@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -3,6 +3,7 @@ import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-valida
 import { simCfnCfDistroWithRunnableEdgeAssociations } from "./sim-cfn-cf-distro-edge-associations.js";
 import { simCfnCfDistroWithHeldResponseHeadersPolicies } from "./sim-cfn-cf-distro-response-headers-policy.js";
 import { simCfnCfDistroWithoutAbsentWebAcl } from "./sim-cfn-cf-distro-web-acl.js";
+import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Creates simulated CloudFront Distributions from CloudFormation Resources.
  *
@@ -35,7 +36,7 @@ export class SimCfnCfDistroCreator {
             input: {
                 DistributionConfig: deployableConfig(resource, validator.validate(), context.simAws, this.cloudFront),
             },
-        });
+        }, simCfnResourceCallerOptions(context.caller));
         const distributionId = output.Distribution?.Id;
         assertDefined(distributionId, `AWS::CloudFront::Distribution ${resource.logicalId} created Distribution Id`);
         const distribution = this.cloudFront.getSimDistributionById(distributionId);

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-deleter.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfDistroDeleterProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -22,7 +23,7 @@ export declare class SimCfnCfDistroDeleter {
     /**
      * Disable and then delete the Distribution a Resource created.
      */
-    delete(resource: SimCfnResource): Promise<void>;
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
     private disable;
 }
 export {};

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-deleter.js

@@ -20,15 +20,13 @@ export class SimCfnCfDistroDeleter {
     /**
      * Disable and then delete the Distribution a Resource created.
      */
-    async delete(resource) {
+    async delete(resource, options) {
         const distribution = resource.simResource;
         assertDefined(distribution, `sim CloudFront Distribution for CloudFormation Resource ${resource.logicalId}`);
-        await this.disable(distribution);
-        await this.cloudFront.deleteDistribution({
-            input: { Id: distribution.distributionId },
-        });
+        await this.disable(distribution, options);
+        await this.cloudFront.deleteDistribution({ input: { Id: distribution.distributionId } }, options);
     }
-    async disable(distribution) {
+    async disable(distribution, options) {
         const { distributionConfig } = distribution;
         assertDefined(distributionConfig, `sim CloudFront Distribution ${distribution.distributionId} configuration to disable`);
         await this.cloudFront.updateDistribution({
@@ -36,6 +34,6 @@ export class SimCfnCfDistroDeleter {
                 Id: distribution.distributionId,
                 DistributionConfig: { ...distributionConfig, Enabled: false },
             },
-        });
+        }, options);
     }
 }

package/dist/service/cloudfront/cfn/key-value-store/sim-cfn-cf-kvs-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudFrontKeyValueStore } from "../../key-value-store/sim-cf-key-value-store.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfKeyValueStoreCreatorProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnCfKeyValueStoreCreator {
     /**
      * Create the key value store one Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCloudFrontKeyValueStore>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCloudFrontKeyValueStore>;
     /**
      * Remove a key value store created from a Resource.
      *
@@ -27,6 +28,6 @@ export declare class SimCfnCfKeyValueStoreCreator {
      * anything written to it since will have moved the one creation returned.
      * Tearing a Stack down is not the place to make a caller thread that through.
      */
-    delete(resource: SimCfnResource): Promise<void>;
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudfront/cfn/key-value-store/sim-cfn-cf-kvs-creator.js

@@ -16,7 +16,7 @@ export class SimCfnCfKeyValueStoreCreator {
     /**
      * Create the key value store one Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const config = new SimCfnCfKeyValueStoreConfigReader({
             resource,
             properties,
@@ -26,7 +26,7 @@ export class SimCfnCfKeyValueStoreCreator {
                 Name: config.name,
                 ...(config.comment !== undefined && { Comment: config.comment }),
             },
-        });
+        }, options);
         const store = this.cloudFront
             .keyValueStores()
             .byId(created.KeyValueStore.Id);
@@ -41,13 +41,13 @@ export class SimCfnCfKeyValueStoreCreator {
      * anything written to it since will have moved the one creation returned.
      * Tearing a Stack down is not the place to make a caller thread that through.
      */
-    async delete(resource) {
+    async delete(resource, options) {
         const store = resource.simResource;
         if (store === undefined) {
             return;
         }
-        await this.cloudFront.keyValueStores().deleteKeyValueStore({
-            input: { Name: store.name, IfMatch: store.resourceETag },
-        });
+        await this.cloudFront
+            .keyValueStores()
+            .deleteKeyValueStore({ input: { Name: store.name, IfMatch: store.resourceETag } }, options);
     }
 }

