@kensio/yulin 1.20.16 → 1.20.17

package/dist/service/cloudfront/command/function/sim-cf-list-functions.js

@@ -0,0 +1,38 @@
+import { simCffInStage, simCffRequestedStage, } from "../../cff/sim-cff-stage.js";
+import { simCfFunctionSummary } from "./sim-cf-function-summary.js";
+/**
+ * Simulated CloudFront ListFunctions command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/ListFunctionsCommand/
+ */
+export class SimCfListFunctions {
+    access;
+    static action = "cloudfront:ListFunctions";
+    constructor(access) {
+        this.access = access;
+    }
+    /**
+     * List this Account's sim CloudFront Functions in one stage.
+     *
+     * The whole list comes back. `Marker` and `MaxItems` are the paging every
+     * other simulated listing leaves out, so there is no `NextMarker` either.
+     */
+    async handle(command, options) {
+        const stage = simCffRequestedStage(command.input.Stage);
+        await this.access.background.sequence();
+        // Listing is authorized across the Account rather than per Function, which
+        // is what a policy for this action grants.
+        this.access.authorizeAnyFunction(SimCfListFunctions.action, options?.caller);
+        const cloudFrontFunctions = this.access.cloudFrontFunctions
+            .values()
+            .filter((cloudFrontFunction) => simCffInStage(cloudFrontFunction, stage))
+            .toArray();
+        return {
+            $metadata: {},
+            FunctionList: {
+                Quantity: cloudFrontFunctions.length,
+                Items: cloudFrontFunctions.map((cloudFrontFunction) => simCfFunctionSummary(cloudFrontFunction, stage)),
+            },
+        };
+    }
+}

package/dist/service/cloudfront/command/update-distribution/update-distribution.handler.d.ts

@@ -10,6 +10,7 @@ import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-cus
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import type { SimCloudFrontRegistry } from "../../registry/sim-cloud-front-registry.js";
 import type { SimUpdateDistributionCommand, SimUpdateDistributionCommandOutput } from "./update-distribution.command.js";
@@ -21,6 +22,7 @@ interface UpdateDistributionCommandHandlerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly acmRegistry?: SimAcmRegistry | undefined;

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-cache-policy.d.ts

@@ -0,0 +1,18 @@
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
+/**
+ * Refuses a Cache Behavior naming a cache policy this simulation does not
+ * hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export declare class SimCfBehaviorCachePolicy {
+    private readonly policies;
+    constructor(policies: SimCloudFrontCachePolicyRegistry);
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId: string | undefined, cachePolicyId: string | undefined): void;
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-cache-policy.js

@@ -0,0 +1,30 @@
+import { SimCloudFrontNoSuchCachePolicy } from "../../error/sim-cloudfront.error.js";
+/**
+ * Refuses a Cache Behavior naming a cache policy this simulation does not
+ * hold.
+ *
+ * Real CloudFront checks this when the Distribution is created or updated, so
+ * a template naming a mistyped policy ID fails the deploy there too, rather
+ * than deploying successfully and only failing the first request that reaches
+ * the Behavior.
+ */
+export class SimCfBehaviorCachePolicy {
+    policies;
+    constructor(policies) {
+        this.policies = policies;
+    }
+    /**
+     * Refuse one Behavior naming a policy which is not there.
+     */
+    assertExists(targetOriginId, cachePolicyId) {
+        if (cachePolicyId === undefined ||
+            this.policies.byId(cachePolicyId) !== undefined) {
+            return;
+        }
+        throw new SimCloudFrontNoSuchCachePolicy(`Sim CloudFront Behavior for Origin ${targetOriginId} names cache ` +
+            `policy ${cachePolicyId}, which does not exist. A Behavior names one ` +
+            `of CloudFront's seven managed policies, or a policy an ` +
+            `AWS::CloudFront::CachePolicy Resource created in this simulation. A ` +
+            `policy ID from a real account is neither.`);
+    }
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.d.ts

@@ -0,0 +1,28 @@
+import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig, SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
+import type { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+/**
+ * The policies a Cache Behavior names, and whether this simulation holds them.
+ *
+ * A Behavior points at a response headers policy and a cache policy by ID, and
+ * both live outside the Distribution. Each one is checked the same way and at
+ * the same moment, so they are asked together.
+ */
+export declare class SimCfBehaviorPolicies {
+    private readonly responseHeadersPolicy;
+    private readonly cachePolicy;
+    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, cachePolicy: SimCfBehaviorCachePolicy);
+    /**
+     * Refuse every Behavior of a DistributionConfig that names a policy which is
+     * not there, without touching the Distribution.
+     *
+     * An update replaces a Distribution's whole configuration, so this runs
+     * before any of it is torn down. A refusal here leaves the Distribution
+     * serving exactly what it served before, rather than half replaced.
+     */
+    assertAllExist(distributionConfig: SimCloudFrontDistributionConfig): void;
+    /**
+     * Refuse one Behavior naming a policy of either kind which is not there.
+     */
+    assertExists(behavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig): void;
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-policies.js

