@kensio/yulin 1.20.12 → 1.20.14

package/dist/service/ecs/cfn/sim-ecs-cfn-resource-factory.js

@@ -1,4 +1,5 @@
-import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
+import { simCfnEcsCreatedResource } from "./sim-cfn-ecs-created-resource.js";
 import { SimCfnEcsClusterCreator } from "./cluster/sim-cfn-ecs-cluster-creator.js";
 import { SimCfnEcsServiceCreator } from "./service/sim-cfn-ecs-service-creator.js";
 import { SimCfnEcsTaskDefinitionCreator } from "./task-definition/sim-cfn-ecs-task-definition-creator.js";
@@ -27,15 +28,16 @@ export class SimEcsCfnResourceFactory {
      */
     async create(resourceTypeName, resource, context) {
         const properties = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Cluster": {
-                return await this.clusterCreator.create(resource, properties);
+                return await this.clusterCreator.create(resource, properties, options);
             }
             case "TaskDefinition": {
-                return await this.taskDefinitionCreator.create(resource, properties, context.bindings);
+                return await this.taskDefinitionCreator.create(resource, properties, context.bindings, options);
             }
             case "Service": {
-                return await this.serviceCreator.create(resource, properties);
+                return await this.serviceCreator.create(resource, properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim ECS CloudFormation Resource ${resourceTypeName}`);
@@ -45,18 +47,19 @@ export class SimEcsCfnResourceFactory {
     /**
      * Delete a simulated ECS resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, context) {
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Cluster": {
-                await this.clusterCreator.delete(simCfnEcsCreatedResource(resource, "cluster"));
+                await this.clusterCreator.delete(simCfnEcsCreatedResource(resource, "cluster"), options);
                 return;
             }
             case "TaskDefinition": {
-                await this.taskDefinitionCreator.delete(simCfnEcsCreatedResource(resource, "task definition"));
+                await this.taskDefinitionCreator.delete(simCfnEcsCreatedResource(resource, "task definition"), options);
                 return;
             }
             case "Service": {
-                await this.serviceCreator.delete(simCfnEcsCreatedResource(resource, "service"));
+                await this.serviceCreator.delete(simCfnEcsCreatedResource(resource, "service"), options);
                 return;
             }
             default: {
@@ -66,11 +69,3 @@ export class SimEcsCfnResourceFactory {
         }
     }
 }
-/**
- * The simulated resource a Resource created, which a teardown reaches it by.
- */
-function simCfnEcsCreatedResource(resource, described) {
-    const created = resource.simResource;
-    assertDefined(created, `sim ECS ${described} for CloudFormation Resource ${resource.logicalId}`);
-    return created;
-}

package/dist/service/ecs/cfn/task-definition/sim-cfn-ecs-task-definition-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimEcsTaskDefinition } from "../../task-definition/sim-ecs-task-definition.js";
 import type { SimEcs } from "../../sim-ecs.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnEcsTaskDefinitionCreatorProperties {
     readonly ecs: SimEcs;
 }
@@ -32,7 +33,7 @@ export declare class SimCfnEcsTaskDefinitionCreator {
      * one registered and then found to be unbindable could only be deregistered,
      * and simulated CloudFormation rolls nothing back.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, bindings?: readonly SimCfnBinding[]): Promise<SimEcsTaskDefinition>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, bindings?: readonly SimCfnBinding[], options?: SimCfnResourceCallerOptions): Promise<SimEcsTaskDefinition>;
     /**
      * Deregister a revision registered from an AWS::ECS::TaskDefinition
      * Resource.
@@ -43,6 +44,6 @@ export declare class SimCfnEcsTaskDefinitionCreator {
      * is also what an update does with the revision it replaces, since sim
      * CloudFormation replaces a changed Resource rather than updating it.
      */
-    delete(taskDefinition: SimEcsTaskDefinition): Promise<void>;
+    delete(taskDefinition: SimEcsTaskDefinition, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/ecs/cfn/task-definition/sim-cfn-ecs-task-definition-creator.js