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.d.ts

@@ -1,11 +1,10 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimCloudFront } from "../sim-cloudfront.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 /**
  * CloudFormation Resource factory for simulated CloudFront resources.
  */
 export declare class SimCloudFrontCloudFormationResourceFactory implements SimCfnServiceResourceFactory {
-    private readonly cloudFront;
     private readonly distroCreator;
     private readonly functionCreator;
     private readonly distroDeleter;
@@ -21,6 +20,5 @@ export declare class SimCloudFrontCloudFormationResourceFactory implements SimCf
      * Delete a simulated CloudFront resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
-    private deleteFunction;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js

@@ -1,15 +1,14 @@
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnCfDistroCreator } from "./distro/sim-cfn-cf-distro-creator.js";
 import { SimCfnCffCreator } from "./cff/sim-cfn-cff-creator.js";
 import { SimCfnCfDistroDeleter } from "./distro/sim-cfn-cf-distro-deleter.js";
 import { SimCfnCfResponseHeadersPolicyCreator } from "./response-headers-policy/sim-cfn-cf-rh-policy-creator.js";
 import { SimCfnCfOriginAccessControlCreator } from "./origin-access-control/sim-cfn-cf-oac-creator.js";
 import { SimCfnCfKeyValueStoreCreator } from "./key-value-store/sim-cfn-cf-kvs-creator.js";
-import { assertDefined } from "../../../util/type-guard/defined.js";
 /**
  * CloudFormation Resource factory for simulated CloudFront resources.
  */
 export class SimCloudFrontCloudFormationResourceFactory {
-    cloudFront;
     distroCreator;
     functionCreator;
     distroDeleter;
@@ -17,7 +16,6 @@ export class SimCloudFrontCloudFormationResourceFactory {
     originAccessControlCreator;
     keyValueStoreCreator;
     constructor(cloudFront) {
-        this.cloudFront = cloudFront;
         this.distroCreator = new SimCfnCfDistroCreator({ cloudFront });
         this.functionCreator = new SimCfnCffCreator({ cloudFront });
         this.distroDeleter = new SimCfnCfDistroDeleter({ cloudFront });
@@ -49,7 +47,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
                 return this.originAccessControlCreator.create(resource, properties);
             }
             case "KeyValueStore": {
-                return await this.keyValueStoreCreator.create(resource, properties);
+                return await this.keyValueStoreCreator.create(resource, properties, simCfnResourceCallerOptions(context.caller));
             }
             default: {
                 throw new Error(`Unsupported sim CloudFront CloudFormation Resource ${resourceTypeName}`);
@@ -60,14 +58,15 @@ export class SimCloudFrontCloudFormationResourceFactory {
      * Delete a simulated CloudFront resource created from a CloudFormation
      * Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, context) {
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Distribution": {
-                await this.distroDeleter.delete(resource);
+                await this.distroDeleter.delete(resource, options);
                 return;
             }
             case "Function": {
-                await this.deleteFunction(resource);
+                await this.functionCreator.delete(resource, options);
                 return;
             }
             case "ResponseHeadersPolicy": {
@@ -79,7 +78,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
                 return;
             }
             case "KeyValueStore": {
-                await this.keyValueStoreCreator.delete(resource);
+                await this.keyValueStoreCreator.delete(resource, options);
                 return;
             }
             default: {
@@ -87,11 +86,4 @@ export class SimCloudFrontCloudFormationResourceFactory {
             }
         }
     }
-    async deleteFunction(resource) {
-        const cloudFrontFunction = resource.simResource;
-        assertDefined(cloudFrontFunction, `sim CloudFront Function for CloudFormation Resource ${resource.logicalId}`);
-        await this.cloudFront.deleteFunction({
-            input: { Name: cloudFrontFunction.name },
-        });
-    }
 }

package/dist/service/cloudfront/command/create-distribution/create-distribution-authorizer.js

@@ -28,6 +28,7 @@ export class CreateDistributionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: CreateDistributionAuthorizer.action,
                 resource: CreateDistributionAuthorizer.resource,
             });

package/dist/service/cloudfront/command/create-function/create-function-authorizer.js

@@ -26,6 +26,7 @@ export class CreateFunctionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: CreateFunctionAuthorizer.action,
                 resource,
             });

package/dist/service/cloudfront/command/delete-distribution/delete-distribution-authorizer.js

@@ -31,6 +31,7 @@ export class DeleteDistributionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteDistributionAuthorizer.action,
                 resource,
             });

package/dist/service/cloudfront/command/delete-function/delete-function-authorizer.js