@@ -0,0 +1,41 @@
+/**
+ * The policies a Cache Behavior names, and whether this simulation holds them.
+ *
+ * A Behavior points at a response headers policy and a cache policy by ID, and
+ * both live outside the Distribution. Each one is checked the same way and at
+ * the same moment, so they are asked together.
+ */
+export class SimCfBehaviorPolicies {
+    responseHeadersPolicy;
+    cachePolicy;
+    constructor(responseHeadersPolicy, cachePolicy) {
+        this.responseHeadersPolicy = responseHeadersPolicy;
+        this.cachePolicy = cachePolicy;
+    }
+    /**
+     * Refuse every Behavior of a DistributionConfig that names a policy which is
+     * not there, without touching the Distribution.
+     *
+     * An update replaces a Distribution's whole configuration, so this runs
+     * before any of it is torn down. A refusal here leaves the Distribution
+     * serving exactly what it served before, rather than half replaced.
+     */
+    assertAllExist(distributionConfig) {
+        const behaviors = [
+            distributionConfig.DefaultCacheBehavior,
+            ...(distributionConfig.CacheBehaviors?.Items ?? []),
+        ];
+        for (const behavior of behaviors) {
+            if (behavior !== undefined) {
+                this.assertExists(behavior);
+            }
+        }
+    }
+    /**
+     * Refuse one Behavior naming a policy of either kind which is not there.
+     */
+    assertExists(behavior) {
+        this.responseHeadersPolicy.assertExists(behavior.TargetOriginId, behavior.ResponseHeadersPolicyId);
+        this.cachePolicy.assertExists(behavior.TargetOriginId, behavior.CachePolicyId);
+    }
+}

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-properties.d.ts

@@ -1,8 +1,8 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontBehavior } from "../../behaviour/sim-cloud-front-behavior.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 /**
  * Build the Behavior properties common to both the default Cache Behavior and
  * a named one. Callers add their own fields, such as the path pattern, on top.
  */
-export declare function simCfBehaviorProperties(cacheBehavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy): SimCloudFrontBehavior;
+export declare function simCfBehaviorProperties(cacheBehavior: SimCloudFrontDefaultCacheBehaviorConfig | SimCloudFrontCacheBehaviorConfig, policies: SimCfBehaviorPolicies): SimCloudFrontBehavior;

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-properties.js

@@ -6,10 +6,10 @@ import { assertConsistentQuantity } from "../../command/sim-cf-list-quantity.js"
  * Build the Behavior properties common to both the default Cache Behavior and
  * a named one. Callers add their own fields, such as the path pattern, on top.
  */
-export function simCfBehaviorProperties(cacheBehavior, responseHeadersPolicy) {
-    const { TargetOriginId, ResponseHeadersPolicyId } = cacheBehavior;
+export function simCfBehaviorProperties(cacheBehavior, policies) {
+    const { TargetOriginId, ResponseHeadersPolicyId, CachePolicyId } = cacheBehavior;
     assertDefined(TargetOriginId, "CloudFront CacheBehavior TargetOriginId");
-    responseHeadersPolicy.assertExists(TargetOriginId, ResponseHeadersPolicyId);
+    policies.assertExists(cacheBehavior);
     return {
         targetOriginName: TargetOriginId,
         allowedMethods: methodsSet("AllowedMethods", cacheBehavior.AllowedMethods, [
@@ -23,6 +23,9 @@ export function simCfBehaviorProperties(cacheBehavior, responseHeadersPolicy) {
         ...(ResponseHeadersPolicyId !== undefined && {
             responseHeadersPolicyId: ResponseHeadersPolicyId,
         }),
+        ...(CachePolicyId !== undefined && {
+            cachePolicyId: CachePolicyId,
+        }),
         functionAssociations: configureCffAssociations(cacheBehavior),
         lambdaFunctionAssociations: configureEdgeAssociations(cacheBehavior),
     };

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-response-headers-policy.d.ts

