@kensio/yulin 1.20.13 → 1.20.15

package/dist/service/cloudformation/template/dynamic/sim-cfn-prefetched-dynamic-references.js

@@ -0,0 +1,80 @@
+/**
+ * The references of one property resolution that were read before it ran.
+ *
+ * A service that has to be waited on cannot answer while the properties
+ * resolve, because resolution is synchronous, so properties holding a
+ * reference are resolved twice. The first pass leaves every reference as the
+ * template wrote it and keeps what the services answer here. The second finds
+ * the answers waiting, so an `Fn::Split` over a reference splits the value
+ * rather than something standing in for it.
+ *
+ * A read that failed is not kept. The resolution pass asks its service again,
+ * and the failure reaches the Resource from there, which is what fails a
+ * Resource holding a reference the deployment may not read.
+ */
+export class SimCfnPrefetchedDynamicReferences {
+    answers = new Map();
+    reads;
+    /** Whether the pass running now is the one reading references ahead. */
+    get isReading() {
+        return this.reads !== undefined;
+    }
+    /**
+     * What one reference was already answered with, where it was.
+     */
+    answerFor(key) {
+        return this.answers.get(key);
+    }
+    /**
+     * Whether the pass running now has already started reading one reference.
+     *
+     * A property holding the same reference twice would otherwise read it twice.
+     */
+    isHeld(key) {
+        return this.reads?.has(key) === true;
+    }
+    /**
+     * Keep one reference's answer for the resolution pass to use.
+     */
+    hold(key, resolution) {
+        this.reads?.set(key, Promise.resolve(resolution));
+    }
+    /**
+     * Run one pass over the properties, keeping what its references answer.
+     *
+     * Nothing the pass throws escapes. The resolution pass after it resolves the
+     * same properties, and that is the pass whose failure the Resource reports.
+     */
+    async read(pass) {
+        const reads = new Map();
+        this.reads = reads;
+        try {
+            pass();
+        }
+        catch {
+            // The resolution pass after this one is the one that reports it.
+        }
+        finally {
+            this.reads = undefined;
+        }
+        const answers = await Promise.all(reads
+            .entries()
+            .map(async ([key, read]) => await prefetchedReference(key, read)));
+        for (const answer of answers) {
+            if (answer !== undefined) {
+                this.answers.set(answer.key, answer.resolution);
+            }
+        }
+    }
+}
+/**
+ * What one read answered, or nothing where it failed.
+ */
+async function prefetchedReference(key, read) {
+    try {
+        return { key, resolution: await read };
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 import type { SimCloudFrontFunction } from "../../cff/sim-cloudfront-function.js";
+import { type SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfFunctionCreatorProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -33,5 +34,9 @@ export declare class SimCfnCffCreator {
      * executable handler while preserving CloudFormation-style Resource creation.
      */
     create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, context?: SimCloudFormationResourceCreateContext): Promise<SimCloudFrontFunction>;
+    /**
+     * Delete the Function an AWS::CloudFront::Function Resource created.
+     */
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudfront/cfn/cff/sim-cfn-cff-creator.js

@@ -1,5 +1,6 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCfnCffCreateInputBuilder } from "./sim-cfn-cff-create-input-builder.js";
+import { simCfnResourceCallerOptions, } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Creates simulated CloudFront Functions for AWS::CloudFront::Function
  * CloudFormation Resources.
@@ -36,13 +37,19 @@ export class SimCfnCffCreator {
             bindings: context?.bindings,
         });
         const functionInput = inputBuilder.build();
-        const output = await this.cloudFront.createFunction({
-            input: functionInput,
-        });
+        const output = await this.cloudFront.createFunction({ input: functionInput }, simCfnResourceCallerOptions(context?.caller));
         const createdFunctionName = output.FunctionSummary
             .Name;
         const cloudFrontFunction = this.cloudFront.getCloudFrontFunctionByName(createdFunctionName);
         assertDefined(cloudFrontFunction, `Expected sim CloudFront Function ${createdFunctionName} to exist after CloudFormation creation`);
         return cloudFrontFunction;
     }
+    /**
+     * Delete the Function an AWS::CloudFront::Function Resource created.
+     */
+    async delete(resource, options) {
+        const cloudFrontFunction = resource.simResource;
+        assertDefined(cloudFrontFunction, `sim CloudFront Function for CloudFormation Resource ${resource.logicalId}`);
+        await this.cloudFront.deleteFunction({ input: { Name: cloudFrontFunction.name } }, options);
+    }
 }

