@kensio/yulin 1.20.15 → 1.20.17

package/dist/service/cloudfront/cff/sim-cff-stage.d.ts

@@ -0,0 +1,23 @@
+import type { SimCloudFrontFunction } from "./sim-cloudfront-function.js";
+/**
+ * The two stages a CloudFront Function can be read from.
+ *
+ * A Function is created into DEVELOPMENT and reaches LIVE once it is
+ * published. LIVE is the copy a Distribution runs.
+ */
+export type SimCloudFrontFunctionStage = "DEVELOPMENT" | "LIVE";
+/**
+ * Read the stage a request asked for.
+ *
+ * CloudFront defaults an omitted `Stage` to DEVELOPMENT, the copy a Function
+ * is created into, and refuses a value that names neither stage.
+ */
+export declare function simCffRequestedStage(stage: string | undefined): SimCloudFrontFunctionStage;
+/**
+ * Whether a Function can be read from a stage.
+ *
+ * Every Function is in DEVELOPMENT from the moment it is created. It reaches
+ * LIVE once it is published, so a Function still waiting to publish answers to
+ * DEVELOPMENT alone.
+ */
+export declare function simCffInStage(cloudFrontFunction: SimCloudFrontFunction, stage: SimCloudFrontFunctionStage): boolean;

package/dist/service/cloudfront/cff/sim-cff-stage.js

@@ -0,0 +1,30 @@
+import { SimCloudFrontInvalidArgument } from "../error/sim-cloudfront.error.js";
+const simCffStages = new Set([
+    "DEVELOPMENT",
+    "LIVE",
+]);
+/**
+ * Read the stage a request asked for.
+ *
+ * CloudFront defaults an omitted `Stage` to DEVELOPMENT, the copy a Function
+ * is created into, and refuses a value that names neither stage.
+ */
+export function simCffRequestedStage(stage) {
+    if (stage === undefined) {
+        return "DEVELOPMENT";
+    }
+    if (!simCffStages.has(stage)) {
+        throw new SimCloudFrontInvalidArgument(`CloudFront Function stage ${stage} is neither DEVELOPMENT nor LIVE`);
+    }
+    return stage;
+}
+/**
+ * Whether a Function can be read from a stage.
+ *
+ * Every Function is in DEVELOPMENT from the moment it is created. It reaches
+ * LIVE once it is published, so a Function still waiting to publish answers to
+ * DEVELOPMENT alone.
+ */
+export function simCffInStage(cloudFrontFunction, stage) {
+    return stage === "DEVELOPMENT" || cloudFrontFunction.status !== "UNPUBLISHED";
+}

package/dist/service/cloudfront/cff/sim-cloudfront-function.d.ts

@@ -4,9 +4,10 @@ import type { Brand } from "../../../util/brand.type.js";
 import type { SimArn } from "../../aws/arn.js";
 import { type SimAwsAccountId } from "../../aws/sim-aws-account.js";
 import type { SimCloudFrontKeyValueStore } from "../key-value-store/sim-cf-key-value-store.js";
+import { SimCffConfiguration, type SimCffConfigurationProperties } from "./sim-cff-configuration.js";
 export type SimCloudFrontFunctionName = Brand<string, "SimCloudFrontFunctionName">;
 export type CloudFrontFunctionStatus = "UNPUBLISHED" | "UNASSOCIATED" | "ASSOCIATED";
-interface SimCloudFrontFunctionProperties {
+interface SimCloudFrontFunctionProperties extends SimCffConfigurationProperties {
     name: SimCloudFrontFunctionName | string;
     status?: CloudFrontFunctionStatus;
     readonly accountId?: SimAwsAccountId;
@@ -22,6 +23,10 @@ export declare class SimCloudFrontFunction {
     #private;
     readonly name: SimCloudFrontFunctionName;
     readonly accountId: SimAwsAccountId;
+    /**
+     * What this Function was created with, which every read of it reports.
+     */
+    readonly config: SimCffConfiguration;
     private readonly handlerFunction;
     private readonly eventAdapter;
     private readonly associatedKeyValueStore;