@@ -1,4 +1,3 @@
-import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 /**
  * Refuses a Cache Behavior naming a response headers policy this simulation
@@ -12,15 +11,6 @@ import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-
 export declare class SimCfBehaviorResponseHeadersPolicy {
     private readonly policies;
     constructor(policies: SimCloudFrontResponseHeadersPolicyRegistry);
-    /**
-     * Refuse every Behavior of a DistributionConfig that names a policy which is
-     * not there, without touching the Distribution.
-     *
-     * An update replaces a Distribution's whole configuration, so this runs
-     * before any of it is torn down: a refusal here leaves the Distribution
-     * serving exactly what it served before, rather than half replaced.
-     */
-    assertAllExist(distributionConfig: SimCloudFrontDistributionConfig): void;
     /**
      * Refuse one Behavior naming a policy which is not there.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cf-behavior-response-headers-policy.js

@@ -13,25 +13,6 @@ export class SimCfBehaviorResponseHeadersPolicy {
     constructor(policies) {
         this.policies = policies;
     }
-    /**
-     * Refuse every Behavior of a DistributionConfig that names a policy which is
-     * not there, without touching the Distribution.
-     *
-     * An update replaces a Distribution's whole configuration, so this runs
-     * before any of it is torn down: a refusal here leaves the Distribution
-     * serving exactly what it served before, rather than half replaced.
-     */
-    assertAllExist(distributionConfig) {
-        const behaviors = [
-            distributionConfig.DefaultCacheBehavior,
-            ...(distributionConfig.CacheBehaviors?.Items ?? []),
-        ];
-        for (const behavior of behaviors) {
-            if (behavior !== undefined) {
-                this.assertExists(behavior.TargetOriginId, behavior.ResponseHeadersPolicyId);
-            }
-        }
-    }
     /**
      * Refuse one Behavior naming a policy which is not there.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts

@@ -1,3 +1,4 @@
+import type { SimCloudFrontCachePolicyRegistry } from "../../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
@@ -9,6 +10,7 @@ interface SimCloudFrontConfiguratorProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,4 +1,6 @@
 import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
+import { SimCfBehaviorCachePolicy } from "./sim-cf-behavior-cache-policy.js";
+import { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -10,6 +12,6 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * same set of configurators.
  */
 export function makeSimCloudFrontDistributionConfigurator(properties) {
-    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies);
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy, new SimCfDistributionWebAcl(properties.webAclResolver));
+    const behaviorPolicies = new SimCfBehaviorPolicies(new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies), new SimCfBehaviorCachePolicy(properties.cachePolicies));
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(behaviorPolicies), behaviorPolicies, new SimCfDistributionWebAcl(properties.webAclResolver));
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.d.ts

@@ -1,12 +1,12 @@
 import type { SimCloudFrontCacheBehaviorConfig, SimCloudFrontDefaultCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 /**
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export declare class SimCloudFrontBehaviorConfigurator {
-    private readonly responseHeadersPolicy;
-    constructor(responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    private readonly policies;
+    constructor(policies: SimCfBehaviorPolicies);
     /**
      * Configure the default Cache Behavior on a Distribution.
      */

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-behavior-configurator.js

@@ -4,16 +4,16 @@ import { simCfBehaviorProperties } from "./sim-cf-behavior-properties.js";
  * Applies Cache Behavior configuration to a sim CloudFront Distribution.
  */
 export class SimCloudFrontBehaviorConfigurator {
-    responseHeadersPolicy;
-    constructor(responseHeadersPolicy) {
-        this.responseHeadersPolicy = responseHeadersPolicy;
+    policies;
+    constructor(policies) {
+        this.policies = policies;
     }
     /**
      * Configure the default Cache Behavior on a Distribution.
      */
     configureDefaultCacheBehavior(distribution, cacheBehavior) {
         assertDefined(cacheBehavior, "CloudFront DefaultCacheBehavior");
-        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy));
+        distribution.addBehavior(simCfBehaviorProperties(cacheBehavior, this.policies));
     }
     /**
      * Configure a Cache Behavior on a Distribution.
@@ -22,7 +22,7 @@ export class SimCloudFrontBehaviorConfigurator {
         assertDefined(cacheBehavior.PathPattern, "CloudFront CacheBehavior PathPattern");
         distribution.addBehavior({
             pathPattern: cacheBehavior.PathPattern,
-            ...simCfBehaviorProperties(cacheBehavior, this.responseHeadersPolicy),
+            ...simCfBehaviorProperties(cacheBehavior, this.policies),
         });
     }
 }

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts

@@ -2,7 +2,7 @@ import type { SimCloudFrontDistributionConfig } from "../../command/create-distr
 import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.js";
 import type { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-configurator.js";
 import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
-import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import type { SimCfBehaviorPolicies } from "./sim-cf-behavior-policies.js";
 import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
@@ -24,10 +24,10 @@ import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-
 export declare class SimCloudFrontDistributionConfigurator {
     private readonly originConfigurator;
     private readonly behaviorConfigurator;
-    private readonly responseHeadersPolicy;
+    private readonly behaviorPolicies;
     private readonly webAcl;
     private readonly customErrorConfigurator;
-    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, webAcl: SimCfDistributionWebAcl);
+    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, behaviorPolicies: SimCfBehaviorPolicies, webAcl: SimCfDistributionWebAcl);
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
      * is applied.