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -3,6 +3,7 @@ import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-valida
 import { simCfnCfDistroWithRunnableEdgeAssociations } from "./sim-cfn-cf-distro-edge-associations.js";
 import { simCfnCfDistroWithHeldResponseHeadersPolicies } from "./sim-cfn-cf-distro-response-headers-policy.js";
 import { simCfnCfDistroWithoutAbsentWebAcl } from "./sim-cfn-cf-distro-web-acl.js";
+import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
  * Creates simulated CloudFront Distributions from CloudFormation Resources.
  *
@@ -35,7 +36,7 @@ export class SimCfnCfDistroCreator {
             input: {
                 DistributionConfig: deployableConfig(resource, validator.validate(), context.simAws, this.cloudFront),
             },
-        });
+        }, simCfnResourceCallerOptions(context.caller));
         const distributionId = output.Distribution?.Id;
         assertDefined(distributionId, `AWS::CloudFront::Distribution ${resource.logicalId} created Distribution Id`);
         const distribution = this.cloudFront.getSimDistributionById(distributionId);

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-deleter.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfDistroDeleterProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -22,7 +23,7 @@ export declare class SimCfnCfDistroDeleter {
     /**
      * Disable and then delete the Distribution a Resource created.
      */
-    delete(resource: SimCfnResource): Promise<void>;
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
     private disable;
 }
 export {};

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-deleter.js

@@ -20,15 +20,13 @@ export class SimCfnCfDistroDeleter {
     /**
      * Disable and then delete the Distribution a Resource created.
      */
-    async delete(resource) {
+    async delete(resource, options) {
         const distribution = resource.simResource;
         assertDefined(distribution, `sim CloudFront Distribution for CloudFormation Resource ${resource.logicalId}`);
-        await this.disable(distribution);
-        await this.cloudFront.deleteDistribution({
-            input: { Id: distribution.distributionId },
-        });
+        await this.disable(distribution, options);
+        await this.cloudFront.deleteDistribution({ input: { Id: distribution.distributionId } }, options);
     }
-    async disable(distribution) {
+    async disable(distribution, options) {
         const { distributionConfig } = distribution;
         assertDefined(distributionConfig, `sim CloudFront Distribution ${distribution.distributionId} configuration to disable`);
         await this.cloudFront.updateDistribution({
@@ -36,6 +34,6 @@ export class SimCfnCfDistroDeleter {
                 Id: distribution.distributionId,
                 DistributionConfig: { ...distributionConfig, Enabled: false },
             },
-        });
+        }, options);
     }
 }

package/dist/service/cloudfront/cfn/key-value-store/sim-cfn-cf-kvs-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudFrontKeyValueStore } from "../../key-value-store/sim-cf-key-value-store.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCfKeyValueStoreCreatorProperties {
     readonly cloudFront: SimCloudFront;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnCfKeyValueStoreCreator {
     /**
      * Create the key value store one Resource describes.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCloudFrontKeyValueStore>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCloudFrontKeyValueStore>;
     /**
      * Remove a key value store created from a Resource.
      *
@@ -27,6 +28,6 @@ export declare class SimCfnCfKeyValueStoreCreator {
      * anything written to it since will have moved the one creation returned.
      * Tearing a Stack down is not the place to make a caller thread that through.
      */
-    delete(resource: SimCfnResource): Promise<void>;
+    delete(resource: SimCfnResource, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudfront/cfn/key-value-store/sim-cfn-cf-kvs-creator.js

