@kensio/yulin 1.20.15 → 1.20.17

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,4 +1,6 @@
 import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
+import { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -10,6 +12,6 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * same set of configurators.
  */
 export function makeSimCloudFrontDistributionConfigurator(properties) {
-    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies);
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy, new SimCfDistributionWebAcl(properties.webAclResolver));
+    const behaviorPolicies = new SimCfBehaviorPolicies(new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies), new SimCfBehaviorCachePolicy(properties.cachePolicies));
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(behaviorPolicies), behaviorPolicies, new SimCfDistributionWebAcl(properties.webAclResolver));
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.d.ts

@@ -1,12 +1,12 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 /**
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export declare class SimCloudFrontBehaviorConfigurator {
-    private readonly responseHeadersPolicy;
-    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    private readonly policies;
+    constructor(policies: SimCfBehaviorPolicies);
     /**
      * Configure the default Cache Behavior on a Distribution.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.js

@@ -4,16 +4,16 @@ import { simCfBehaviorProperties } from "./sim-cf-behavior-properties.js";
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export class SimCloudFrontBehaviorConfigurator {
-    responseHeadersPolicy;
-    constructor(responseHeadersPolicy) {
-        this.responseHeadersPolicy = responseHeadersPolicy;
+    policies;
+    constructor(policies) {
+        this.policies = policies;
     }
     /**
      * Configure the default Cache Behavior on a Distribution.
      */
     configureDefaultCacheBehavior(distribution, cacheBehavior) {
         assertDefined(cacheBehavior, "CloudFront DefaultCacheBehavior");
-        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy));
+        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.policies));
     }
     /**
      * Configure a Cache Behavior on a Distribution.
@@ -22,7 +22,7 @@ export class SimCloudFrontBehaviorConfigurator {
         assertDefined(cacheBehavior.PathPattern, "CloudFront CacheBehavior PathPattern");
         distribution.addBehavior({
             pathPattern: cacheBehavior.PathPattern,
-            ...simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy),
+            ...simCfBehaviorProperties(cacheBehavior, this.policies),
         });
     }
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts

@@ -2,7 +2,7 @@ import type { SimCloudFrontDistributionConfig } from "../../command/create-distr
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
 import type { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-configurator.js";
 import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
@@ -24,10 +24,10 @@ import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-
 export declare class SimCloudFrontDistributionConfigurator {
     private readonly originConfigurator;
     private readonly behaviorConfigurator;
-    private readonly responseHeadersPolicy;
+    private readonly behaviorPolicies;
     private readonly webAcl;
     private readonly customErrorConfigurator;
-    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, webAcl: SimCfDistributionWebAcl);
+    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, behaviorPolicies: SimCfBehaviorPolicies, webAcl: SimCfDistributionWebAcl);
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
      * is applied.

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js

@@ -22,13 +22,13 @@ import { findSimCfRedundantOrigins, warnSimCfRedundantOrigins, } from "../../ori
 export class SimCloudFrontDistributionConfigurator {
     originConfigurator;
     behaviorConfigurator;
-    responseHeadersPolicy;
+    behaviorPolicies;
     webAcl;
     customErrorConfigurator = new SimCloudFrontCustomErrorConfigurator();
-    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy, webAcl) {
+    constructor(originConfigurator, behaviorConfigurator, behaviorPolicies, webAcl) {
         this.originConfigurator = originConfigurator;
         this.behaviorConfigurator = behaviorConfigurator;
-        this.responseHeadersPolicy = responseHeadersPolicy;
+        this.behaviorPolicies = behaviorPolicies;
         this.webAcl = webAcl;
     }
     /**
@@ -42,7 +42,7 @@ export class SimCloudFrontDistributionConfigurator {
      * worth undoing.
      */
     assertConfigurable(distributionConfig) {
-        this.responseHeadersPolicy.assertAllExist(distributionConfig);
+        this.behaviorPolicies.assertAllExist(distributionConfig);
         this.webAcl.assertUsable(distributionConfig);
     }
     /**