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js

@@ -22,13 +22,13 @@ import { findSimCfRedundantOrigins, warnSimCfRedundantOrigins, } from "../../ori
 export class SimCloudFrontDistributionConfigurator {
     originConfigurator;
     behaviorConfigurator;
-    responseHeadersPolicy;
+    behaviorPolicies;
     webAcl;
     customErrorConfigurator = new SimCloudFrontCustomErrorConfigurator();
-    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy, webAcl) {
+    constructor(originConfigurator, behaviorConfigurator, behaviorPolicies, webAcl) {
         this.originConfigurator = originConfigurator;
         this.behaviorConfigurator = behaviorConfigurator;
-        this.responseHeadersPolicy = responseHeadersPolicy;
+        this.behaviorPolicies = behaviorPolicies;
         this.webAcl = webAcl;
     }
     /**
@@ -42,7 +42,7 @@ export class SimCloudFrontDistributionConfigurator {
      * worth undoing.
      */
     assertConfigurable(distributionConfig) {
-        this.responseHeadersPolicy.assertAllExist(distributionConfig);
+        this.behaviorPolicies.assertAllExist(distributionConfig);
         this.webAcl.assertUsable(distributionConfig);
     }
     /**

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.d.ts

@@ -1,4 +1,5 @@
 import type { SimAcmRegistry } from "../../acm/registry/sim-acm-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
@@ -11,7 +12,7 @@ import type { SimCfEdgeFunctions } from "../edge/sim-cf-edge-functions.js";
  *
  * A DistributionConfig is mostly references: a Bucket or a hostname per
  * Origin, a certificate, an origin access control, a response headers policy,
- * a web ACL, a Lambda@Edge function version. None of them belongs to
+ * a cache policy, a web ACL, a Lambda@Edge function version. None of them belongs to
  * CloudFront, and creation and update resolve every one of them the same way,
  * so they travel together.
  */
@@ -21,6 +22,7 @@ export interface SimCfDistributionConfigurationState {
     readonly acmRegistry: SimAcmRegistry | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver: SimCfWebAclResolver | undefined;
     readonly edgeFunctions: SimCfEdgeFunctions | undefined;
 }

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts

@@ -1,4 +1,5 @@
 import type { SimCloudFrontDistributionConfig } from "../command/create-distribution/create-distribution.command.js";
+import type { SimCloudFrontCachePolicyRegistry } from "../cache-policy/sim-cf-cache-policy-registry.js";
 import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
 import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
@@ -12,6 +13,7 @@ interface SimCloudFrontDistributionReconfigurerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
     readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts

@@ -101,6 +101,27 @@ export declare class SimCloudFrontResponseHeadersPolicyAlreadyExists extends Sim
     readonly name = "ResponseHeadersPolicyAlreadyExists";
     constructor(message: string);
 }
+/**
+ * Simulated CloudFront NoSuchCachePolicy error.
+ *
+ * What CloudFront answers when a Behavior's `CachePolicyId` names no cache
+ * policy the account holds, at Distribution create or update time rather than
+ * when a request first needs the policy.
+ */
+export declare class SimCloudFrontNoSuchCachePolicy extends SimCloudFrontError {
+    readonly name = "NoSuchCachePolicy";
+    constructor(message: string);
+}
+/**
+ * Simulated CloudFront CachePolicyAlreadyExists error.
+ *
+ * CloudFront requires a cache policy name to be unique within an account, so a
+ * second policy claiming a name is refused rather than created.
+ */
+export declare class SimCloudFrontCachePolicyAlreadyExists extends SimCloudFrontError {
+    readonly name = "CachePolicyAlreadyExists";
+    constructor(message: string);
+}
 /**
  * Simulated CloudFront InvalidOriginAccessControl error.
  *