@@ -27,6 +27,7 @@ export class DeleteFunctionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: DeleteFunctionAuthorizer.action,
                 resource,
             });

package/dist/service/cloudfront/command/get-distribution/get-distribution-authorizer.js

@@ -27,6 +27,7 @@ export class GetDistributionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: GetDistributionAuthorizer.action,
                 resource,
             });

package/dist/service/cloudfront/command/update-distribution/update-distribution-authorizer.js

@@ -27,6 +27,7 @@ export class UpdateDistributionAuthorizer {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action: UpdateDistributionAuthorizer.action,
                 resource,
             });

package/dist/service/cloudfront/edge/sim-aws-cf-edge-functions.js

@@ -1,4 +1,5 @@
-import { assumeSimServiceRole, simServiceRoleTarget, } from "../../sts/service-role/sim-service-role.js";
+import { assumeSimServiceRole, } from "../../sts/service-role/sim-service-role.js";
+import { simServiceRoleTarget } from "../../sts/service-role/sim-service-role-target.js";
 import { SimCloudFrontInvalidLambdaFunctionAssociation } from "../error/sim-cloudfront.error.js";
 import { edgeFunctionArnParts } from "./sim-cf-edge-function-arn.js";
 import { findSimCfEdgeFunctionVersion } from "./sim-cf-edge-function-version.js";
@@ -65,7 +66,7 @@ export class SimAwsCfEdgeFunctions {
             target: simServiceRoleTarget(target.simFunction.roleArn),
             servicePrincipal: simLambdaEdgeServicePrincipal,
             sessionName,
-            iam: this.simAws.accountRegionScope(accountId, regionName).iam(),
+            scope: this.simAws.accountRegionScope(accountId, regionName),
             refusals: executionRoleRefusals(functionArn),
         });
     }

package/dist/service/cloudfront/edge/sim-cf-edge-association-auth-z.js

@@ -18,6 +18,7 @@ export function authorizeEdgeAssociation(iam, functionArn, caller) {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource: functionArn,
             });

package/dist/service/cloudfront/key-value-store/sim-cf-key-value-store-access.js

@@ -25,6 +25,7 @@ export class SimCfKeyValueStoreAccess {
         if (decision.isDenied) {
             throw new SimIamAccessDenied({
                 principal: decision.caller.principal,
+                reason: decision.denialReason,
                 action,
                 resource,
             });

package/dist/service/cloudfront/sim-cloudfront-commands.d.ts

@@ -3,7 +3,7 @@ import type { SimAcmRegistry } from "../acm/registry/sim-acm-registry.js";
 import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimCreateDistributionCommand, SimCreateDistributionCommandOutput } from "./command/create-distribution/create-distribution.command.js";
 import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
 import { type SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";

package/dist/service/cloudfront/sim-cloudfront-commands.js

@@ -1,5 +1,5 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamGlobalServiceRegion, simIamInRegion, } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { CreateDistributionCommandHandler } from "./command/create-distribution/create-distribution.handler.js";
 import { CreateFunctionCommandHandler, } from "./command/create-function/create-function.handler.js";
 import { DeleteDistributionCommandHandler } from "./command/delete-distribution/delete-distribution.handler.js";
@@ -41,7 +41,10 @@ export class SimCloudFrontCommands {
     functionState;
     configurationState;
     constructor(properties) {
-        const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, iam = new SimIamAllowAllAuth(), acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
+        const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
+        // CloudFront is global rather than Region-scoped, so its requests are made
+        // in the Region its one endpoint is in.
+        const iam = simIamInRegion(properties.iam, simIamGlobalServiceRegion);
         const keyValueStores = new SimCloudFrontKeyValueStoreRegistry();
         this.edgeFunctions = edgeFunctions;
         this.distributionState = {

package/dist/service/cloudwatch/cfn/alarm/sim-cfn-alarm-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudWatchAlarm } from "../../alarm/sim-cloudwatch-alarm.js";
 import type { SimCloudWatch } from "../../sim-cloudwatch.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnAlarmCreatorProperties {
     readonly cloudWatch: SimCloudWatch;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnAlarmCreator {
     /**
      * Create an alarm from an AWS::CloudWatch::Alarm Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCloudWatchAlarm>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCloudWatchAlarm>;
     /**
      * Delete an alarm created from an AWS::CloudWatch::Alarm Resource.
      *
@@ -27,6 +28,6 @@ export declare class SimCfnAlarmCreator {
      * removing it, which is what lets a torn-down stack settle rather than
      * leaving an alarm waking up to read a metric nothing watches.
      */
-    delete(alarm: SimCloudWatchAlarm): Promise<void>;
+    delete(alarm: SimCloudWatchAlarm, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudwatch/cfn/alarm/sim-cfn-alarm-creator.js

