties);
         const policy = jsonStringify(this.policyDocumentForResource(resource, properties));
-        const queues = await Promise.all(queueUrls.map(async (queueUrl) => this.policyApplied(queueUrl, policy)));
+        const queues = await Promise.all(queueUrls.map(async (queueUrl) => this.policyApplied(queueUrl, policy, options)));
         const first = queues[0];
         assertDefined(first, `sim SQS queue after CloudFormation queue policy creation for ${resource.logicalId}`);
         return first;
@@ -34,13 +34,13 @@ export class SimCfnSqsQueuePolicyCreator {
     /**
      * Set the policy on one queue and hand back the queue it was set on.
      */
-    async policyApplied(queueUrl, policy) {
+    async policyApplied(queueUrl, policy, options) {
         await this.sqs.setQueueAttributes({
             input: {
                 QueueUrl: queueUrl,
                 Attributes: { [simSqsQueuePolicyAttributeName]: policy },
             },
-        });
+        }, options);
         const parts = SimSqsQueueUrl.parse(queueUrl);
         assertDefined(parts, `queue URL ${queueUrl} SetQueueAttributes accepted`);
         const queue = this.sqs.findQueue(parts.name);

package/dist/service/sqs/cfn/sim-cfn-sqs-resource-deleter.d.ts

@@ -1,6 +1,7 @@
 import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSqs } from "../sim-sqs.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnSqsResourceDeleterProperties {
     readonly sqs: SimSqs;
 }
@@ -18,7 +19,7 @@ export declare class SimCfnSqsResourceDeleter {
     /**
      * Delete a simulated SQS resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<void>;
     private deleteQueue;
     /**
      * Take the policy back off every queue the Resource named.

package/dist/service/sqs/cfn/sim-cfn-sqs-resource-deleter.js

@@ -16,14 +16,14 @@ export class SimCfnSqsResourceDeleter {
     /**
      * Delete a simulated SQS resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource, properties) {
+    async delete(resourceTypeName, resource, properties, options) {
         switch (resourceTypeName) {
             case "Queue": {
-                await this.deleteQueue(resource);
+                await this.deleteQueue(resource, options);
                 return;
             }
             case "QueuePolicy": {
-                await this.clearQueuePolicy(properties);
+                await this.clearQueuePolicy(properties, options);
                 return;
             }
             default: {
@@ -31,10 +31,10 @@ export class SimCfnSqsResourceDeleter {
             }
         }
     }
-    async deleteQueue(resource) {
+    async deleteQueue(resource, options) {
         const queue = resource.simResource;
         assertDefined(queue, `sim SQS queue for CloudFormation Resource ${resource.logicalId}`);
-        await this.sqs.deleteQueue({ input: { QueueUrl: queue.url } });
+        await this.sqs.deleteQueue({ input: { QueueUrl: queue.url } }, options);
     }
     /**
      * Take the policy back off every queue the Resource named.
@@ -42,7 +42,7 @@ export class SimCfnSqsResourceDeleter {
      * The Resource points at only the first of them, so the queues are read from
      * the template the same way creation read them.
      */
-    async clearQueuePolicy(properties) {
+    async clearQueuePolicy(properties, options) {
         const queues = properties["Queues"];
         /* v8 ignore if -- creation refused the Resource without a Queues list */
         if (!Array.isArray(queues)) {
@@ -55,6 +55,6 @@ export class SimCfnSqsResourceDeleter {
                 QueueUrl: queueUrl,
                 Attributes: { [simSqsQueuePolicyAttributeName]: "" },
             },
-        })));
+        }, options)));
     }
 }

package/dist/service/sqs/cfn/sim-sqs-cfn-resource-factory.js

@@ -1,6 +1,7 @@
 import { SimCfnSqsQueueCreator } from "./queue/sim-cfn-sqs-queue-creator.js";
 import { SimCfnSqsQueuePolicyCreator } from "./queue-policy/sim-cfn-sqs-queue-policy-creator.js";
 import { SimCfnSqsResourceDeleter } from "./sim-cfn-sqs-resource-deleter.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated SQS resources.
  */
@@ -23,12 +24,13 @@ export class SimSqsCfnResourceFactory {
      * quietly treated as deployed.
      */
     async create(resourceTypeName, resource, context) {
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Queue": {
-                return await this.queueCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.queueCreator.create(resource, context.resolvedProperties ?? resource.properties, options);
             }
             case "QueuePolicy": {
-                return await this.queuePolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.queuePolicyCreator.create(resource, context.resolvedProperties ?? resource.properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim SQS CloudFormation Resource ${resourceTypeName}`);
@@ -39,6 +41,6 @@ export class SimSqsCfnResourceFactory {
      * Delete a simulated SQS resource created from a CloudFormation Resource.
      */
     async delete(resourceTypeName, resource, context) {
-        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties);
+        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/sqs/command/authorize/sim-sqs-authorizer.js

@@ -69,6 +69,7 @@ export class SimSqsAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: input.action,
                 resource: input.resource,
             });

package/dist/service/sqs/sim-sqs.d.ts

@@ -1,7 +1,7 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type * as simSqsCommands from "./command/sim-sqs-command.types.js";
 import type { SimSqsRequestOptions } from "./command/sim-sqs-request-options.js";
 import { SimSqsCfnResourceFactory } from "./cfn/sim-sqs-cfn-resource-factory.js";

package/dist/service/sqs/sim-sqs.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimSqsAuthorizer } from "./command/authorize/sim-sqs-authorizer.js";
 import { SimSqsChangeMessageVisibility } from "./command/message/sim-sqs-change-message-visibility.js";
 import { SimSqsDeleteMessageCommands } from "./command/message/sim-sqs-delete-message-commands.js";
@@ -39,7 +39,8 @@ export class SimSqs {
     sdkRouter = new SimSqsSdkCommandRouter(this);
     cfnFactory = new SimSqsCfnResourceFactory({ sqs: this });
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const access = new SimSqsQueueAccess({
             queues: this.queues,
             authorizer: new SimSqsAuthorizer({ iam }),

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimSsmParameter } from "../../parameter/sim-ssm-parameter.js";
 import type { SimSsm } from "../../sim-ssm.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnSsmParameterCreatorProperties {
     readonly ssm: SimSsm;
 }
@@ -25,6 +26,6 @@ export declare class SimCfnSsmParameterCreator {
     /**
      * Create a parameter from an AWS::SSM::Parameter Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimSsmParameter>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimSsmParameter>;
 }
 export {};

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-creator.js

@@ -22,7 +22,7 @@ export class SimCfnSsmParameterCreator {
     /**
      * Create a parameter from an AWS::SSM::Parameter Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const parameterProperties = new SimCfnSsmParameterProperties({
             resource,
             properties,
@@ -40,7 +40,7 @@ export class SimCfnSsmParameterCreator {
                 Policies: parameterProperties.policies(),
                 Tags: parameterProperties.tags(),
             },
-        });
+        }, options);
         const parameter = this.ssm.findParameter(name);
         assertDefined(parameter, `sim SSM parameter ${name} after CloudFormation creation`);
         return parameter;

package/dist/service/ssm/cfn/sim-cfn-ssm-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimSsm } from "../sim-ssm.js";
 interface SimSsmCfnResourceFactoryProperties {
     readonly ssm: SimSsm;
@@ -22,6 +22,6 @@ export declare class SimSsmCfnResourceFactory implements SimCfnServiceResourceFa
     /**
      * Delete a simulated SSM resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};