@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/cloudformation/resource/cfn/organizations/sim-organizations-cfn.js

@@ -0,0 +1,136 @@
+/**
+ * Refuse an attribute the AWS Resource reference does not list.
+ */
+function unknownAttribute(resourceType, attributeName) {
+    throw new Error(`AWS::Organizations::${resourceType} has no attribute ${attributeName}`);
+}
+/**
+ * CloudFormation-facing values for a simulated organization.
+ */
+export class SimOrganizationCfn {
+    organization;
+    constructor(organization) {
+        this.organization = organization;
+    }
+    /**
+     * AWS::Organizations::Organization Ref returns the organization id.
+     */
+    refValue() {
+        return this.organization.id;
+    }
+    /**
+     * The attributes the AWS Resource reference lists, less the management
+     * account email, which a simulation has no address for.
+     */
+    attributeValue(attributeName) {
+        const { organization } = this;
+        const values = new Map([
+            ["Id", organization.id],
+            [
+                "Arn",
+                `arn:aws:organizations::${organization.managementAccountId}:organization/${organization.id}`,
+            ],
+            ["RootId", organization.rootId],
+            ["ManagementAccountId", organization.managementAccountId],
+            [
+                "ManagementAccountArn",
+                `arn:aws:organizations::${organization.managementAccountId}:account/${organization.id}/${organization.managementAccountId}`,
+            ],
+        ]);
+        return (values.get(attributeName) ??
+            unknownAttribute("Organization", attributeName));
+    }
+}
+/**
+ * CloudFormation-facing values for a simulated organizational unit.
+ */
+export class SimOrganizationalUnitCfn {
+    unit;
+    constructor(unit) {
+        this.unit = unit;
+    }
+    /**
+     * AWS::Organizations::OrganizationalUnit Ref returns the unit id.
+     */
+    refValue() {
+        return this.unit.id;
+    }
+    /**
+     * Id, Arn and Name, as the AWS Resource reference lists.
+     */
+    attributeValue(attributeName) {
+        const { unit } = this;
+        const values = new Map([
+            ["Id", unit.id],
+            ["Arn", `arn:aws:organizations::organizational-unit/${unit.id}`],
+            ["Name", unit.name],
+        ]);
+        return (values.get(attributeName) ??
+            unknownAttribute("OrganizationalUnit", attributeName));
+    }
+}
+/**
+ * CloudFormation-facing values for an Account a template put in the
+ * organization.
+ */
+export class SimOrganizationsAccountCfn {
+    account;
+    constructor(account) {
+        this.account = account;
+    }
+    /**
+     * AWS::Organizations::Account Ref returns the Account id.
+     */
+    refValue() {
+        return this.account.accountId;
+    }
+    /**
+     * The attributes the AWS Resource reference lists.
+     */
+    attributeValue(attributeName) {
+        const { account } = this;
+        const values = new Map([
+            ["AccountId", account.accountId],
+            [
+                "Arn",
+                `arn:aws:organizations::${account.accountId}:account/${account.accountId}`,
+            ],
+            ["Email", account.email],
+            ["AccountName", account.accountName],
+            ["JoinedMethod", "CREATED"],
+            ["JoinedTimestamp", account.joinedTimestamp.toISOString()],
+            ["Status", "ACTIVE"],
+        ]);
+        return (values.get(attributeName) ?? unknownAttribute("Account", attributeName));
+    }
+}
+/**
+ * CloudFormation-facing values for a simulated service control policy.
+ */
+export class SimOrganizationsPolicyCfn {
+    policy;
+    constructor(policy) {
+        this.policy = policy;
+    }
+    /**
+     * AWS::Organizations::Policy Ref returns the policy id.
+     */
+    refValue() {
+        return this.policy.id;
+    }
+    /**
+     * Id, Arn and AwsManaged, as the AWS Resource reference lists.
+     */
+    attributeValue(attributeName) {
+        const { policy } = this;
+        const values = new Map([
+            ["Id", policy.id],
+            [
+                "Arn",
+                `arn:aws:organizations::policy/service_control_policy/${policy.id}`,
+            ],
+            ["AwsManaged", false],
+        ]);
+        return (values.get(attributeName) ?? unknownAttribute("Policy", attributeName));
+    }
+}

package/dist/service/cloudformation/resource/cfn/scheduler/sim-scheduler-cfn-value-adapter.js