@@ -16,7 +16,7 @@ export class SimCfnCfKeyValueStoreCreator {
     /**
      * Create the key value store one Resource describes.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const config = new SimCfnCfKeyValueStoreConfigReader({
             resource,
             properties,
@@ -26,7 +26,7 @@ export class SimCfnCfKeyValueStoreCreator {
                 Name: config.name,
                 ...(config.comment !== undefined && { Comment: config.comment }),
             },
-        });
+        }, options);
         const store = this.cloudFront
             .keyValueStores()
             .byId(created.KeyValueStore.Id);
@@ -41,13 +41,13 @@ export class SimCfnCfKeyValueStoreCreator {
      * anything written to it since will have moved the one creation returned.
      * Tearing a Stack down is not the place to make a caller thread that through.
      */
-    async delete(resource) {
+    async delete(resource, options) {
         const store = resource.simResource;
         if (store === undefined) {
             return;
         }
-        await this.cloudFront.keyValueStores().deleteKeyValueStore({
-            input: { Name: store.name, IfMatch: store.resourceETag },
-        });
+        await this.cloudFront
+            .keyValueStores()
+            .deleteKeyValueStore({ input: { Name: store.name, IfMatch: store.resourceETag } }, options);
     }
 }

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.d.ts

@@ -1,11 +1,10 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimCloudFront } from "../sim-cloudfront.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 /**
  * CloudFormation Resource factory for simulated CloudFront resources.
  */
 export declare class SimCloudFrontCloudFormationResourceFactory implements SimCfnServiceResourceFactory {
-    private readonly cloudFront;
     private readonly distroCreator;
     private readonly functionCreator;
     private readonly distroDeleter;
@@ -21,6 +20,5 @@ export declare class SimCloudFrontCloudFormationResourceFactory implements SimCf
      * Delete a simulated CloudFront resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
-    private deleteFunction;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js

@@ -1,15 +1,14 @@
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnCfDistroCreator } from "./distro/sim-cfn-cf-distro-creator.js";
 import { SimCfnCffCreator } from "./cff/sim-cfn-cff-creator.js";
 import { SimCfnCfDistroDeleter } from "./distro/sim-cfn-cf-distro-deleter.js";
 import { SimCfnCfResponseHeadersPolicyCreator } from "./response-headers-policy/sim-cfn-cf-rh-policy-creator.js";
 import { SimCfnCfOriginAccessControlCreator } from "./origin-access-control/sim-cfn-cf-oac-creator.js";
 import { SimCfnCfKeyValueStoreCreator } from "./key-value-store/sim-cfn-cf-kvs-creator.js";
-import { assertDefined } from "../../../util/type-guard/defined.js";
 /**
  * CloudFormation Resource factory for simulated CloudFront resources.
  */
 export class SimCloudFrontCloudFormationResourceFactory {
-    cloudFront;
     distroCreator;
     functionCreator;
     distroDeleter;
@@ -17,7 +16,6 @@ export class SimCloudFrontCloudFormationResourceFactory {
     originAccessControlCreator;
     keyValueStoreCreator;
     constructor(cloudFront) {
-        this.cloudFront = cloudFront;
         this.distroCreator = new SimCfnCfDistroCreator({ cloudFront });
         this.functionCreator = new SimCfnCffCreator({ cloudFront });
         this.distroDeleter = new SimCfnCfDistroDeleter({ cloudFront });
@@ -49,7 +47,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
                 return this.originAccessControlCreator.create(resource, properties);
             }
             case "KeyValueStore": {
-                return await this.keyValueStoreCreator.create(resource, properties);
+                return await this.keyValueStoreCreator.create(resource, properties, simCfnResourceCallerOptions(context.caller));
             }
             default: {
                 throw new Error(`Unsupported sim CloudFront CloudFormation Resource ${resourceTypeName}`);
@@ -60,14 +58,15 @@ export class SimCloudFrontCloudFormationResourceFactory {
      * Delete a simulated CloudFront resource created from a CloudFormation
      * Resource.
      */
-    async delete(resourceTypeName, resource) {
+    async delete(resourceTypeName, resource, context) {
+        const options = simCfnResourceCallerOptions(context.caller);
         switch (resourceTypeName) {
             case "Distribution": {
-                await this.distroDeleter.delete(resource);
+                await this.distroDeleter.delete(resource, options);
                 return;
             }
             case "Function": {
-                await this.deleteFunction(resource);
+                await this.functionCreator.delete(resource, options);
                 return;
             }
             case "ResponseHeadersPolicy": {
@@ -79,7 +78,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
                 return;
             }
             case "KeyValueStore": {
-                await this.keyValueStoreCreator.delete(resource);
+                await this.keyValueStoreCreator.delete(resource, options);
                 return;
             }
             default: {
@@ -87,11 +86,4 @@ export class SimCloudFrontCloudFormationResourceFactory {
             }
         }
     }
-    async deleteFunction(resource) {
-        const cloudFrontFunction = resource.simResource;
-        assertDefined(cloudFrontFunction, `sim CloudFront Function for CloudFormation Resource ${resource.logicalId}`);
-        await this.cloudFront.deleteFunction({
-            input: { Name: cloudFrontFunction.name },
-        });
-    }
 }