@@ -29,7 +29,7 @@ export class SimCfnEcsTaskDefinitionCreator {
      * one registered and then found to be unbindable could only be deregistered,
      * and simulated CloudFormation rolls nothing back.
      */
-    async create(resource, properties, bindings) {
+    async create(resource, properties, bindings, options) {
         const taskDefinitionProperties = new SimCfnEcsTaskDefinitionProperties({
             resource,
             properties,
@@ -40,7 +40,7 @@ export class SimCfnEcsTaskDefinitionCreator {
             family: taskDefinitionProperties.family(),
             containerNames: simCfnEcsDeclaredContainerNames(input),
         });
-        const registered = await this.ecs.registerTaskDefinition({ input });
+        const registered = await this.ecs.registerTaskDefinition({ input }, options);
         const taskDefinitionArn = registered.taskDefinition?.taskDefinitionArn;
         assertDefined(taskDefinitionArn, `sim ECS task definition ARN for CloudFormation Resource ${resource.logicalId}`);
         return this.ecs.taskDefinition(taskDefinitionArn);
@@ -55,10 +55,8 @@ export class SimCfnEcsTaskDefinitionCreator {
      * is also what an update does with the revision it replaces, since sim
      * CloudFormation replaces a changed Resource rather than updating it.
      */
-    async delete(taskDefinition) {
-        await this.ecs.deregisterTaskDefinition({
-            input: { taskDefinition: taskDefinition.taskDefinitionArn },
-        });
+    async delete(taskDefinition, options) {
+        await this.ecs.deregisterTaskDefinition({ input: { taskDefinition: taskDefinition.taskDefinitionArn } }, options);
     }
 }
 /**

package/dist/service/ecs/sim-ecs-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimEcsContainerBindings } from "./bind/sim-ecs-container-bindings.js";
 import { SimEcsUnreachableConsumerQueues } from "./service/consume/sim-ecs-consumer-queues.js";
 import { SimEcsUnreachableTargetGroups } from "./service/load-balancer/sim-ecs-target-groups.js";
@@ -67,7 +67,8 @@ export class SimEcsCommands {
     serviceTasks;
     targetGroupContainers;
     constructor(properties) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), runAsOwner, secretStores = new SimEcsUnreachableSecretStores(), consumerQueues = new SimEcsUnreachableConsumerQueues(), targetGroups = new SimEcsUnreachableTargetGroups(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), runAsOwner, secretStores = new SimEcsUnreachableSecretStores(), consumerQueues = new SimEcsUnreachableConsumerQueues(), targetGroups = new SimEcsUnreachableTargetGroups(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const contexts = new SimEcsCommandContexts({
             accountRegionScope,
             authorizer: new SimEcsAuthorizer({ iam }),

package/dist/service/ecs/task/run/sim-ecs-container-environment.d.ts

@@ -22,8 +22,9 @@ interface SimEcsContainerEnvironmentProperties {
  * The variables are applied to `process.env` for the length of the run, in the
  * same way a sim Lambda function's are: a bound handler is an ordinary closure
  * with no sandbox of its own, so asynchronous context tracking is what gives
- * it an environment. A container declaring nothing is left reading the host
- * environment untouched.
+ * it an environment. They are laid over the host process environment, so a
+ * container still reads what the test process set, and a container declaring
+ * nothing of its own still runs in its task's Region.
  */
 export declare class SimEcsContainerEnvironment {
     #private;
@@ -39,17 +40,18 @@ export declare class SimEcsContainerEnvironment {
      * declaration as it comes and there is nothing to set without a name.
      */
     private static namedValues;
-    /**
-     * Whether this container has an environment of its own at all.
-     */
-    get hasVariables(): boolean;
     /**
      * Run a container's handler with this environment applied to process.env.
      *
-     * A container with nothing of its own is left reading the host environment
-     * untouched, Region variables included. Giving it only the Region ones would
-     * take away everything the test process set, which is where an in-process
-     * handler's configuration usually comes from.
+     * The host process environment is underneath, because that is where an
+     * in-process handler's configuration usually comes from. It is read for each
+     * run, so a variable the test process sets between two runs reaches the
+     * second of them.
+     *
+     * The container's own variables are laid over it, the Region ones included.
+     * A real task agent sets those whatever the definition declares, and without
+     * them a client the handler builds resolves its Region from the machine the
+     * test happens to run on.
      */
     runWith<T>(run: () => Promise<T>): Promise<T>;
     /**