@@ -1,3 +1,4 @@
+import { SimSchedulerScheduleGroup } from "../../../../scheduler/group/sim-scheduler-schedule-group.js";
 import { SimSchedulerSchedule } from "../../../../scheduler/schedule/sim-scheduler-schedule.js";
 /**
  * CloudFormation-facing values for a simulated schedule.
@@ -23,6 +24,51 @@ class SimSchedulerScheduleCfn {
         throw new Error(`Unsupported AWS::Scheduler::Schedule attribute ${attributeName}`);
     }
 }
+/**
+ * CloudFormation-facing values for a simulated schedule group.
+ *
+ * `Arn` is the one worth having. An identity policy granting `scheduler:`
+ * actions on the group names it, and so does the `aws:SourceArn` condition AWS
+ * recommends in a schedule execution role's trust policy.
+ */
+class SimSchedulerScheduleGroupCfn {
+    group;
+    constructor(properties) {
+        this.group = properties.group;
+    }
+    /**
+     * AWS::Scheduler::ScheduleGroup Ref returns the group's name.
+     */
+    refValue() {
+        return this.group.name;
+    }
+    /**
+     * AWS::Scheduler::ScheduleGroup attributes.
+     *
+     * The two dates come back as ISO strings. A template value is JSON, so there
+     * is nowhere for a `Date` to go, and every other date CloudFormation hands
+     * back is a string too.
+     */
+    attributeValue(attributeName) {
+        switch (attributeName) {
+            case "Arn": {
+                return this.group.arn;
+            }
+            case "State": {
+                return this.group.state;
+            }
+            case "CreationDate": {
+                return this.group.creationDate.toISOString();
+            }
+            case "LastModificationDate": {
+                return this.group.lastModificationDate.toISOString();
+            }
+            default: {
+                throw new Error(`Unsupported AWS::Scheduler::ScheduleGroup attribute ${attributeName}`);
+            }
+        }
+    }
+}
 /**
  * The CloudFormation-facing value adapter for a simulated Scheduler Resource.
  */
@@ -31,5 +77,9 @@ export function schedulerValueAdapter(properties) {
         properties.simResource instanceof SimSchedulerSchedule) {
         return new SimSchedulerScheduleCfn({ schedule: properties.simResource });
     }
+    if (properties.type === "AWS::Scheduler::ScheduleGroup" &&
+        properties.simResource instanceof SimSchedulerScheduleGroup) {
+        return new SimSchedulerScheduleGroupCfn({ group: properties.simResource });
+    }
     return undefined;
 }

package/dist/service/cloudformation/resource/cfn/sim-cfn-service-value-adapters.js

@@ -18,6 +18,7 @@ import { iamValueAdapter } from "./iam/sim-iam-cfn-value-adapter.js";
 import { kinesisValueAdapter } from "./kinesis/sim-kinesis-cfn-value-adapter.js";
 import { kmsValueAdapter } from "./kms/sim-kms-cfn-value-adapter.js";
 import { lambdaValueAdapter } from "./lambda/sim-lambda-cfn-value-adapter.js";
+import { organizationsValueAdapter } from "./organizations/sim-organizations-cfn-value-adapter.js";
 import { personalizeValueAdapter } from "./personalize/sim-personalize-cfn-value-adapter.js";
 import { route53ValueAdapter } from "./route53/sim-route53-cfn-value-adapter.js";
 import { s3ValueAdapter } from "./s3/sim-s3-cfn-value-adapter.js";
@@ -60,6 +61,7 @@ export const simCfnServiceValueAdapters = [
     kinesisValueAdapter,
     kmsValueAdapter,
     lambdaValueAdapter,
+    organizationsValueAdapter,
     personalizeValueAdapter,
     route53ValueAdapter,
     s3ValueAdapter,