@@ -16,11 +16,11 @@ export class SimCfnAlarmCreator {
     /**
      * Create an alarm from an AWS::CloudWatch::Alarm Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const alarmProperties = new SimCfnAlarmProperties({ resource, properties });
         const alarmName = alarmProperties.alarmName();
         alarmProperties.recordIgnoredProperties();
-        await this.#cloudWatch.putMetricAlarm({ input: alarmProperties.input() });
+        await this.#cloudWatch.putMetricAlarm({ input: alarmProperties.input() }, options);
         const alarm = this.#cloudWatch.findAlarm(alarmName);
         assertDefined(alarm, `sim CloudWatch alarm ${alarmName} after CloudFormation creation`);
         return alarm;
@@ -32,9 +32,7 @@ export class SimCfnAlarmCreator {
      * removing it, which is what lets a torn-down stack settle rather than
      * leaving an alarm waking up to read a metric nothing watches.
      */
-    async delete(alarm) {
-        await this.#cloudWatch.deleteAlarms({
-            input: { AlarmNames: [alarm.name] },
-        });
+    async delete(alarm, options) {
+        await this.#cloudWatch.deleteAlarms({ input: { AlarmNames: [alarm.name] } }, options);
     }
 }

package/dist/service/cloudwatch/cfn/sim-cloudwatch-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCloudWatch } from "../sim-cloudwatch.js";
 interface SimCloudWatchCfnResourceFactoryProperties {
     readonly cloudWatch: SimCloudWatch;
@@ -23,6 +23,6 @@ export declare class SimCloudWatchCfnResourceFactory implements SimCfnServiceRes
      * Delete a simulated CloudWatch resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};

package/dist/service/cloudwatch/cfn/sim-cloudwatch-cfn-resource-factory.js

@@ -1,4 +1,5 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnAlarmCreator } from "./alarm/sim-cfn-alarm-creator.js";
 const alarmResourceTypeName = "Alarm";
 /**
@@ -21,17 +22,17 @@ export class SimCloudWatchCfnResourceFactory {
      */
     create(resourceTypeName, resource, context) {
         requireAlarmResourceType(resourceTypeName, "");
-        return this.#alarmCreator.create(resource, context.resolvedProperties ?? resource.properties);
+        return this.#alarmCreator.create(resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
     /**
      * Delete a simulated CloudWatch resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName, resource) {
+    delete(resourceTypeName, resource, context) {
         requireAlarmResourceType(resourceTypeName, " deletion");
         const alarm = resource.simResource;
         assertDefined(alarm, `sim CloudWatch alarm for CloudFormation Resource ${resource.logicalId}`);
-        return this.#alarmCreator.delete(alarm);
+        return this.#alarmCreator.delete(alarm, simCfnResourceCallerOptions(context.caller));
     }
 }
 function requireAlarmResourceType(resourceTypeName, operationSuffix) {

package/dist/service/cloudwatch/command/authorize/sim-cloudwatch-decide.js

@@ -21,6 +21,7 @@ export function decideSimCloudWatchRequest(iam, request) {
     if (decision.isDenied) {
         throw new SimIamAccessDenied({
             principal: decision.caller.principal,
+            reason: decision.denialReason,
             action,
             resource,
         });

package/dist/service/cloudwatch/sim-cloudwatch-commands.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimCloudWatchAlarmActions } from "./alarm/action/sim-cloudwatch-alarm-actions.js";
 import { type SimCloudWatchAlarmTargets } from "./alarm/action/sim-cloudwatch-alarm-targets.js";
 import { SimCloudWatchAlarmStore } from "./alarm/sim-cloudwatch-alarm-store.js";

package/dist/service/cloudwatch/sim-cloudwatch-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimCloudWatchAlarmActions } from "./alarm/action/sim-cloudwatch-alarm-actions.js";
 import { SimCloudWatchNoAlarmTargets, } from "./alarm/action/sim-cloudwatch-alarm-targets.js";
 import { SimCloudWatchAlarmSchedule } from "./alarm/sim-cloudwatch-alarm-schedule.js";
@@ -35,7 +35,8 @@ export class SimCloudWatchCommands {
     alarmActions;
     background;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), alarmTargets = new SimCloudWatchNoAlarmTargets(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), alarmTargets = new SimCloudWatchNoAlarmTargets(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const authorizer = new SimCloudWatchAuthorizer({ iam, accountRegionScope });
         const metrics = new SimCloudWatchMetricStore();
         const alarms = new SimCloudWatchAlarmStore();