package/dist/service/ecs/task/run/sim-ecs-container-environment.js

@@ -16,8 +16,9 @@ import { simProcessEnvironment } from "../../../../util/process/sim-process-envi
  * The variables are applied to `process.env` for the length of the run, in the
  * same way a sim Lambda function's are: a bound handler is an ordinary closure
  * with no sandbox of its own, so asynchronous context tracking is what gives
- * it an environment. A container declaring nothing is left reading the host
- * environment untouched.
+ * it an environment. They are laid over the host process environment, so a
+ * container still reads what the test process set, and a container declaring
+ * nothing of its own still runs in its task's Region.
  */
 export class SimEcsContainerEnvironment {
     regionName;
@@ -43,27 +44,24 @@ export class SimEcsContainerEnvironment {
             .map((pair) => [pair.name ?? "", pair.value ?? ""]);
         return Object.fromEntries(named);
     }
-    /**
-     * Whether this container has an environment of its own at all.
-     */
-    get hasVariables() {
-        return (this.declared.length > 0 ||
-            this.overridden.length > 0 ||
-            Object.keys(this.secrets).length > 0);
-    }
     /**
      * Run a container's handler with this environment applied to process.env.
      *
-     * A container with nothing of its own is left reading the host environment
-     * untouched, Region variables included. Giving it only the Region ones would
-     * take away everything the test process set, which is where an in-process
-     * handler's configuration usually comes from.
+     * The host process environment is underneath, because that is where an
+     * in-process handler's configuration usually comes from. It is read for each
+     * run, so a variable the test process sets between two runs reaches the
+     * second of them.
+     *
+     * The container's own variables are laid over it, the Region ones included.
+     * A real task agent sets those whatever the definition declares, and without
+     * them a client the handler builds resolves its Region from the machine the
+     * test happens to run on.
      */
     async runWith(run) {
-        if (!this.hasVariables) {
-            return await run();
-        }
-        return await simProcessEnvironment.run(this.variables(), run);
+        return await simProcessEnvironment.run({
+            ...simProcessEnvironment.definedHostVariables(),
+            ...this.variables(),
+        }, run);
     }
     /**
      * The complete process.env-shaped variables the container code sees.

package/dist/service/elbv2/cfn/listener/sim-cfn-elbv2-listener-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template
 import type { SimElbV2Listener } from "../../listener/sim-elbv2-listener.js";
 import type { SimElbV2 } from "../../sim-elbv2.js";
 import type { SimElbV2Stores } from "../../sim-elbv2-stores.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnElbV2ListenerCreatorProperties {
     readonly elbV2: SimElbV2;
     readonly stores: SimElbV2Stores;
@@ -24,12 +25,12 @@ export declare class SimCfnElbV2ListenerCreator {
     /**
      * Create a listener from a Listener Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimElbV2Listener>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimElbV2Listener>;
     /**
      * Delete a listener created from a Listener Resource.
      *
      * Its rules come down with it, as they do on real ELB.
      */
-    delete(listener: SimElbV2Listener): Promise<void>;
+    delete(listener: SimElbV2Listener, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/elbv2/cfn/listener/sim-cfn-elbv2-listener-creator.js

@@ -20,14 +20,14 @@ export class SimCfnElbV2ListenerCreator {
     /**
      * Create a listener from a Listener Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const declared = new SimCfnElbV2ListenerProperties({
             resource,
             properties,
         });
         const input = declared.createListenerInput();
         declared.recordIgnoredProperties();
-        const created = await this.elbV2.createListener({ input });
+        const created = await this.elbV2.createListener({ input }, options);
         const listenerArn = created.Listeners?.[0]?.ListenerArn;
         assertDefined(listenerArn, `sim ELBv2 listener ARN after CloudFormation creation for ${resource.logicalId}`);
         return this.stores.listeners.requireByArn(listenerArn);
@@ -37,9 +37,7 @@ export class SimCfnElbV2ListenerCreator {
      *
      * Its rules come down with it, as they do on real ELB.
      */
-    async delete(listener) {
-        await this.elbV2.deleteListener({
-            input: { ListenerArn: listener.arn },
-        });
+    async delete(listener, options) {
+        await this.elbV2.deleteListener({ input: { ListenerArn: listener.arn } }, options);
     }
 }

package/dist/service/elbv2/cfn/load-balancer/sim-cfn-elbv2-load-balancer-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template
 import type { SimElbV2LoadBalancer } from "../../load-balancer/sim-elbv2-load-balancer.js";
 import type { SimElbV2 } from "../../sim-elbv2.js";
 import type { SimElbV2Stores } from "../../sim-elbv2-stores.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnElbV2LoadBalancerCreatorProperties {
     readonly elbV2: SimElbV2;
     readonly stores: SimElbV2Stores;
@@ -23,7 +24,7 @@ export declare class SimCfnElbV2LoadBalancerCreator {
     /**
      * Create a load balancer from a LoadBalancer Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimElbV2LoadBalancer>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimElbV2LoadBalancer>;
     /**
      * Delete a load balancer created from a LoadBalancer Resource.
      *
@@ -31,6 +32,6 @@ export declare class SimCfnElbV2LoadBalancerCreator {
      * teardown has already deleted them itself, since each of them names the
      * load balancer, so what this removes is usually the load balancer alone.
      */
-    delete(loadBalancer: SimElbV2LoadBalancer): Promise<void>;
+    delete(loadBalancer: SimElbV2LoadBalancer, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/elbv2/cfn/load-balancer/sim-cfn-elbv2-load-balancer-creator.js