package/dist/service/cloudfront/edge/sim-aws-cf-edge-functions.js

@@ -1,4 +1,5 @@
-import { assumeSimServiceRole, simServiceRoleTarget, } from "../../sts/service-role/sim-service-role.js";
+import { assumeSimServiceRole, } from "../../sts/service-role/sim-service-role.js";
+import { simServiceRoleTarget } from "../../sts/service-role/sim-service-role-target.js";
 import { SimCloudFrontInvalidLambdaFunctionAssociation } from "../error/sim-cloudfront.error.js";
 import { edgeFunctionArnParts } from "./sim-cf-edge-function-arn.js";
 import { findSimCfEdgeFunctionVersion } from "./sim-cf-edge-function-version.js";
@@ -65,7 +66,7 @@ export class SimAwsCfEdgeFunctions {
             target: simServiceRoleTarget(target.simFunction.roleArn),
             servicePrincipal: simLambdaEdgeServicePrincipal,
             sessionName,
-            iam: this.simAws.accountRegionScope(accountId, regionName).iam(),
+            scope: this.simAws.accountRegionScope(accountId, regionName),
             refusals: executionRoleRefusals(functionArn),
         });
     }

package/dist/service/cloudfront/sim-cloudfront-commands.d.ts

@@ -3,7 +3,7 @@ import type { SimAcmRegistry } from "../acm/registry/sim-acm-registry.js";
 import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimCreateDistributionCommand, SimCreateDistributionCommandOutput } from "./command/create-distribution/create-distribution.command.js";
 import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
 import { type SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";

package/dist/service/cloudfront/sim-cloudfront-commands.js

@@ -1,5 +1,5 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamGlobalServiceRegion, simIamInRegion, } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { CreateDistributionCommandHandler } from "./command/create-distribution/create-distribution.handler.js";
 import { CreateFunctionCommandHandler, } from "./command/create-function/create-function.handler.js";
 import { DeleteDistributionCommandHandler } from "./command/delete-distribution/delete-distribution.handler.js";
@@ -41,7 +41,10 @@ export class SimCloudFrontCommands {
     functionState;
     configurationState;
     constructor(properties) {
-        const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, iam = new SimIamAllowAllAuth(), acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
+        const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
+        // CloudFront is global rather than Region-scoped, so its requests are made
+        // in the Region its one endpoint is in.
+        const iam = simIamInRegion(properties.iam, simIamGlobalServiceRegion);
         const keyValueStores = new SimCloudFrontKeyValueStoreRegistry();
         this.edgeFunctions = edgeFunctions;
         this.distributionState = {

package/dist/service/cloudwatch/cfn/alarm/sim-cfn-alarm-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCloudWatchAlarm } from "../../alarm/sim-cloudwatch-alarm.js";
 import type { SimCloudWatch } from "../../sim-cloudwatch.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnAlarmCreatorProperties {
     readonly cloudWatch: SimCloudWatch;
 }
@@ -19,7 +20,7 @@ export declare class SimCfnAlarmCreator {
     /**
      * Create an alarm from an AWS::CloudWatch::Alarm Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCloudWatchAlarm>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCloudWatchAlarm>;
     /**
      * Delete an alarm created from an AWS::CloudWatch::Alarm Resource.
      *
@@ -27,6 +28,6 @@ export declare class SimCfnAlarmCreator {
      * removing it, which is what lets a torn-down stack settle rather than
      * leaving an alarm waking up to read a metric nothing watches.
      */
-    delete(alarm: SimCloudWatchAlarm): Promise<void>;
+    delete(alarm: SimCloudWatchAlarm, options?: SimCfnResourceCallerOptions): Promise<void>;
 }
 export {};