package/dist/service/cloudfront/error/sim-cloudfront.error.js

@@ -118,6 +118,31 @@ export class SimCloudFrontResponseHeadersPolicyAlreadyExists extends SimCloudFro
         super(message, { httpStatusCode: 409 });
     }
 }
+/**
+ * Simulated CloudFront NoSuchCachePolicy error.
+ *
+ * What CloudFront answers when a Behavior's `CachePolicyId` names no cache
+ * policy the account holds, at Distribution create or update time rather than
+ * when a request first needs the policy.
+ */
+export class SimCloudFrontNoSuchCachePolicy extends SimCloudFrontError {
+    name = "NoSuchCachePolicy";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated CloudFront CachePolicyAlreadyExists error.
+ *
+ * CloudFront requires a cache policy name to be unique within an account, so a
+ * second policy claiming a name is refused rather than created.
+ */
+export class SimCloudFrontCachePolicyAlreadyExists extends SimCloudFrontError {
+    name = "CachePolicyAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}
 /**
  * Simulated CloudFront InvalidOriginAccessControl error.
  *

package/dist/service/cloudfront/key-value-store/sim-cf-key-value-store-access.js

@@ -1,4 +1,4 @@
-import { SimIamAccessDenied } from "../../iam/error/sim-iam.error.js";
+import { simCfAuthorize } from "../sim-cf-authorize.js";
 /**
  * What every key value store command needs: the stores, IAM, and the clock.
  *
@@ -21,15 +21,7 @@ export class SimCfKeyValueStoreAccess {
      * Ensure the caller may take an action on a key value store ARN.
      */
     authorize(action, resource, caller) {
-        const decision = this.iam.authorize({ action, resource, caller });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                reason: decision.denialReason,
-                action,
-                resource,
-            });
-        }
+        simCfAuthorize({ iam: this.iam, action, resource, caller });
     }
     /**
      * Ensure the caller may take an action on any key value store.

package/dist/service/cloudfront/key-value-store/sim-cf-key-value-store.js

@@ -1,6 +1,7 @@
 import { faker } from "@faker-js/faker";
 import { makeSimAwsAccountId, } from "../../aws/sim-aws-account.js";
 import { SimCloudFrontPreconditionFailed } from "../error/sim-cf-key-value-store.error.js";
+import { makeSimCloudFrontETag } from "../sim-cf-etag.js";
 import { SimCloudFrontKeyValueStoreKeys, } from "./sim-cf-key-value-store-keys.js";
 /**
  * Simulated CloudFront key value store.
@@ -175,5 +176,5 @@ export function makeKeyValueStoreId() {
  * Generate a fake ETag, in the shape CloudFront gives one.
  */
 export function makeKeyValueStoreETag() {
-    return faker.helpers.fromRegExp(/E[0-9A-Z]{13}/);
+    return makeSimCloudFrontETag();
 }

package/dist/service/cloudfront/sdk/sim-cloudfront-sdk-command-router.js

@@ -23,6 +23,18 @@ export class SimCloudFrontSdkCommandRouter {
                 "DeleteFunctionCommand",
                 async (command, context) => await simCloudFront.deleteFunction(command, simSdkCallerOptions(context)),
             ],
+            [
+                "ListFunctionsCommand",
+                async (command, context) => await simCloudFront.listFunctions(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DescribeFunctionCommand",
+                async (command, context) => await simCloudFront.describeFunction(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetFunctionCommand",
+                async (command, context) => await simCloudFront.getFunction(command, simSdkCallerOptions(context)),
+            ],
             [
                 "GetDistributionCommand",
                 async (command, context) => await simCloudFront.getDistribution(command, simSdkCallerOptions(context)),

package/dist/service/cloudfront/sim-cf-authorize.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimCfAuthorizeProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly action: string;
+    readonly resource: string;
+    readonly caller?: SimAwsCaller | undefined;
+}
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export declare function simCfAuthorize(properties: SimCfAuthorizeProperties): void;
+export {};

package/dist/service/cloudfront/sim-cf-authorize.js

@@ -0,0 +1,19 @@
+import { SimIamAccessDenied } from "../iam/error/sim-iam.error.js";
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export function simCfAuthorize(properties) {
+    const { iam, action, resource, caller } = properties;
+    const decision = iam.authorize({ action, resource, caller });
+    if (decision.isDenied) {
+        throw new SimIamAccessDenied({
+            principal: decision.caller.principal,
+            reason: decision.denialReason,
+            action,
+            resource,
+        });
+    }
+}

package/dist/service/cloudfront/sim-cf-etag.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export declare function makeSimCloudFrontETag(): string;

package/dist/service/cloudfront/sim-cf-etag.js

@@ -0,0 +1,10 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export function makeSimCloudFrontETag() {
+    return faker.helpers.fromRegExp(/E[0-9A-Z]{13}/);
+}