@@ -18,14 +18,14 @@ export class SimCfnElbV2LoadBalancerCreator {
     /**
      * Create a load balancer from a LoadBalancer Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const declared = new SimCfnElbV2LoadBalancerProperties({
             resource,
             properties,
         });
         const input = declared.createLoadBalancerInput();
         declared.recordIgnoredProperties();
-        await this.elbV2.createLoadBalancer({ input });
+        await this.elbV2.createLoadBalancer({ input }, options);
         return this.stores.loadBalancers.requireByName(declared.name());
     }
     /**
@@ -35,9 +35,7 @@ export class SimCfnElbV2LoadBalancerCreator {
      * teardown has already deleted them itself, since each of them names the
      * load balancer, so what this removes is usually the load balancer alone.
      */
-    async delete(loadBalancer) {
-        await this.elbV2.deleteLoadBalancer({
-            input: { LoadBalancerArn: loadBalancer.arn },
-        });
+    async delete(loadBalancer, options) {
+        await this.elbV2.deleteLoadBalancer({ input: { LoadBalancerArn: loadBalancer.arn } }, options);
     }
 }

package/dist/service/elbv2/cfn/rule/sim-cfn-elbv2-listener-rule-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template
 import type { SimElbV2ListenerRule } from "../../listener/rule/sim-elbv2-listener-rule.js";
 import type { SimElbV2 } from "../../sim-elbv2.js";
 import type { SimElbV2Stores } from "../../sim-elbv2-stores.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnElbV2ListenerRuleCreatorProperties {
     readonly elbV2: SimElbV2;
     readonly stores: SimElbV2Stores;
@@ -23,10 +24,10 @@ export declare class SimCfnElbV2ListenerRuleCreator {
     /**
      * Create a rule from a ListenerRule Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimElbV2ListenerRule>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimElbV2ListenerRule>;
     /**
      * Delete a rule created from a ListenerRule Resource.
      */
-    delete(rule: SimElbV2ListenerRule): Promise<void>;
+    delete(rule: SimElbV2ListenerRule, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/elbv2/cfn/rule/sim-cfn-elbv2-listener-rule-creator.js

@@ -19,14 +19,14 @@ export class SimCfnElbV2ListenerRuleCreator {
     /**
      * Create a rule from a ListenerRule Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const declared = new SimCfnElbV2ListenerRuleProperties({
             resource,
             properties,
         });
         const input = declared.createRuleInput();
         declared.recordIgnoredProperties();
-        const created = await this.elbV2.createRule({ input });
+        const created = await this.elbV2.createRule({ input }, options);
         const ruleArn = created.Rules?.[0]?.RuleArn;
         assertDefined(ruleArn, `sim ELBv2 rule ARN after CloudFormation creation for ${resource.logicalId}`);
         return this.stores.rules.requireByArn(ruleArn);
@@ -34,7 +34,7 @@ export class SimCfnElbV2ListenerRuleCreator {
     /**
      * Delete a rule created from a ListenerRule Resource.
      */
-    async delete(rule) {
-        await this.elbV2.deleteRule({ input: { RuleArn: rule.arn } });
+    async delete(rule, options) {
+        await this.elbV2.deleteRule({ input: { RuleArn: rule.arn } }, options);
     }
 }

package/dist/service/elbv2/cfn/sim-elbv2-cfn-resource-deleter.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnElbV2ListenerCreator } from "./listener/sim-cfn-elbv2-listen
 import type { SimCfnElbV2LoadBalancerCreator } from "./load-balancer/sim-cfn-elbv2-load-balancer-creator.js";
 import type { SimCfnElbV2ListenerRuleCreator } from "./rule/sim-cfn-elbv2-listener-rule-creator.js";
 import type { SimCfnElbV2TargetGroupCreator } from "./target-group/sim-cfn-elbv2-target-group-creator.js";
+import type { SimCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimElbV2CfnResourceDeleterProperties {
     readonly loadBalancers: SimCfnElbV2LoadBalancerCreator;
     readonly targetGroups: SimCfnElbV2TargetGroupCreator;
@@ -30,6 +31,6 @@ export declare class SimElbV2CfnResourceDeleter {
     /**
      * Delete the simulated resource one Resource created.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/elbv2/cfn/sim-elbv2-cfn-resource-deleter.js