package/dist/service/cloudfront/cff/sim-cloudfront-function.js

@@ -1,5 +1,6 @@
 import { SimCffEventAdapter } from "./adapter/sim-cff-event-adapter.js";
 import { makeSimAwsAccountId, } from "../../aws/sim-aws-account.js";
+import { SimCffConfiguration, } from "./sim-cff-configuration.js";
 import { cffCloudFrontModule } from "./kvs/cff-cloudfront-module.js";
 import { simCffCloudFrontGlobal } from "./kvs/sim-cff-cloudfront-global.js";
 export const defaultCffHandler = (event) => {
@@ -14,6 +15,10 @@ export const defaultCffHandler = (event) => {
 export class SimCloudFrontFunction {
     name;
     accountId;
+    /**
+     * What this Function was created with, which every read of it reports.
+     */
+    config;
     #status;
     handlerFunction;
     eventAdapter;
@@ -23,6 +28,7 @@ export class SimCloudFrontFunction {
         this.name = name;
         this.#status = status;
         this.accountId = accountId;
+        this.config = new SimCffConfiguration(properties);
         this.handlerFunction = handlerFunction;
         this.eventAdapter = eventAdapter;
         this.associatedKeyValueStore = properties.keyValueStore;

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-config.d.ts

@@ -0,0 +1,27 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCloudFrontCachePolicy } from "../../cache-policy/sim-cf-cache-policy.js";
+/**
+ * Reads an AWS::CloudFront::CachePolicy Resource into a simulated policy.
+ *
+ * `Name` and `Comment` are what the policy carries. The cache key sections and
+ * the TTLs are read past: what they configure is a cache this simulation has
+ * yet to grow. A Resource missing its `Name` is refused, as CloudFormation
+ * refuses one.
+ */
+export declare class SimCfnCfCachePolicyConfig {
+    private readonly resource;
+    private readonly properties;
+    constructor(properties: {
+        readonly resource: SimCfnResource;
+        readonly properties: SimCfnTemplateValueRecord;
+    });
+    /**
+     * Build the simulated policy this Resource describes.
+     */
+    build(): SimCloudFrontCachePolicy;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    private refuse;
+}

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-config.js

@@ -0,0 +1,42 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCloudFrontCachePolicy } from "../../cache-policy/sim-cf-cache-policy.js";
+/**
+ * Reads an AWS::CloudFront::CachePolicy Resource into a simulated policy.
+ *
+ * `Name` and `Comment` are what the policy carries. The cache key sections and
+ * the TTLs are read past: what they configure is a cache this simulation has
+ * yet to grow. A Resource missing its `Name` is refused, as CloudFormation
+ * refuses one.
+ */
+export class SimCfnCfCachePolicyConfig {
+    resource;
+    properties;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * Build the simulated policy this Resource describes.
+     */
+    build() {
+        const config = this.properties["CachePolicyConfig"];
+        if (!isRecord(config)) {
+            return this.refuse("CachePolicyConfig must be an object");
+        }
+        const name = config["Name"];
+        if (typeof name !== "string") {
+            return this.refuse("CachePolicyConfig needs a string Name");
+        }
+        const comment = config["Comment"];
+        return new SimCloudFrontCachePolicy({
+            name,
+            ...(typeof comment === "string" && { comment }),
+        });
+    }
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    refuse(detail) {
+        throw new Error(`Invalid AWS::CloudFront::CachePolicy ${this.resource.logicalId}: ${detail}`);
+    }
+}

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-creator.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCloudFrontCachePolicy } from "../../cache-policy/sim-cf-cache-policy.js";
+interface SimCfnCfCachePolicyCreatorProperties {
+    readonly cloudFront: SimCloudFront;
+}
+/**
+ * Creates simulated cache policies from AWS::CloudFront::CachePolicy
+ * Resources.
+ */
+export declare class SimCfnCfCachePolicyCreator {
+    private readonly cloudFront;
+    constructor(properties: SimCfnCfCachePolicyCreatorProperties);
+    /**
+     * Create and store the policy one Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCloudFrontCachePolicy;
+    /**
+     * Remove a policy created from a Resource.
+     */
+    delete(resource: SimCfnResource): void;
+}
+export {};