package/dist/service/cloudwatch/cfn/alarm/sim-cfn-alarm-creator.js

@@ -16,11 +16,11 @@ export class SimCfnAlarmCreator {
     /**
      * Create an alarm from an AWS::CloudWatch::Alarm Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const alarmProperties = new SimCfnAlarmProperties({ resource, properties });
         const alarmName = alarmProperties.alarmName();
         alarmProperties.recordIgnoredProperties();
-        await this.#cloudWatch.putMetricAlarm({ input: alarmProperties.input() });
+        await this.#cloudWatch.putMetricAlarm({ input: alarmProperties.input() }, options);
         const alarm = this.#cloudWatch.findAlarm(alarmName);
         assertDefined(alarm, `sim CloudWatch alarm ${alarmName} after CloudFormation creation`);
         return alarm;
@@ -32,9 +32,7 @@ export class SimCfnAlarmCreator {
      * removing it, which is what lets a torn-down stack settle rather than
      * leaving an alarm waking up to read a metric nothing watches.
      */
-    async delete(alarm) {
-        await this.#cloudWatch.deleteAlarms({
-            input: { AlarmNames: [alarm.name] },
-        });
+    async delete(alarm, options) {
+        await this.#cloudWatch.deleteAlarms({ input: { AlarmNames: [alarm.name] } }, options);
     }
 }

package/dist/service/cloudwatch/cfn/sim-cloudwatch-cfn-resource-factory.d.ts

@@ -1,5 +1,5 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
-import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCloudWatch } from "../sim-cloudwatch.js";
 interface SimCloudWatchCfnResourceFactoryProperties {
     readonly cloudWatch: SimCloudWatch;
@@ -23,6 +23,6 @@ export declare class SimCloudWatchCfnResourceFactory implements SimCfnServiceRes
      * Delete a simulated CloudWatch resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName: string, resource: SimCfnResource): Promise<void>;
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 export {};

package/dist/service/cloudwatch/cfn/sim-cloudwatch-cfn-resource-factory.js

@@ -1,4 +1,5 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCfnResourceCallerOptions } from "../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 import { SimCfnAlarmCreator } from "./alarm/sim-cfn-alarm-creator.js";
 const alarmResourceTypeName = "Alarm";
 /**
@@ -21,17 +22,17 @@ export class SimCloudWatchCfnResourceFactory {
      */
     create(resourceTypeName, resource, context) {
         requireAlarmResourceType(resourceTypeName, "");
-        return this.#alarmCreator.create(resource, context.resolvedProperties ?? resource.properties);
+        return this.#alarmCreator.create(resource, context.resolvedProperties ?? resource.properties, simCfnResourceCallerOptions(context.caller));
     }
     /**
      * Delete a simulated CloudWatch resource created from a CloudFormation
      * Resource.
      */
-    delete(resourceTypeName, resource) {
+    delete(resourceTypeName, resource, context) {
         requireAlarmResourceType(resourceTypeName, " deletion");
         const alarm = resource.simResource;
         assertDefined(alarm, `sim CloudWatch alarm for CloudFormation Resource ${resource.logicalId}`);
-        return this.#alarmCreator.delete(alarm);
+        return this.#alarmCreator.delete(alarm, simCfnResourceCallerOptions(context.caller));
     }
 }
 function requireAlarmResourceType(resourceTypeName, operationSuffix) {

package/dist/service/cloudwatch/sim-cloudwatch-commands.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimCloudWatchAlarmActions } from "./alarm/action/sim-cloudwatch-alarm-actions.js";
 import { type SimCloudWatchAlarmTargets } from "./alarm/action/sim-cloudwatch-alarm-targets.js";
 import { SimCloudWatchAlarmStore } from "./alarm/sim-cloudwatch-alarm-store.js";

package/dist/service/cloudwatch/sim-cloudwatch-commands.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { SimCloudWatchAlarmActions } from "./alarm/action/sim-cloudwatch-alarm-actions.js";
 import { SimCloudWatchNoAlarmTargets, } from "./alarm/action/sim-cloudwatch-alarm-targets.js";
 import { SimCloudWatchAlarmSchedule } from "./alarm/sim-cloudwatch-alarm-schedule.js";
@@ -35,7 +35,8 @@ export class SimCloudWatchCommands {
     alarmActions;
     background;
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), alarmTargets = new SimCloudWatchNoAlarmTargets(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), alarmTargets = new SimCloudWatchNoAlarmTargets(), } = properties;
+        const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
         const authorizer = new SimCloudWatchAuthorizer({ iam, accountRegionScope });
         const metrics = new SimCloudWatchMetricStore();
         const alarms = new SimCloudWatchAlarmStore();