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.d.ts

@@ -1,4 +1,5 @@
 import type { SimAcmRegistry } from "../../acm/registry/sim-acm-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
@@ -11,7 +12,7 @@ import type { SimCfEdgeFunctions } from "../edge/sim-cf-edge-functions.js";
  *
  * A DistributionConfig is mostly references: a Bucket or a hostname per
  * Origin, a certificate, an origin access control, a response headers policy,
- * a web ACL, a Lambda@Edge function version. None of them belongs to
+ * a cache policy, a web ACL, a Lambda@Edge function version. None of them belongs to
  * CloudFront, and creation and update resolve every one of them the same way,
  * so they travel together.
  */
@@ -21,6 +22,7 @@ export interface SimCfDistributionConfigurationState {
     readonly acmRegistry: SimAcmRegistry | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver: SimCfWebAclResolver | undefined;
     readonly edgeFunctions: SimCfEdgeFunctions | undefined;
 }

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts

@@ -1,4 +1,5 @@
 import type { SimCloudFrontDistributionConfig } from "../command/create-distribution/create-distribution.command.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
@@ -12,6 +13,7 @@ interface SimCloudFrontDistributionReconfigurerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts

@@ -101,6 +101,27 @@ export declare class SimCloudFrontResponseHeadersPolicyAlreadyExists extends Sim
     readonly name = "ResponseHeadersPolicyAlreadyExists";
     constructor(message: string);
 }
+/**
+ * Simulated CloudFront NoSuchCachePolicy error.
+ *
+ * What CloudFront answers when a Behavior's `CachePolicyId` names no cache
+ * policy the account holds, at Distribution create or update time rather than
+ * when a request first needs the policy.
+ */
+export declare class SimCloudFrontNoSuchCachePolicy extends SimCloudFrontError {
+    readonly name = "NoSuchCachePolicy";
+    constructor(message: string);
+}
+/**
+ * Simulated CloudFront CachePolicyAlreadyExists error.
+ *
+ * CloudFront requires a cache policy name to be unique within an account, so a
+ * second policy claiming a name is refused rather than created.
+ */
+export declare class SimCloudFrontCachePolicyAlreadyExists extends SimCloudFrontError {
+    readonly name = "CachePolicyAlreadyExists";
+    constructor(message: string);
+}
 /**
  * Simulated CloudFront InvalidOriginAccessControl error.
  *

package/dist/service/cloudfront/error/sim-cloudfront.error.js

@@ -118,6 +118,31 @@ export class SimCloudFrontResponseHeadersPolicyAlreadyExists extends SimCloudFro
         super(message, { httpStatusCode: 409 });
     }
 }
+/**
+ * Simulated CloudFront NoSuchCachePolicy error.
+ *
+ * What CloudFront answers when a Behavior's `CachePolicyId` names no cache
+ * policy the account holds, at Distribution create or update time rather than
+ * when a request first needs the policy.
+ */
+export class SimCloudFrontNoSuchCachePolicy extends SimCloudFrontError {
+    name = "NoSuchCachePolicy";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated CloudFront CachePolicyAlreadyExists error.
+ *
+ * CloudFront requires a cache policy name to be unique within an account, so a
+ * second policy claiming a name is refused rather than created.
+ */
+export class SimCloudFrontCachePolicyAlreadyExists extends SimCloudFrontError {
+    name = "CachePolicyAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}
 /**
  * Simulated CloudFront InvalidOriginAccessControl error.
  *

package/dist/service/cloudfront/key-value-store/sim-cf-key-value-store-access.js

@@ -1,4 +1,4 @@
-import { SimIamAccessDenied } from "../../iam/error/sim-iam.error.js";
+import { simCfAuthorize } from "../sim-cf-authorize.js";
 /**
  * What every key value store command needs: the stores, IAM, and the clock.
  *
@@ -21,15 +21,7 @@ export class SimCfKeyValueStoreAccess {
      * Ensure the caller may take an action on a key value store ARN.
      */
     authorize(action, resource, caller) {
-        const decision = this.iam.authorize({ action, resource, caller });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                reason: decision.denialReason,
-                action,
-                resource,
-            });
-        }
+        simCfAuthorize({ iam: this.iam, action, resource, caller });
     }
     /**
      * Ensure the caller may take an action on any key value store.