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-factories.js

@@ -1,4 +1,5 @@
 import { SimCfnCfnResourceFactory } from "../../factory/sim-cfn-cfn-resource-factory.js";
+import { SimOrganizationsCfnResourceFactory } from "../../../../organizations/cfn/sim-organizations-cfn-resource-factory.js";
 /**
  * Certificates arrive under two service names. `AWS::CertificateManager::*` is
  * the real one, and `AWS::ACM::*` is the shorthand some templates use, so both
@@ -34,6 +35,12 @@ export const simCfnServiceResourceFactories = new Map([
         "CloudFormation",
         () => new SimCfnCfnResourceFactory(),
     ],
+    // An organization spans Accounts, so this factory reads the one on the
+    // creation context rather than the Account and Region scope it deploys into.
+    [
+        "Organizations",
+        () => new SimOrganizationsCfnResourceFactory(),
+    ],
     [
         "CloudFront",
         (scopedAws) => scopedAws.cloudFront().cfnResourceFactory(),

package/dist/service/cloudformation/resource/sim-cfn-resource.type.d.ts

@@ -1,4 +1,5 @@
 import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import type { BackgroundScheduler } from "../../../util/background/background.js";
 import type { SimCfnServiceResourceFactory } from "./factory/sim-cfn-resource-factory.type.js";
@@ -50,6 +51,15 @@ export interface SimCloudFormationResourceCreateContext {
     readonly resolvedProperties?: SimCfnTemplateValueRecord | undefined;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
+    /**
+     * The principal the deployment runs as, which every service command creating
+     * a Resource is authorized as.
+     *
+     * Left out unless the deployment named one, which leaves each service to its
+     * own omitted-caller default: the Account root, as it is everywhere else in
+     * the simulation.
+     */
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * What a service is given to delete a Resource it created.
@@ -64,4 +74,6 @@ export interface SimCloudFormationResourceDeleteContext {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly resolvedProperties?: SimCfnTemplateValueRecord | undefined;
+    /** The principal the teardown runs as, as creation carries it. */
+    readonly caller?: SimAwsCaller | undefined;
 }

package/dist/service/cloudformation/sim-cloudformation.d.ts

@@ -12,7 +12,7 @@ import type { SimCloudFormationDeployTemplateFileProperties as SimCloudFormation
 import type { SimCloudFormationDeployCdkOutProperties } from "./deploy/sim-cfn-cdk-out-deployer.js";
 import type { SimSdkCommandRouter } from "../../sdk/index.js";
 import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 /**
  * Options accepted by simulated CloudFormation command operations.
  */

package/dist/service/cloudformation/sim-cloudformation.js

@@ -8,7 +8,7 @@ import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-s
 import { SimCfnExports } from "./export/sim-cfn-exports.js";
 import { SimCloudFormationSdkCommandRouter } from "./sdk/sim-cloudformation-sdk-command-router.js";
 import { SimCloudFormationAuthorization } from "./authorize/sim-cloudformation-authorization.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * Simulated CloudFormation in one AWS Account and Region.
  */
@@ -22,7 +22,8 @@ export class SimCloudFormation {
     sdkRouter = new SimCloudFormationSdkCommandRouter(this);
     authorization;
     constructor(properties) {
-        const { simAws, accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background, } = properties;
+        const { simAws, accountRegionScope = simAwsAccountRegionScopeFactory.make(), background, } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         this.simAws = simAws;
         this.background = background;
         this.accountRegionScope = accountRegionScope;

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-batch-creator.d.ts

@@ -1,4 +1,5 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnBinding } from "../../bind/sim-cfn-binding.js";
 import type { SimCdkOutContext } from "../../cdk/sim-cdk-out-context.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
@@ -7,6 +8,7 @@ interface SimCfnStackResourceBatchCreatorProperties {
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * Creates one dependency-ready batch of Stack Resources.
@@ -27,6 +29,7 @@ export declare class SimCfnStackResourceBatchCreator {
     private readonly resources;
     private readonly cdkOutContext;
     private readonly bindings;
+    private readonly caller;
     constructor(properties: SimCfnStackResourceBatchCreatorProperties);
     /**
      * Create the supplied Resources concurrently.