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-creator.js

@@ -0,0 +1,32 @@
+import { SimCfnCfCachePolicyConfig } from "./sim-cfn-cf-cache-policy-config.js";
+/**
+ * Creates simulated cache policies from AWS::CloudFront::CachePolicy
+ * Resources.
+ */
+export class SimCfnCfCachePolicyCreator {
+    cloudFront;
+    constructor(properties) {
+        this.cloudFront = properties.cloudFront;
+    }
+    /**
+     * Create and store the policy one Resource describes.
+     */
+    create(resource, properties) {
+        const policy = new SimCfnCfCachePolicyConfig({
+            resource,
+            properties,
+        }).build();
+        this.cloudFront.addCachePolicy(policy);
+        return policy;
+    }
+    /**
+     * Remove a policy created from a Resource.
+     */
+    delete(resource) {
+        const policy = resource.simResource;
+        if (policy === undefined) {
+            return;
+        }
+        this.cloudFront.removeCachePolicy(policy.id);
+    }
+}

package/dist/service/cloudfront/cfn/distro/{sim-cfn-cf-distro-response-headers-policy.d.ts → sim-cfn-cf-distro-behavior-policies.d.ts}

@@ -2,8 +2,8 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 /**
- * The DistributionConfig to deploy, without a `ResponseHeadersPolicyId` naming
- * a response headers policy this simulation does not hold.
+ * The DistributionConfig to deploy, without a policy ID naming a response
+ * headers policy or a cache policy this simulation does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -14,10 +14,11 @@ import type { SimCloudFront } from "../../sim-cloudfront.js";
  * make with it. That is the same reason an absent `WebACLId` is left out here.
  *
  * So the property is left off that Behavior and recorded on
- * `stack.ignoredProperties`. The Behavior deploys and serves every response
- * without the policy's headers. A test that cares reads the record.
+ * `stack.ignoredProperties`. The Behavior deploys, and a test that cares reads
+ * the record. CloudFront's managed policies count as held, so a Behavior
+ * naming one keeps it.
  *
- * One Behavior losing its policy leaves the others holding theirs. CloudFront's
- * managed policies count as held, so a Behavior naming one keeps it.
+ * One Behavior losing a policy leaves the others holding theirs, and a
+ * Behavior losing one kind of policy keeps the other.
  */
-export declare function simCfnCfDistroWithHeldResponseHeadersPolicies(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, cloudFront: SimCloudFront): SimCloudFrontDistributionConfig;
+export declare function simCfnCfDistroWithHeldBehaviorPolicies(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, cloudFront: SimCloudFront): SimCloudFrontDistributionConfig;

package/dist/service/cloudfront/cfn/distro/{sim-cfn-cf-distro-response-headers-policy.js → sim-cfn-cf-distro-behavior-policies.js}