package/dist/service/cloudfront/key-value-store/sim-cf-key-value-store.js

@@ -1,6 +1,7 @@
 import { faker } from "@faker-js/faker";
 import { makeSimAwsAccountId, } from "../../aws/sim-aws-account.js";
 import { SimCloudFrontPreconditionFailed } from "../error/sim-cf-key-value-store.error.js";
+import { makeSimCloudFrontETag } from "../sim-cf-etag.js";
 import { SimCloudFrontKeyValueStoreKeys, } from "./sim-cf-key-value-store-keys.js";
 /**
  * Simulated CloudFront key value store.
@@ -175,5 +176,5 @@ export function makeKeyValueStoreId() {
  * Generate a fake ETag, in the shape CloudFront gives one.
  */
 export function makeKeyValueStoreETag() {
-    return faker.helpers.fromRegExp(/E[0-9A-Z]{13}/);
+    return makeSimCloudFrontETag();
 }

package/dist/service/cloudfront/sdk/sim-cloudfront-sdk-command-router.js

@@ -23,6 +23,18 @@ export class SimCloudFrontSdkCommandRouter {
                 "DeleteFunctionCommand",
                 async (command, context) => await simCloudFront.deleteFunction(command, simSdkCallerOptions(context)),
             ],
+            [
+                "ListFunctionsCommand",
+                async (command, context) => await simCloudFront.listFunctions(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DescribeFunctionCommand",
+                async (command, context) => await simCloudFront.describeFunction(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetFunctionCommand",
+                async (command, context) => await simCloudFront.getFunction(command, simSdkCallerOptions(context)),
+            ],
             [
                 "GetDistributionCommand",
                 async (command, context) => await simCloudFront.getDistribution(command, simSdkCallerOptions(context)),

package/dist/service/cloudfront/sim-cf-authorize.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimCfAuthorizeProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly action: string;
+    readonly resource: string;
+    readonly caller?: SimAwsCaller | undefined;
+}
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export declare function simCfAuthorize(properties: SimCfAuthorizeProperties): void;
+export {};

package/dist/service/cloudfront/sim-cf-authorize.js

@@ -0,0 +1,19 @@
+import { SimIamAccessDenied } from "../iam/error/sim-iam.error.js";
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export function simCfAuthorize(properties) {
+    const { iam, action, resource, caller } = properties;
+    const decision = iam.authorize({ action, resource, caller });
+    if (decision.isDenied) {
+        throw new SimIamAccessDenied({
+            principal: decision.caller.principal,
+            reason: decision.denialReason,
+            action,
+            resource,
+        });
+    }
+}

package/dist/service/cloudfront/sim-cf-etag.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export declare function makeSimCloudFrontETag(): string;

package/dist/service/cloudfront/sim-cf-etag.js

@@ -0,0 +1,10 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export function makeSimCloudFrontETag() {
+    return faker.helpers.fromRegExp(/E[0-9A-Z]{13}/);
+}

package/dist/service/cloudfront/sim-cloudfront-commands.d.ts

@@ -5,10 +5,8 @@ import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-sco
 import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
 import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimCreateDistributionCommand, SimCreateDistributionCommandOutput } from "./command/create-distribution/create-distribution.command.js";
-import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
-import { type SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";
+import type { SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";
 import type { SimDeleteDistributionCommand, SimDeleteDistributionCommandOutput } from "./command/delete-distribution/delete-distribution.command.js";
-import type { SimDeleteFunctionCommand, SimDeleteFunctionCommandOutput } from "./command/delete-function/delete-function.command.js";
 import type { SimGetDistributionCommand, SimGetDistributionCommandOutput } from "./command/get-distribution/get-distribution.command.js";
 import type { SimUpdateDistributionCommand, SimUpdateDistributionCommandOutput } from "./command/update-distribution/update-distribution.command.js";
 import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "./distribution/sim-cloudfront-distribution.js";
@@ -16,11 +14,13 @@ import type { SimCfCustomOriginDispatcher } from "./origin/custom/sim-cf-custom-
 import { type SimCloudFrontS3OriginResolver } from "./origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "./origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
 import { SimCloudFrontRegistry } from "./registry/sim-cloud-front-registry.js";
 import type { SimCfWebAclResolver } from "./web-acl/sim-cf-web-acl.js";
 import type { SimCfEdgeFunctions } from "./edge/sim-cf-edge-functions.js";
 import { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-store-commands.js";
 import { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
+import { SimCfFunctionCommands } from "./cff/sim-cf-function-commands.js";
 /**
  * How one simulated CloudFront is put together.
  */
@@ -43,6 +43,7 @@ interface SimCloudFrontCommandsProperties extends SimCloudFrontProperties {
     readonly cloudFrontFunctions: SimCloudFrontFunctionMap;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
 }
 /**
  * Options carried by any simulated CloudFront request.
@@ -75,8 +76,11 @@ export declare class SimCloudFrontCommands {
      * well as by the Distribution commands, which check one can be associated.
      */
     readonly edgeFunctions: SimCfEdgeFunctions | undefined;
+    /**
+     * The CloudFront Function commands, and the Functions they work on.
+     */
+    readonly functions: SimCfFunctionCommands;
     private readonly distributionState;
-    private readonly functionState;
     private readonly configurationState;
     constructor(properties: SimCloudFrontCommandsProperties);
     /**
@@ -95,13 +99,5 @@ export declare class SimCloudFrontCommands {
      * Handle a Delete Distribution Command from the SDK.
      */
     deleteDistribution(command: SimDeleteDistributionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDeleteDistributionCommandOutput>;
-    /**
-     * Handle a Create Function Command from the SDK.
-     */
-    createFunction(command: SimCreateFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimCreateFunctionCommandOutput>;
-    /**
-     * Handle a Delete Function Command from the SDK.
-     */
-    deleteFunction(command: SimDeleteFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDeleteFunctionCommandOutput>;
 }
 export {};