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoUserPoolClient } from "../../user-pool/client/sim-cognito-user-pool-client.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoClientCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -19,6 +20,6 @@ export declare class SimCfnCognitoClientCreator {
     /**
      * Create an app client from an AWS::Cognito::UserPoolClient Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoUserPoolClient>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoUserPoolClient>;
 }
 export {};

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-creator.js

@@ -16,14 +16,12 @@ export class SimCfnCognitoClientCreator {
     /**
      * Create an app client from an AWS::Cognito::UserPoolClient Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const clientProperties = new SimCfnCognitoClientProperties({
             resource,
             properties,
         });
-        const created = await this.cognito.createUserPoolClient({
-            input: clientProperties.createUserPoolClientInput(),
-        });
+        const created = await this.cognito.createUserPoolClient({ input: clientProperties.createUserPoolClientInput() }, options);
         const clientId = created.UserPoolClient?.ClientId;
         assertDefined(clientId, `sim Cognito app client id after CloudFormation creation for ${resource.logicalId}`);
         const client = this.cognito

package/dist/service/cognito/cfn/domain/sim-cfn-cognito-domain-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoUserPoolDomain } from "../../user-pool/domain/sim-cognito-user-pool-domain.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoDomainCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -20,6 +21,6 @@ export declare class SimCfnCognitoDomainCreator {
     /**
      * Create a domain from an AWS::Cognito::UserPoolDomain Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoUserPoolDomain>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoUserPoolDomain>;
 }
 export {};

package/dist/service/cognito/cfn/domain/sim-cfn-cognito-domain-creator.js

@@ -17,14 +17,12 @@ export class SimCfnCognitoDomainCreator {
     /**
      * Create a domain from an AWS::Cognito::UserPoolDomain Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const domainProperties = new SimCfnCognitoDomainProperties({
             resource,
             properties,
         });
-        await this.cognito.createUserPoolDomain({
-            input: domainProperties.createUserPoolDomainInput(),
-        });
+        await this.cognito.createUserPoolDomain({ input: domainProperties.createUserPoolDomainInput() }, options);
         const domain = this.cognito.findUserPoolDomainInAnyAccount(domainProperties.domain());
         assertDefined(domain, `sim Cognito domain ${domainProperties.domain()} after CloudFormation ` +
             `creation`);

package/dist/service/cognito/cfn/group/sim-cfn-cognito-group-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoGroup } from "../../user-pool/group/sim-cognito-group.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoGroupCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -18,6 +19,6 @@ export declare class SimCfnCognitoGroupCreator {
     /**
      * Create a group from an AWS::Cognito::UserPoolGroup Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoGroup>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoGroup>;
 }
 export {};

package/dist/service/cognito/cfn/group/sim-cfn-cognito-group-creator.js

@@ -15,15 +15,13 @@ export class SimCfnCognitoGroupCreator {
     /**
      * Create a group from an AWS::Cognito::UserPoolGroup Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const groupProperties = new SimCfnCognitoGroupProperties({
             resource,
             properties,
         });
         const groupName = groupProperties.groupName();
-        await this.cognito.createGroup({
-            input: groupProperties.createGroupInput(),
-        });
+        await this.cognito.createGroup({ input: groupProperties.createGroupInput() }, options);
         const group = this.cognito
             .userPool(groupProperties.userPoolId())
             .findGroup(groupName);

package/dist/service/cognito/cfn/idp/sim-cfn-cognito-idp-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoUserPoolIdentityProvider } from "../../user-pool/idp/sim-cognito-user-pool-identity-provider.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoIdpCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -20,6 +21,6 @@ export declare class SimCfnCognitoIdpCreator {
     /**
      * Create a provider from an AWS::Cognito::UserPoolIdentityProvider Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoUserPoolIdentityProvider>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoUserPoolIdentityProvider>;
 }
 export {};

package/dist/service/cognito/cfn/idp/sim-cfn-cognito-idp-creator.js

@@ -17,15 +17,13 @@ export class SimCfnCognitoIdpCreator {
     /**
      * Create a provider from an AWS::Cognito::UserPoolIdentityProvider Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const providerProperties = new SimCfnCognitoIdpProperties({
             resource,
             properties,
         });
         const providerName = providerProperties.providerName();
-        await this.cognito.createIdentityProvider({
-            input: providerProperties.createIdentityProviderInput(),
-        });
+        await this.cognito.createIdentityProvider({ input: providerProperties.createIdentityProviderInput() }, options);
         const provider = this.cognito
             .userPool(providerProperties.userPoolId())
             .auth.identityProviders.find(providerName);