@@ -1,39 +1,12 @@
 import { normalizeSimCfList } from "../../command/create-distribution/sim-cf-normalize-list.js";
+import { SimCfnCfDistroPolicyDrops } from "./sim-cfn-cf-distro-policy-drops.js";
 /**
  * The path a dropped policy on the default Behavior is recorded under.
  */
 const defaultBehaviorPath = "DistributionConfig.DefaultCacheBehavior";
 /**
- * Takes a `ResponseHeadersPolicyId` naming a policy this simulation does not
- * hold off the Behavior that named it, and records each one.
- */
-class SimCfnCfDistroPolicyDrops {
-    resource;
-    cloudFront;
-    count = 0;
-    constructor(resource, cloudFront) {
-        this.resource = resource;
-        this.cloudFront = cloudFront;
-    }
-    /**
-     * One Behavior, keeping a policy that is here and dropping one that is not.
-     */
-    heldPolicy(behavior, behaviorPath) {
-        const policyId = behavior.ResponseHeadersPolicyId;
-        if (policyId === undefined ||
-            this.cloudFront.getResponseHeadersPolicyById(policyId) !== undefined) {
-            return behavior;
-        }
-        this.count += 1;
-        this.resource.ignoreProperty(`${behaviorPath}.ResponseHeadersPolicyId`, `response headers policy ${policyId} is not held by this simulation, ` +
-            `so the Behavior is deployed without one and serves every response ` +
-            `without the headers that policy would have set`);
-        return { ...behavior, ResponseHeadersPolicyId: undefined };
-    }
-}
-/**
- * The DistributionConfig to deploy, without a `ResponseHeadersPolicyId` naming
- * a response headers policy this simulation does not hold.
+ * The DistributionConfig to deploy, without a policy ID naming a response
+ * headers policy or a cache policy this simulation does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -44,13 +17,14 @@ class SimCfnCfDistroPolicyDrops {
  * make with it. That is the same reason an absent `WebACLId` is left out here.
  *
  * So the property is left off that Behavior and recorded on
- * `stack.ignoredProperties`. The Behavior deploys and serves every response
- * without the policy's headers. A test that cares reads the record.
+ * `stack.ignoredProperties`. The Behavior deploys, and a test that cares reads
+ * the record. CloudFront's managed policies count as held, so a Behavior
+ * naming one keeps it.
  *
- * One Behavior losing its policy leaves the others holding theirs. CloudFront's
- * managed policies count as held, so a Behavior naming one keeps it.
+ * One Behavior losing a policy leaves the others holding theirs, and a
+ * Behavior losing one kind of policy keeps the other.
  */
-export function simCfnCfDistroWithHeldResponseHeadersPolicies(resource, distributionConfig, cloudFront) {
+export function simCfnCfDistroWithHeldBehaviorPolicies(resource, distributionConfig, cloudFront) {
     const drops = new SimCfnCfDistroPolicyDrops(resource, cloudFront);
     const defaultCacheBehavior = distroDefaultBehavior(drops, distributionConfig);
     const cacheBehaviors = distroCacheBehaviors(drops, distributionConfig);
@@ -71,7 +45,7 @@ function distroDefaultBehavior(drops, distributionConfig) {
     if (behavior === undefined) {
         return undefined;
     }
-    return drops.heldPolicy(behavior, defaultBehaviorPath);
+    return drops.heldPolicies(behavior, defaultBehaviorPath);
 }
 /**
  * Every path-based cache Behavior, each without a policy that is not here.
@@ -88,6 +62,6 @@ function distroCacheBehaviors(drops, distributionConfig) {
     }
     return {
         ...behaviors,
-        Items: items.map((behavior, index) => drops.heldPolicy(behavior, `DistributionConfig.CacheBehaviors.${behavior.PathPattern ?? String(index)}`)),
+        Items: items.map((behavior, index) => drops.heldPolicies(behavior, `DistributionConfig.CacheBehaviors.${behavior.PathPattern ?? String(index)}`)),
     };
 }