package/dist/service/cloudfront/sim-cloudfront-commands.js

@@ -1,9 +1,7 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simIamGlobalServiceRegion, simIamInRegion, } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { CreateDistributionCommandHandler } from "./command/create-distribution/create-distribution.handler.js";
-import { CreateFunctionCommandHandler, } from "./command/create-function/create-function.handler.js";
 import { DeleteDistributionCommandHandler } from "./command/delete-distribution/delete-distribution.handler.js";
-import { DeleteFunctionCommandHandler } from "./command/delete-function/delete-function.handler.js";
 import { GetDistributionCommandHandler } from "./command/get-distribution/get-distribution.handler.js";
 import { UpdateDistributionCommandHandler } from "./command/update-distribution/update-distribution.handler.js";
 import { emptyCloudFrontS3OriginResolver, } from "./origin/s3/sim-cloudfront-s3-origin.js";
@@ -13,6 +11,7 @@ import { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-s
 import { SimCloudFrontKeyValueStoreRegistry } from "./key-value-store/sim-cf-key-value-store-registry.js";
 import { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
 import { SimCffKeyValueStoreUsers } from "./cff/kvs/sim-cff-key-value-store-users.js";
+import { SimCfFunctionCommands } from "./cff/sim-cf-function-commands.js";
 /**
  * The commands of one simulated CloudFront, and the state they share.
  *
@@ -37,8 +36,11 @@ export class SimCloudFrontCommands {
      * well as by the Distribution commands, which check one can be associated.
      */
     edgeFunctions;
+    /**
+     * The CloudFront Function commands, and the Functions they work on.
+     */
+    functions;
     distributionState;
-    functionState;
     configurationState;
     constructor(properties) {
         const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
@@ -54,13 +56,13 @@ export class SimCloudFrontCommands {
             iam,
             background,
         };
-        this.functionState = {
+        this.functions = new SimCfFunctionCommands({
             accountId,
             cloudFrontFunctions,
             iam,
             background,
             keyValueStores,
-        };
+        });
         this.configurationState = {
             s3OriginResolver,
             customOriginDispatcher,
@@ -69,6 +71,7 @@ export class SimCloudFrontCommands {
             edgeFunctions,
             originAccessControls: properties.originAccessControls,
             responseHeadersPolicies: properties.responseHeadersPolicies,
+            cachePolicies: properties.cachePolicies,
         };
         const keyValueStoreAccess = new SimCfKeyValueStoreAccess({
             accountId,
@@ -111,16 +114,4 @@ export class SimCloudFrontCommands {
     async deleteDistribution(command, options) {
         return await new DeleteDistributionCommandHandler(this.distributionState).handle(command, options);
     }
-    /**
-     * Handle a Create Function Command from the SDK.
-     */
-    async createFunction(command, options) {
-        return await new CreateFunctionCommandHandler(this.functionState).handle(command, options);
-    }
-    /**
-     * Handle a Delete Function Command from the SDK.
-     */
-    async deleteFunction(command, options) {
-        return await new DeleteFunctionCommandHandler(this.functionState).handle(command, options);
-    }
 }