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-batch-creator.js

@@ -17,12 +17,14 @@ export class SimCfnStackResourceBatchCreator {
     resources;
     cdkOutContext;
     bindings;
+    caller;
     constructor(properties) {
-        const { simAws, resources, cdkOutContext, bindings } = properties;
+        const { simAws, resources, cdkOutContext, bindings, caller } = properties;
         this.simAws = simAws;
         this.resources = resources;
         this.cdkOutContext = cdkOutContext;
         this.bindings = bindings;
+        this.caller = caller;
     }
     /**
      * Create the supplied Resources concurrently.
@@ -37,6 +39,7 @@ export class SimCfnStackResourceBatchCreator {
                 resources: this.resources,
                 cdkOutContext: this.cdkOutContext,
                 bindings: this.bindings,
+                caller: this.caller,
             });
         }));
     }

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-creator.d.ts

@@ -1,4 +1,5 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
 import type { SimCdkOutContext } from "../../cdk/sim-cdk-out-context.js";
 import type { SimCfnBinding } from "../../bind/sim-cfn-binding.js";
@@ -8,6 +9,7 @@ interface SimCfnStackResourceCreatorProperties {
     readonly stackName: string;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * Orchestrates dependency-ordered creation of a Stack's simulated Resources.

package/dist/service/cloudformation/stack/deploy/sim-cfn-stack-resource-creator.js

@@ -21,7 +21,7 @@ export class SimCfnStackResourceCreator {
     stackName;
     batchCreator;
     constructor(properties) {
-        const { simAws, resources, stackName, cdkOutContext, bindings } = properties;
+        const { simAws, resources, stackName, cdkOutContext, bindings, caller } = properties;
         this.resources = resources;
         this.stackName = stackName;
         this.batchCreator = new SimCfnStackResourceBatchCreator({
@@ -29,6 +29,7 @@ export class SimCfnStackResourceCreator {
             resources,
             cdkOutContext,
             bindings,
+            caller,
         });
     }
     /**

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.d.ts

@@ -1,5 +1,6 @@
 import type { BackgroundScheduler } from "../../../util/background/background.js";
 import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimCdkOutContext } from "../cdk/sim-cdk-out-context.js";
@@ -19,6 +20,11 @@ interface SimCfnStackResourceOperationsProperties {
     readonly stackName: SimCloudFormationStackName;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
+    /**
+     * The principal the Stack's Resource work is authorized as. An omitted
+     * caller leaves each service to decide the request as the Account root.
+     */
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * What a Stack can ask simulated AWS to do with its Resources.
@@ -39,16 +45,25 @@ export declare class SimCfnStackResourceOperations {
     private readonly stackName;
     private readonly bindings;
     private cdkOutContext;
+    private caller;
     constructor(properties: SimCfnStackResourceOperationsProperties);
     /**
-     * Read Resources from a different CDK cloud assembly from now on.
+     * Take on what an update brings with it, for this and every later operation.
      *
      * A synthesis writes the template and the assets manifest beside it together,
      * so a Stack updated from a re-synthesized template needs the manifest that
      * came with it. Keeping the one the Stack was deployed from would look up the
      * asset a replaced Resource names in a manifest written before it existed.
+     *
+     * An update naming a caller runs as that one, and the Stack is torn down as
+     * it afterwards. An update that names none keeps the deployment's caller, so
+     * a Stack updated from a plain template path goes on running as whoever
+     * deployed it.
      */
-    useCdkOutContext(cdkOutContext: SimCdkOutContext): void;
+    useUpdate(properties: {
+        readonly cdkOutContext?: SimCdkOutContext | undefined;
+        readonly caller?: SimAwsCaller | undefined;
+    }): void;
     /**
      * Create every Resource in the given Stack Resource map.
      */