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts

@@ -10,11 +10,12 @@ interface SimCfnCfDistroCreatorProperties {
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` naming a policy it does not hold. CloudFront has no
- * Resource of its own for any of the three, so all of them live on the
- * Distribution itself, and refusing one would take the Distribution down over
- * something that was never the point of the template. The site a local dev
- * server and a suite of tests make requests to has to survive that.
+ * `ResponseHeadersPolicyId` or `CachePolicyId` naming a policy it does not
+ * hold. CloudFront has no Resource of its own for any of them, so all of them
+ * live on the Distribution itself, and refusing one would take the
+ * Distribution down over something that was never the point of the template.
+ * The site a local dev server and a suite of tests make requests to has to
+ * survive that.
  */
 export declare class SimCfnCfDistroCreator {
     private readonly cloudFront;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -1,7 +1,7 @@
 import { assertDefined, assertNotNull, } from "../../../../util/type-guard/defined.js";
 import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-validator.js";
 import { simCfnCfDistroWithRunnableEdgeAssociations } from "./sim-cfn-cf-distro-edge-associations.js";
-import { simCfnCfDistroWithHeldResponseHeadersPolicies } from "./sim-cfn-cf-distro-response-headers-policy.js";
+import { simCfnCfDistroWithHeldBehaviorPolicies } from "./sim-cfn-cf-distro-behavior-policies.js";
 import { simCfnCfDistroWithoutAbsentWebAcl } from "./sim-cfn-cf-distro-web-acl.js";
 import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
@@ -9,11 +9,12 @@ import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/ca
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` naming a policy it does not hold. CloudFront has no
- * Resource of its own for any of the three, so all of them live on the
- * Distribution itself, and refusing one would take the Distribution down over
- * something that was never the point of the template. The site a local dev
- * server and a suite of tests make requests to has to survive that.
+ * `ResponseHeadersPolicyId` or `CachePolicyId` naming a policy it does not
+ * hold. CloudFront has no Resource of its own for any of them, so all of them
+ * live on the Distribution itself, and refusing one would take the
+ * Distribution down over something that was never the point of the template.
+ * The site a local dev server and a suite of tests make requests to has to
+ * survive that.
  */
 export class SimCfnCfDistroCreator {
     cloudFront;
@@ -49,5 +50,5 @@ export class SimCfnCfDistroCreator {
  * act on, each recorded on the Resource.
  */
 function deployableConfig(resource, distributionConfig, simAws, cloudFront) {
-    return simCfnCfDistroWithoutAbsentWebAcl(resource, simCfnCfDistroWithHeldResponseHeadersPolicies(resource, simCfnCfDistroWithRunnableEdgeAssociations(resource, distributionConfig, simAws), cloudFront), simAws);
+    return simCfnCfDistroWithoutAbsentWebAcl(resource, simCfnCfDistroWithHeldBehaviorPolicies(resource, simCfnCfDistroWithRunnableEdgeAssociations(resource, distributionConfig, simAws), cloudFront), simAws);
 }

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-policy-drops.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFrontCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+/**
+ * Takes a policy ID naming a policy this simulation does not hold off the
+ * Behavior that named it, and records each one on the Resource.
+ */
+export declare class SimCfnCfDistroPolicyDrops {
+    private readonly resource;
+    private readonly cloudFront;
+    count: number;
+    constructor(resource: SimCfnResource, cloudFront: SimCloudFront);
+    /**
+     * One Behavior, keeping the policies that are here and dropping those that
+     * are not.
+     */
+    heldPolicies(behavior: SimCloudFrontCacheBehaviorConfig, behaviorPath: string): SimCloudFrontCacheBehaviorConfig;
+    /**
+     * One policy property of one Behavior, dropped where the ID names nothing
+     * this simulation holds.
+     */
+    private heldPolicy;
+}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-policy-drops.js

@@ -0,0 +1,50 @@
+/**
+ * Takes a policy ID naming a policy this simulation does not hold off the
+ * Behavior that named it, and records each one on the Resource.
+ */
+export class SimCfnCfDistroPolicyDrops {
+    resource;
+    cloudFront;
+    count = 0;
+    constructor(resource, cloudFront) {
+        this.resource = resource;
+        this.cloudFront = cloudFront;
+    }
+    /**
+     * One Behavior, keeping the policies that are here and dropping those that
+     * are not.
+     */
+    heldPolicies(behavior, behaviorPath) {
+        const withHeaders = this.heldPolicy(behavior, behaviorPath, "ResponseHeadersPolicyId", (policyId) => this.cloudFront.getResponseHeadersPolicyById(policyId) !== undefined, headersPolicyDropReason);
+        return this.heldPolicy(withHeaders, behaviorPath, "CachePolicyId", (policyId) => this.cloudFront.getCachePolicyById(policyId) !== undefined, cachePolicyDropReason);
+    }
+    /**
+     * One policy property of one Behavior, dropped where the ID names nothing
+     * this simulation holds.
+     */
+    heldPolicy(behavior, behaviorPath, property, held, reason) {
+        // oxlint-disable-next-line security/detect-object-injection
+        const policyId = behavior[property];
+        if (policyId === undefined || held(policyId)) {
+            return behavior;
+        }
+        this.count += 1;
+        this.resource.ignoreProperty(`${behaviorPath}.${property}`, reason(policyId));
+        return { ...behavior, [property]: undefined };
+    }
+}
+/**
+ * What a Behavior loses along with a response headers policy.
+ */
+function headersPolicyDropReason(policyId) {
+    return (`response headers policy ${policyId} is not held by this simulation, so ` +
+        `the Behavior is deployed without one and serves every response without ` +
+        `the headers that policy would have set`);
+}
+/**
+ * What a Behavior loses along with a cache policy.
+ */
+function cachePolicyDropReason(policyId) {
+    return (`cache policy ${policyId} is not held by this simulation, so the ` +
+        `Behavior is deployed without one and reports no CachePolicyId`);
+}