package/dist/service/cloudfront/sim-cloudfront-policies.d.ts

@@ -0,0 +1,43 @@
+import type { SimCloudFrontCachePolicy, SimCloudFrontCachePolicyId } from "./cache-policy/sim-cf-cache-policy.js";
+import { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
+import type { SimCloudFrontResponseHeadersPolicy, SimCloudFrontResponseHeadersPolicyId } from "./response-headers-policy/sim-cf-response-headers-policy.js";
+import { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+/**
+ * The policies one simulated CloudFront holds.
+ *
+ * A cache Behavior names a response headers policy and a cache policy by ID,
+ * and both are stored here. Neither has a create command in this simulation,
+ * so CloudFormation is the only thing that makes one, and these methods are
+ * how it hands a policy over. `SimCloudFront` extends this, and a caller
+ * reaches the policies on the one service object.
+ */
+export declare class SimCloudFrontPolicies {
+    protected readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    protected readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    /**
+     * Store a simulated response headers policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addResponseHeadersPolicy(policy: SimCloudFrontResponseHeadersPolicy): void;
+    /**
+     * Forget a simulated response headers policy.
+     */
+    removeResponseHeadersPolicy(policyId: SimCloudFrontResponseHeadersPolicyId): void;
+    /**
+     * Get a simulated response headers policy by ID.
+     */
+    getResponseHeadersPolicyById(policyId: SimCloudFrontResponseHeadersPolicyId | string): SimCloudFrontResponseHeadersPolicy | undefined;
+    /**
+     * Store a simulated cache policy. A name another policy already holds is
+     * refused, as CloudFront refuses one.
+     */
+    addCachePolicy(policy: SimCloudFrontCachePolicy): void;
+    /**
+     * Forget a simulated cache policy.
+     */
+    removeCachePolicy(policyId: SimCloudFrontCachePolicyId): void;
+    /**
+     * Get a simulated cache policy by ID.
+     */
+    getCachePolicyById(policyId: SimCloudFrontCachePolicyId | string): SimCloudFrontCachePolicy | undefined;
+}

package/dist/service/cloudfront/sim-cloudfront-policies.js

@@ -0,0 +1,53 @@
+import { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
+import { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+/**
+ * The policies one simulated CloudFront holds.
+ *
+ * A cache Behavior names a response headers policy and a cache policy by ID,
+ * and both are stored here. Neither has a create command in this simulation,
+ * so CloudFormation is the only thing that makes one, and these methods are
+ * how it hands a policy over. `SimCloudFront` extends this, and a caller
+ * reaches the policies on the one service object.
+ */
+export class SimCloudFrontPolicies {
+    responseHeadersPolicies = new SimCloudFrontResponseHeadersPolicyRegistry();
+    cachePolicies = new SimCloudFrontCachePolicyRegistry();
+    /**
+     * Store a simulated response headers policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addResponseHeadersPolicy(policy) {
+        this.responseHeadersPolicies.add(policy);
+    }
+    /**
+     * Forget a simulated response headers policy.
+     */
+    removeResponseHeadersPolicy(policyId) {
+        this.responseHeadersPolicies.remove(policyId);
+    }
+    /**
+     * Get a simulated response headers policy by ID.
+     */
+    getResponseHeadersPolicyById(policyId) {
+        return this.responseHeadersPolicies.byId(policyId);
+    }
+    /**
+     * Store a simulated cache policy. A name another policy already holds is
+     * refused, as CloudFront refuses one.
+     */
+    addCachePolicy(policy) {
+        this.cachePolicies.add(policy);
+    }
+    /**
+     * Forget a simulated cache policy.
+     */
+    removeCachePolicy(policyId) {
+        this.cachePolicies.remove(policyId);
+    }
+    /**
+     * Get a simulated cache policy by ID.
+     */
+    getCachePolicyById(policyId) {
+        return this.cachePolicies.byId(policyId);
+    }
+}