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoUserPoolClient } from "../../user-pool/client/sim-cognito-user-pool-client.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoClientCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -19,6 +20,6 @@ export declare class SimCfnCognitoClientCreator {
     /**
      * Create an app client from an AWS::Cognito::UserPoolClient Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoUserPoolClient>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoUserPoolClient>;
 }
 export {};

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-creator.js

@@ -16,14 +16,12 @@ export class SimCfnCognitoClientCreator {
     /**
      * Create an app client from an AWS::Cognito::UserPoolClient Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const clientProperties = new SimCfnCognitoClientProperties({
             resource,
             properties,
         });
-        const created = await this.cognito.createUserPoolClient({
-            input: clientProperties.createUserPoolClientInput(),
-        });
+        const created = await this.cognito.createUserPoolClient({ input: clientProperties.createUserPoolClientInput() }, options);
         const clientId = created.UserPoolClient?.ClientId;
         assertDefined(clientId, `sim Cognito app client id after CloudFormation creation for ${resource.logicalId}`);
         const client = this.cognito

package/dist/service/cognito/cfn/domain/sim-cfn-cognito-domain-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoUserPoolDomain } from "../../user-pool/domain/sim-cognito-user-pool-domain.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoDomainCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -20,6 +21,6 @@ export declare class SimCfnCognitoDomainCreator {
     /**
      * Create a domain from an AWS::Cognito::UserPoolDomain Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoUserPoolDomain>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoUserPoolDomain>;
 }
 export {};

package/dist/service/cognito/cfn/domain/sim-cfn-cognito-domain-creator.js

@@ -17,14 +17,12 @@ export class SimCfnCognitoDomainCreator {
     /**
      * Create a domain from an AWS::Cognito::UserPoolDomain Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const domainProperties = new SimCfnCognitoDomainProperties({
             resource,
             properties,
         });
-        await this.cognito.createUserPoolDomain({
-            input: domainProperties.createUserPoolDomainInput(),
-        });
+        await this.cognito.createUserPoolDomain({ input: domainProperties.createUserPoolDomainInput() }, options);
         const domain = this.cognito.findUserPoolDomainInAnyAccount(domainProperties.domain());
         assertDefined(domain, `sim Cognito domain ${domainProperties.domain()} after CloudFormation ` +
             `creation`);

package/dist/service/cognito/cfn/group/sim-cfn-cognito-group-creator.d.ts

@@ -2,6 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 import type { SimCognitoIdentityProvider } from "../../sim-cognito-identity-provider.js";
 import type { SimCognitoGroup } from "../../user-pool/group/sim-cognito-group.js";
+import type { SimCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 interface SimCfnCognitoGroupCreatorProperties {
     readonly cognito: SimCognitoIdentityProvider;
 }
@@ -18,6 +19,6 @@ export declare class SimCfnCognitoGroupCreator {
     /**
      * Create a group from an AWS::Cognito::UserPoolGroup Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCognitoGroup>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, options?: SimCfnResourceCallerOptions): Promise<SimCognitoGroup>;
 }
 export {};

package/dist/service/cognito/cfn/group/sim-cfn-cognito-group-creator.js

@@ -15,15 +15,13 @@ export class SimCfnCognitoGroupCreator {
     /**
      * Create a group from an AWS::Cognito::UserPoolGroup Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, options) {
         const groupProperties = new SimCfnCognitoGroupProperties({
             resource,
             properties,
         });
         const groupName = groupProperties.groupName();
-        await this.cognito.createGroup({
-            input: groupProperties.createGroupInput(),
-        });
+        await this.cognito.createGroup({ input: groupProperties.createGroupInput() }, options);
         const group = this.cognito
             .userPool(groupProperties.userPoolId())
             .findGroup(groupName);