@@ -25,22 +25,22 @@ export class SimElbV2CfnResourceDeleter {
     /**
      * Delete the simulated resource one Resource created.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, options) {
         switch (resourceTypeName) {
             case "LoadBalancer": {
-                await this.loadBalancers.delete(simCfnElbV2Created(resource, "load balancer"));
+                await this.loadBalancers.delete(simCfnElbV2Created(resource, "load balancer"), options);
                 return;
             }
             case "TargetGroup": {
-                await this.targetGroups.delete(simCfnElbV2Created(resource, "target group"));
+                await this.targetGroups.delete(simCfnElbV2Created(resource, "target group"), options);
                 return;
             }
             case "Listener": {
-                await this.listeners.delete(simCfnElbV2Created(resource, "listener"));
+                await this.listeners.delete(simCfnElbV2Created(resource, "listener"), options);
                 return;
             }
             case "ListenerRule": {
-                await this.rules.delete(simCfnElbV2Created(resource, "rule"));
+                await this.rules.delete(simCfnElbV2Created(resource, "rule"), options);
                 return;
             }
             default: {

package/dist/service/elbv2/cfn/sim-elbv2-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimElbV2 } from "../sim-elbv2.js";
 import type { SimElbV2Stores } from "../sim-elbv2-stores.js";
 interface SimElbV2CfnResourceFactoryProperties {
@@ -33,6 +33,6 @@ export declare class SimElbV2CfnResourceFactory implements SimCfnServiceResource
     /**
      * Delete a simulated ELBv2 resource created from a CloudFormation Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};

package/dist/service/elbv2/cfn/sim-elbv2-cfn-resource-factory.js

@@ -3,6 +3,7 @@ import { SimCfnElbV2LoadBalancerCreator } from "./load-balancer/sim-cfn-elbv2-lo
 import { SimCfnElbV2ListenerRuleCreator } from "./rule/sim-cfn-elbv2-listener-rule-creator.js";
 import { SimCfnElbV2TargetGroupCreator } from "./target-group/sim-cfn-elbv2-target-group-creator.js";
 import { SimElbV2CfnResourceDeleter } from "./sim-elbv2-cfn-resource-deleter.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * CloudFormation Resource factory for simulated ELBv2 resources.
  *
@@ -39,18 +40,19 @@ export class SimElbV2CfnResourceFactory {
      */
     async create(resourceTypeName, resource, context) {
         const properties = context.resolvedProperties ?? resource.properties;
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "LoadBalancer": {
-                return await this.loadBalancerCreator.create(resource, properties);
+                return await this.loadBalancerCreator.create(resource, properties, options);
             }
             case "TargetGroup": {
-                return await this.targetGroupCreator.create(resource, properties);
+                return await this.targetGroupCreator.create(resource, properties, options);
             }
             case "Listener": {
-                return await this.listenerCreator.create(resource, properties);
+                return await this.listenerCreator.create(resource, properties, options);
             }
             case "ListenerRule": {
-                return await this.ruleCreator.create(resource, properties);
+                return await this.ruleCreator.create(resource, properties, options);
             }
             default: {
                 throw new Error(`Unsupported sim ELBv2 CloudFormation Resource ${resourceTypeName}`);
@@ -60,7 +62,7 @@ export class SimElbV2CfnResourceFactory {
     /**
      * Delete a simulated ELBv2 resource created from a CloudFormation Resource.
      */
-    async delete(resourceTypeName, resource) {
-        await this.deleter.delete(resourceTypeName, resource);
+    async delete(resourceTypeName, resource, context) {
+        await this.deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
 }

package/dist/service/elbv2/cfn/target-group/sim-cfn-elbv2-target-group-creator.d.ts