package/dist/service/cloudfront/sim-cloudfront.d.ts

@@ -6,10 +6,11 @@ import type { SimCreateDistributionCommand, SimCreateDistributionCommandOutput }
 import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
 import type { SimDeleteDistributionCommand, SimDeleteDistributionCommandOutput } from "./command/delete-distribution/delete-distribution.command.js";
 import type { SimDeleteFunctionCommand, SimDeleteFunctionCommandOutput } from "./command/delete-function/delete-function.command.js";
+import type { SimDescribeFunctionCommand, SimDescribeFunctionCommandOutput, SimGetFunctionCommand, SimGetFunctionCommandOutput, SimListFunctionsCommand, SimListFunctionsCommandOutput } from "./command/function/sim-cf-function-command.types.js";
 import type { SimGetDistributionCommand, SimGetDistributionCommandOutput } from "./command/get-distribution/get-distribution.command.js";
 import type { SimUpdateDistributionCommand, SimUpdateDistributionCommandOutput } from "./command/update-distribution/update-distribution.command.js";
 import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "./distribution/sim-cloudfront-distribution.js";
-import type { SimCloudFrontResponseHeadersPolicy, SimCloudFrontResponseHeadersPolicyId } from "./response-headers-policy/sim-cf-response-headers-policy.js";
+import { SimCloudFrontPolicies } from "./sim-cloudfront-policies.js";
 import type { SimCloudFrontOriginAccessControl, SimCloudFrontOriginAccessControlId } from "./origin-access-control/sim-cf-origin-access-control.js";
 import type { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-store-commands.js";
 import type { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
@@ -18,10 +19,9 @@ export type { SimCloudFrontProperties, SimCloudFrontRequestOptions, } from "./si
 /**
  * Simulated CloudFront. Handles SDK commands. Emulates AWS behaviour and state.
  */
-export declare class SimCloudFront {
+export declare class SimCloudFront extends SimCloudFrontPolicies {
     private readonly distributions;
     private readonly cloudFrontFunctions;
-    private readonly responseHeadersPolicies;
     private readonly originAccessControls;
     private readonly accountRegionScope;
     private readonly commands;
@@ -72,29 +72,25 @@ export declare class SimCloudFront {
      */
     deleteFunction(command: SimDeleteFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDeleteFunctionCommandOutput>;
     /**
-     * Get a sim CloudFront Function by ARN.
+     * Handle a List Functions Command from the SDK.
      */
-    getCloudFrontFunctionByArn(cloudFrontFunctionArn: SimArn): SimCloudFrontFunction | undefined;
+    listFunctions(command: SimListFunctionsCommand, options?: SimCloudFrontRequestOptions): Promise<SimListFunctionsCommandOutput>;
     /**
-     * Get a sim CloudFront Function by name.
+     * Handle a Describe Function Command from the SDK.
      */
-    getCloudFrontFunctionByName(cloudFrontFunctionName: SimCloudFrontFunctionName | string): SimCloudFrontFunction | undefined;
+    describeFunction(command: SimDescribeFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDescribeFunctionCommandOutput>;
     /**
-     * Store a simulated response headers policy.
-     *
-     * There is no CreateResponseHeadersPolicy command here, so CloudFormation is
-     * the only thing that makes one, and this is how it hands the policy over.
-     * A name another policy already holds is refused, as CloudFront refuses one.
+     * Handle a Get Function Command from the SDK.
      */
-    addResponseHeadersPolicy(policy: SimCloudFrontResponseHeadersPolicy): void;
+    getFunction(command: SimGetFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimGetFunctionCommandOutput>;
     /**
-     * Forget a simulated response headers policy.
+     * Get a sim CloudFront Function by ARN.
      */
-    removeResponseHeadersPolicy(policyId: SimCloudFrontResponseHeadersPolicyId): void;
+    getCloudFrontFunctionByArn(cloudFrontFunctionArn: SimArn): SimCloudFrontFunction | undefined;
     /**
-     * Get a simulated response headers policy by ID.
+     * Get a sim CloudFront Function by name.
      */
-    getResponseHeadersPolicyById(policyId: SimCloudFrontResponseHeadersPolicyId | string): SimCloudFrontResponseHeadersPolicy | undefined;
+    getCloudFrontFunctionByName(cloudFrontFunctionName: SimCloudFrontFunctionName | string): SimCloudFrontFunction | undefined;
     /**
      * Store a simulated origin access control.
      *