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.d.ts

@@ -9,6 +9,7 @@ export declare class SimCloudFrontCloudFormationResourceFactory implements SimCf
     private readonly functionCreator;
     private readonly distroDeleter;
     private readonly responseHeadersPolicyCreator;
+    private readonly cachePolicyCreator;
     private readonly originAccessControlCreator;
     private readonly keyValueStoreCreator;
     constructor(cloudFront: SimCloudFront);

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js

@@ -3,6 +3,7 @@ import { SimCfnCfDistroCreator } from "./distro/sim-cfn-cf-distro-creator.js";
 import { SimCfnCffCreator } from "./cff/sim-cfn-cff-creator.js";
 import { SimCfnCfDistroDeleter } from "./distro/sim-cfn-cf-distro-deleter.js";
 import { SimCfnCfResponseHeadersPolicyCreator } from "./response-headers-policy/sim-cfn-cf-rh-policy-creator.js";
+import { SimCfnCfCachePolicyCreator } from "./cache-policy/sim-cfn-cf-cache-policy-creator.js";
 import { SimCfnCfOriginAccessControlCreator } from "./origin-access-control/sim-cfn-cf-oac-creator.js";
 import { SimCfnCfKeyValueStoreCreator } from "./key-value-store/sim-cfn-cf-kvs-creator.js";
 /**
@@ -13,6 +14,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
     functionCreator;
     distroDeleter;
     responseHeadersPolicyCreator;
+    cachePolicyCreator;
     originAccessControlCreator;
     keyValueStoreCreator;
     constructor(cloudFront) {
@@ -21,6 +23,7 @@ export class SimCloudFrontCloudFormationResourceFactory {
         this.distroDeleter = new SimCfnCfDistroDeleter({ cloudFront });
         this.responseHeadersPolicyCreator =
             new SimCfnCfResponseHeadersPolicyCreator({ cloudFront });
+        this.cachePolicyCreator = new SimCfnCfCachePolicyCreator({ cloudFront });
         this.originAccessControlCreator = new SimCfnCfOriginAccessControlCreator({
             cloudFront,
         });
@@ -43,6 +46,9 @@ export class SimCloudFrontCloudFormationResourceFactory {
             case "ResponseHeadersPolicy": {
                 return this.responseHeadersPolicyCreator.create(resource, properties);
             }
+            case "CachePolicy": {
+                return this.cachePolicyCreator.create(resource, properties);
+            }
             case "OriginAccessControl": {
                 return this.originAccessControlCreator.create(resource, properties);
             }
@@ -73,6 +79,10 @@ export class SimCloudFrontCloudFormationResourceFactory {
                 this.responseHeadersPolicyCreator.delete(resource);
                 return;
             }
+            case "CachePolicy": {
+                this.cachePolicyCreator.delete(resource);
+                return;
+            }
             case "OriginAccessControl": {
                 this.originAccessControlCreator.delete(resource);
                 return;

package/dist/service/cloudfront/command/create-distribution/create-distribution.command.d.ts

@@ -144,6 +144,7 @@ export interface SimCloudFrontDefaultCacheBehaviorConfig {
     readonly FunctionAssociations?: SimCloudFrontFunctionAssociations | undefined;
     readonly LambdaFunctionAssociations?: SimCloudFrontLambdaFunctionAssociations | undefined;
     readonly ResponseHeadersPolicyId?: string | undefined;
+    readonly CachePolicyId?: string | undefined;
 }
 /**
  * Minimal structural sim CloudFront cache behavior config.