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.js

@@ -21,24 +21,32 @@ export class SimCfnStackResourceOperations {
     stackName;
     bindings;
     cdkOutContext;
+    caller;
     constructor(properties) {
-        const { simAws, accountRegionScope, stackName, cdkOutContext, bindings } = properties;
+        const { simAws, accountRegionScope, stackName, cdkOutContext, bindings, caller, } = properties;
         this.simAws = simAws;
         this.accountRegionScope = accountRegionScope;
         this.stackName = stackName;
         this.cdkOutContext = cdkOutContext;
         this.bindings = bindings;
+        this.caller = caller;
     }
     /**
-     * Read Resources from a different CDK cloud assembly from now on.
+     * Take on what an update brings with it, for this and every later operation.
      *
      * A synthesis writes the template and the assets manifest beside it together,
      * so a Stack updated from a re-synthesized template needs the manifest that
      * came with it. Keeping the one the Stack was deployed from would look up the
      * asset a replaced Resource names in a manifest written before it existed.
+     *
+     * An update naming a caller runs as that one, and the Stack is torn down as
+     * it afterwards. An update that names none keeps the deployment's caller, so
+     * a Stack updated from a plain template path goes on running as whoever
+     * deployed it.
      */
-    useCdkOutContext(cdkOutContext) {
-        this.cdkOutContext = cdkOutContext;
+    useUpdate(properties) {
+        this.cdkOutContext = properties.cdkOutContext ?? this.cdkOutContext;
+        this.caller = properties.caller ?? this.caller;
     }
     /**
      * Create every Resource in the given Stack Resource map.
@@ -87,6 +95,7 @@ export class SimCfnStackResourceOperations {
             accountRegionScope: this.accountRegionScope,
             stackName: this.stackName,
             cdkOutContext: this.cdkOutContext,
+            caller: this.caller,
         }).publish();
     }
     creator(resources) {
@@ -96,6 +105,7 @@ export class SimCfnStackResourceOperations {
             stackName: this.stackName,
             cdkOutContext: this.cdkOutContext,
             bindings: this.bindings,
+            caller: this.caller,
         });
     }
     deleter(resources) {
@@ -103,6 +113,7 @@ export class SimCfnStackResourceOperations {
             simAws: this.simAws,
             resources,
             stackName: this.stackName,
+            caller: this.caller,
         });
     }
 }

package/dist/service/cloudformation/stack/sim-cfn-stack.js

@@ -38,7 +38,7 @@ export class SimCfnStack {
     stackOutputs;
     cfnTemplate;
     constructor(properties) {
-        const { simAws, accountRegionScope, background, stackName, template, cdkOutContext, bindings, exports, } = properties;
+        const { simAws, accountRegionScope, background, stackName, template, cdkOutContext, bindings, caller, exports, } = properties;
         this.background = background;
         this.stackName = stackName;
         this.stackOutputs = new SimCfnStackOutputs({ stackName, exports });
@@ -60,6 +60,7 @@ export class SimCfnStack {
             stackName,
             cdkOutContext,
             bindings,
+            caller,
         });
         this.lifecycle = new SimCfnStackDeploymentLifecycle({
             background,
@@ -128,10 +129,9 @@ export class SimCfnStack {
         });
         updater.assertHasChanges();
         // Only once the update is going ahead, so a refused update leaves the Stack
-        // reading the cloud assembly it was deployed from.
-        if (properties.cdkOutContext !== undefined) {
-            this.operations.useCdkOutContext(properties.cdkOutContext);
-        }
+        // reading the cloud assembly it was deployed from and running as whoever
+        // deployed it.
+        this.operations.useUpdate(properties);
         this.cfnTemplate = template;
         this.template = template.template;
         await this.updating.update(async () => {

package/dist/service/cloudformation/stack/sim-cfn-stack.type.d.ts

@@ -1,4 +1,5 @@
 import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import type { Brand } from "../../../util/brand.type.js";
 import type { BackgroundScheduler } from "../../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
@@ -16,6 +17,11 @@ export interface SimCfnStackUpdateProperties {
      * describes the assembly the previous template came from.
      */
     readonly cdkOutContext?: SimCdkOutContext | undefined;
+    /**
+     * The principal to apply the new template as, for an update that names one.
+     * The Stack goes on using it, as it does the cloud assembly.
+     */
+    readonly caller?: SimAwsCaller | undefined;
 }
 export interface SimCloudFormationStackProperties {
     readonly simAws: SimAws;
@@ -25,6 +31,12 @@ export interface SimCloudFormationStackProperties {
     readonly template: SimCfnTemplate;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
+    /**
+     * The principal this Stack's Resources are created, updated and deleted as.
+     * An omitted caller is the Account root, as it is everywhere else in the
+     * simulation.
+     */
+    readonly caller?: SimAwsCaller | undefined;
     /**
      * The export names published in the Account and Region this Stack deploys
      * into. This Stack publishes its own Outputs here and reads the ones its