@@ -3,6 +3,7 @@ import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template
 import type { SimElbV2 } from "../../sim-elbv2.js";
 import type { SimElbV2Stores } from "../../sim-elbv2-stores.js";
 import type { SimElbV2TargetGroup } from "../../target-group/sim-elbv2-target-group.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnElbV2TargetGroupCreatorProperties {
     readonly elbV2: SimElbV2;
     readonly stores: SimElbV2Stores;
@@ -23,7 +24,7 @@ export declare class SimCfnElbV2TargetGroupCreator {
     /**
      * Create a target group from a TargetGroup Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimElbV2TargetGroup>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimElbV2TargetGroup>;
     /**
      * Delete a target group created from a TargetGroup Resource.
      *
@@ -31,7 +32,7 @@ export declare class SimCfnElbV2TargetGroupCreator {
      * a group comes down after the listeners naming it, which the teardown order
      * arranges.
      */
-    delete(targetGroup: SimElbV2TargetGroup): Promise<void>;
+    delete(targetGroup: SimElbV2TargetGroup, options?: SimCfnResourceCallerOptions): Promise<void>;
     /**
      * Register the targets the Resource declared, if it declared any.
      */

package/dist/service/elbv2/cfn/target-group/sim-cfn-elbv2-target-group-creator.js

@@ -18,16 +18,16 @@ export class SimCfnElbV2TargetGroupCreator {
     /**
      * Create a target group from a TargetGroup Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const declared = new SimCfnElbV2TargetGroupProperties({
             resource,
             properties,
         });
         const input = declared.createTargetGroupInput();
         declared.recordIgnoredProperties();
-        await this.elbV2.createTargetGroup({ input });
+        await this.elbV2.createTargetGroup({ input }, options);
         const targetGroup = this.stores.targetGroups.requireByName(declared.name());
-        await this.registerTargets(targetGroup, declared.targets());
+        await this.registerTargets(targetGroup, declared.targets(), options);
         return targetGroup;
     }
     /**
@@ -37,20 +37,16 @@ export class SimCfnElbV2TargetGroupCreator {
      * a group comes down after the listeners naming it, which the teardown order
      * arranges.
      */
-    async delete(targetGroup) {
-        await this.elbV2.deleteTargetGroup({
-            input: { TargetGroupArn: targetGroup.arn },
-        });
+    async delete(targetGroup, options) {
+        await this.elbV2.deleteTargetGroup({ input: { TargetGroupArn: targetGroup.arn } }, options);
     }
     /**
      * Register the targets the Resource declared, if it declared any.
      */
-    async registerTargets(targetGroup, targets) {
+    async registerTargets(targetGroup, targets, options) {
         if (targets === undefined || targets.length === 0) {
             return;
         }
-        await this.elbV2.registerTargets({
-            input: { TargetGroupArn: targetGroup.arn, Targets: targets },
-        });
+        await this.elbV2.registerTargets({ input: { TargetGroupArn: targetGroup.arn, Targets: targets } }, options);
     }
 }

package/dist/service/elbv2/serve/sim-elbv2-router.js

@@ -1,5 +1,6 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
 import { parseSimLambdaFunctionArn } from "../../lambda/function/sim-lambda-function-arn-parts.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 /**
  * Routes a request to the load balancer behind its host name, and a target
  * group to the function or container behind that.
@@ -70,7 +71,7 @@ export class SimElbV2Router {
         if (simFunction === undefined) {
             return undefined;
         }
-        return { simFunction, iam: scope.iam() };
+        return { simFunction, iam: simScopeIamAuthZ(scope) };
     }
     /**
      * Find the container of a simulated ECS service that answers for a target

package/dist/service/elbv2/sim-elbv2.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimElbV2CfnResourceFactory } from "./cfn/sim-elbv2-cfn-resource-factory.js";
 import { SimElbV2Commands } from "./command/sim-elbv2-commands.js";
 import { SimElbV2Registry } from "./registry/sim-elbv2-registry.js";
@@ -27,11 +27,11 @@ export class SimElbV2 {
     commands;
     sdkRouter = new SimElbV2SdkCommandRouter(this);
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), registry = new SimElbV2Registry(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), registry = new SimElbV2Registry(), } = properties;
         this.stores = new SimElbV2Stores({ registry });
         this.commands = new SimElbV2Commands({
             stores: this.stores,
-            iam,
+            iam: simIamInRegion(properties.iam, accountRegionScope.regionName),
             background,
             accountRegionScope,
             acmRegistry: properties.acmRegistry,

package/dist/service/eventbridge/cfn/bus/sim-cfn-event-bus-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimEventBus } from "../../bus/sim-event-bus.js";
 import type { SimEventBridge } from "../../sim-event-bridge.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnEventBusCreatorProperties {
     readonly eventBridge: SimEventBridge;
 }
@@ -19,6 +20,6 @@ export declare class SimCfnEventBusCreator {
     /**
      * Create an event bus from an AWS::Events::EventBus Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimEventBus>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimEventBus>;
 }
 export {};