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.d.ts

@@ -7,6 +7,7 @@ import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfro
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import type { BackgroundScheduler } from "../../../../util/background/background.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
@@ -21,6 +22,7 @@ interface CreateDistributionCommandHandlerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly acmRegistry?: SimAcmRegistry | undefined;

package/dist/service/cloudfront/command/create-function/create-function.handler.js

@@ -1,6 +1,6 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCloudFrontFunction, } from "../../cff/sim-cloudfront-function.js";
-import { CffUint8ArrayFunctionCodeExtractor } from "../../cff/function-code-input/cff-function-code-input.js";
+import { cffFunctionCodeSource, CffUint8ArrayFunctionCodeExtractor, } from "../../cff/function-code-input/cff-function-code-input.js";
 import { cffCloudFrontModule } from "../../cff/kvs/cff-cloudfront-module.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
@@ -50,6 +50,12 @@ export class CreateFunctionCommandHandler {
             accountId: this.accountId,
             handlerFunction,
             keyValueStore,
+            // The config a Function was created with is what every read of it
+            // reports, so it is kept rather than only acted on here.
+            comment: command.input.FunctionConfig?.Comment,
+            runtime: command.input.FunctionConfig?.Runtime,
+            functionCode: cffFunctionCodeSource(command.input.FunctionCode),
+            createdTime: this.background.now(),
         });
         this.cloudFrontFunctions.set(simCff.name, simCff);
         // New CFF becomes available async in background.

package/dist/service/cloudfront/command/function/sim-cf-describe-function.d.ts

@@ -0,0 +1,22 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCfFunctionAccess } from "./sim-cf-function-access.js";
+import type { SimDescribeFunctionCommand, SimDescribeFunctionCommandOutput } from "./sim-cf-function-command.types.js";
+/**
+ * Simulated CloudFront DescribeFunction command.
+ *
+ * This is the Function's configuration without its code. GetFunction is the
+ * one that answers with the code.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DescribeFunctionCommand/
+ */
+export declare class SimCfDescribeFunction {
+    private readonly access;
+    private static readonly action;
+    constructor(access: SimCfFunctionAccess);
+    /**
+     * Describe one sim CloudFront Function.
+     */
+    handle(command: SimDescribeFunctionCommand, options?: {
+        readonly caller?: SimAwsCaller;
+    }): Promise<SimDescribeFunctionCommandOutput>;
+}

package/dist/service/cloudfront/command/function/sim-cf-describe-function.js

@@ -0,0 +1,32 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCffRequestedStage } from "../../cff/sim-cff-stage.js";
+import { simCfFunctionSummary } from "./sim-cf-function-summary.js";
+/**
+ * Simulated CloudFront DescribeFunction command.
+ *
+ * This is the Function's configuration without its code. GetFunction is the
+ * one that answers with the code.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DescribeFunctionCommand/
+ */
+export class SimCfDescribeFunction {
+    access;
+    static action = "cloudfront:DescribeFunction";
+    constructor(access) {
+        this.access = access;
+    }
+    /**
+     * Describe one sim CloudFront Function.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Name, "DescribeFunctionCommand.input.Name");
+        const stage = simCffRequestedStage(command.input.Stage);
+        await this.access.background.sequence();
+        const cloudFrontFunction = this.access.authorizedByName(SimCfDescribeFunction.action, command.input.Name, stage, options?.caller);
+        return {
+            $metadata: {},
+            FunctionSummary: simCfFunctionSummary(cloudFrontFunction, stage),
+            ETag: cloudFrontFunction.config.etag,
+        };
+    }
+}