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-batch-deleter.d.ts

@@ -1,8 +1,10 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
 interface SimCfnStackResourceBatchDeleterProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * Deletes one batch of Stack Resources nothing still depends on.
@@ -17,6 +19,7 @@ interface SimCfnStackResourceBatchDeleterProperties {
 export declare class SimCfnStackResourceBatchDeleter {
     private readonly simAws;
     private readonly resources;
+    private readonly caller;
     constructor(properties: SimCfnStackResourceBatchDeleterProperties);
     /**
      * Delete the supplied Resources concurrently.

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-batch-deleter.js

@@ -11,9 +11,11 @@
 export class SimCfnStackResourceBatchDeleter {
     simAws;
     resources;
+    caller;
     constructor(properties) {
         this.simAws = properties.simAws;
         this.resources = properties.resources;
+        this.caller = properties.caller;
     }
     /**
      * Delete the supplied Resources concurrently.
@@ -25,6 +27,7 @@ export class SimCfnStackResourceBatchDeleter {
             await resource.delete({
                 simAws: this.simAws,
                 resources: this.resources,
+                caller: this.caller,
             });
         }));
     }

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-deleter.d.ts

@@ -1,9 +1,11 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
 interface SimCfnStackResourceDeleterProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly stackName: string;
+    readonly caller?: SimAwsCaller | undefined;
 }
 /**
  * Orchestrates reverse-dependency-ordered deletion of a Stack's Resources.

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-deleter.js

@@ -20,12 +20,13 @@ export class SimCfnStackResourceDeleter {
     stackName;
     batchDeleter;
     constructor(properties) {
-        const { simAws, resources, stackName } = properties;
+        const { simAws, resources, stackName, caller } = properties;
         this.resources = resources;
         this.stackName = stackName;
         this.batchDeleter = new SimCfnStackResourceBatchDeleter({
             simAws,
             resources,
+            caller,
         });
     }
     /**

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 import type { SimCloudFrontFunction } from "../../cff/sim-cloudfront-function.js";
+import { type SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfFunctionCreatorProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -33,5 +34,9 @@ export declare class SimCfnCffCreator {
      * executable handler while preserving CloudFormation-style Resource creation.
      */
     create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, context?: SimCloudFormationResourceCreateContext): Promise<SimCloudFrontFunction>;
+    /**
+     * Delete the Function an AWS::CloudFront::Function Resource created.
+     */
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-creator.js

@@ -1,5 +1,6 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCfnCffCreateInputBuilder } from "./sim-cfn-cff-create-input-builder.js";
+import { simCfnResourceCallerOptions, } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Creates simulated CloudFront Functions for AWS::CloudFront::Function
  * CloudFormation Resources.
@@ -36,13 +37,19 @@ export class SimCfnCffCreator {
             bindings: context?.bindings,
         });
         const functionInput = inputBuilder.build();
-        const output = await this.cloudFront.createFunction({
-            input: functionInput,
-        });
+        const output = await this.cloudFront.createFunction({ input: functionInput }, simCfnResourceCallerOptions(context?.caller));
         const createdFunctionName = output.FunctionSummary
             .Name;
         const cloudFrontFunction = this.cloudFront.getCloudFrontFunctionByName(createdFunctionName);
         assertDefined(cloudFrontFunction, `Expected sim CloudFront Function ${createdFunctionName} to exist after CloudFormation creation`);
         return cloudFrontFunction;
     }
+    /**
+     * Delete the Function an AWS::CloudFront::Function Resource created.
+     */
+    async delete(resource, options) {
+        const cloudFrontFunction = resource.simResource;
+        assertDefined(cloudFrontFunction, `sim CloudFront Function for CloudFormation Resource ${resource.logicalId}`);
+        await this.cloudFront.deleteFunction({ input: { Name: cloudFrontFunction.name } }, options);
+    }
 }