@kensio/yulin 1.20.16 → 1.21.0

package/dist/service/cloudfront/registry/sim-cloud-front-registry.js

@@ -5,11 +5,34 @@ import { makeDistributionId, } from "../distribution/sim-cloudfront-distribution
  * CloudFront is not region-scoped, so all region-scoped CloudFront service
  * instances for the same Account should delegate to the same Account-global
  * state.
+ *
+ * Whether Distributions cache what they serve lives here for the same reason.
+ * One registry is built per `SimAws` and shared by every Account and Region,
+ * so turning caching off turns it off for the whole simulated AWS rather than
+ * for one Account's Distributions.
  */
 export class SimCloudFrontRegistry {
+    #cachingEnabled = true;
     distributionAccountIds = new Map();
     accountDistributionIds = new Map();
     alternateDomainDistributionIds = new Map();
+    /**
+     * Whether Distributions here cache what they serve.
+     */
+    get cachingEnabled() {
+        return this.#cachingEnabled;
+    }
+    /**
+     * Turn the edge cache on or off for every Distribution in this simulated
+     * AWS.
+     *
+     * Caching is on, as CloudFront's is. Turning it off is for a suite that
+     * repeats a request and wants the Origin read every time, and it is the
+     * behaviour sim CloudFront had before it held a cache at all.
+     */
+    configureCaching(configuration) {
+        this.#cachingEnabled = configuration.enabled;
+    }
     /**
      * Allocate a globally unique simulated CloudFront Distribution ID.
      */

package/dist/service/cloudfront/sdk/sim-cloudfront-sdk-command-router.js

@@ -23,10 +23,34 @@ export class SimCloudFrontSdkCommandRouter {
                 "DeleteFunctionCommand",
                 async (command, context) => await simCloudFront.deleteFunction(command, simSdkCallerOptions(context)),
             ],
+            [
+                "ListFunctionsCommand",
+                async (command, context) => await simCloudFront.listFunctions(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DescribeFunctionCommand",
+                async (command, context) => await simCloudFront.describeFunction(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetFunctionCommand",
+                async (command, context) => await simCloudFront.getFunction(command, simSdkCallerOptions(context)),
+            ],
             [
                 "GetDistributionCommand",
                 async (command, context) => await simCloudFront.getDistribution(command, simSdkCallerOptions(context)),
             ],
+            [
+                "CreateInvalidationCommand",
+                async (command, context) => await simCloudFront.createInvalidation(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetInvalidationCommand",
+                async (command, context) => await simCloudFront.getInvalidation(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListInvalidationsCommand",
+                async (command, context) => await simCloudFront.listInvalidations(command, simSdkCallerOptions(context)),
+            ],
             [
                 "CreateKeyValueStoreCommand",
                 async (command, context) => await simCloudFront

package/dist/service/cloudfront/sim-cf-authorize.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimCfAuthorizeProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly action: string;
+    readonly resource: string;
+    readonly caller?: SimAwsCaller | undefined;
+}
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export declare function simCfAuthorize(properties: SimCfAuthorizeProperties): void;
+export {};

package/dist/service/cloudfront/sim-cf-authorize.js

@@ -0,0 +1,19 @@
+import { SimIamAccessDenied } from "../iam/error/sim-iam.error.js";
+/**
+ * Ensure a caller may take a CloudFront action on a resource.
+ *
+ * Every CloudFront command asks IAM the same question and refuses a denial the
+ * same way, so the question is asked here rather than once per command group.
+ */
+export function simCfAuthorize(properties) {
+    const { iam, action, resource, caller } = properties;
+    const decision = iam.authorize({ action, resource, caller });
+    if (decision.isDenied) {
+        throw new SimIamAccessDenied({
+            principal: decision.caller.principal,
+            reason: decision.denialReason,
+            action,
+            resource,
+        });
+    }
+}

package/dist/service/cloudfront/sim-cf-etag.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export declare function makeSimCloudFrontETag(): string;

package/dist/service/cloudfront/sim-cf-etag.js

@@ -0,0 +1,10 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Generate a fake ETag, in the shape CloudFront gives one.
+ *
+ * Every versioned CloudFront resource carries one of these, and a write says
+ * which version it is writing over by sending it back as `IfMatch`.
+ */
+export function makeSimCloudFrontETag() {
+    return faker.helpers.fromRegExp(/E[0-9A-Z]{13}/);
+}

package/dist/service/cloudfront/sim-cloudfront-caching.d.ts

@@ -0,0 +1,31 @@
+import { type SimCfCachingConfiguration, SimCloudFrontRegistry } from "./registry/sim-cloud-front-registry.js";
+import { SimCloudFrontOriginAccessControls } from "./sim-cloudfront-origin-access-controls.js";
+/**
+ * The cache one simulated CloudFront's Distributions hold, and whether they
+ * hold one at all.
+ *
+ * The setting lives on `SimCloudFrontRegistry`, which is built once per
+ * `SimAws` and shared by every Account and Region, so a Distribution anywhere
+ * in one simulated AWS caches or does not together with the rest.
+ * `SimCloudFront` extends this, and a caller reaches it on the one service
+ * object.
+ */
+export declare class SimCloudFrontCaching extends SimCloudFrontOriginAccessControls {
+    protected readonly cloudFrontRegistry: SimCloudFrontRegistry;
+    constructor(cloudFrontRegistry?: SimCloudFrontRegistry);
+    /**
+     * Whether Distributions in this simulated AWS cache what they serve.
+     */
+    get cachingEnabled(): boolean;
+    /**
+     * Turn the edge cache on or off.
+     *
+     * ```typescript
+     * simAws.cloudFront().configureCaching({ enabled: false });
+     * ```
+     *
+     * Caching is on, as CloudFront's is. Turning it off is for a suite that
+     * repeats a request and wants every one of them to reach the Origin.
+     */
+    configureCaching(configuration: SimCfCachingConfiguration): void;
+}

package/dist/service/cloudfront/sim-cloudfront-caching.js

@@ -0,0 +1,38 @@
+import { SimCloudFrontRegistry, } from "./registry/sim-cloud-front-registry.js";
+import { SimCloudFrontOriginAccessControls } from "./sim-cloudfront-origin-access-controls.js";
+/**
+ * The cache one simulated CloudFront's Distributions hold, and whether they
+ * hold one at all.
+ *
+ * The setting lives on `SimCloudFrontRegistry`, which is built once per
+ * `SimAws` and shared by every Account and Region, so a Distribution anywhere
+ * in one simulated AWS caches or does not together with the rest.
+ * `SimCloudFront` extends this, and a caller reaches it on the one service
+ * object.
+ */
+export class SimCloudFrontCaching extends SimCloudFrontOriginAccessControls {
+    cloudFrontRegistry;
+    constructor(cloudFrontRegistry) {
+        super();
+        this.cloudFrontRegistry = cloudFrontRegistry ?? new SimCloudFrontRegistry();
+    }
+    /**
+     * Whether Distributions in this simulated AWS cache what they serve.
+     */
+    get cachingEnabled() {
+        return this.cloudFrontRegistry.cachingEnabled;
+    }
+    /**
+     * Turn the edge cache on or off.
+     *
+     * ```typescript
+     * simAws.cloudFront().configureCaching({ enabled: false });
+     * ```
+     *
+     * Caching is on, as CloudFront's is. Turning it off is for a suite that
+     * repeats a request and wants every one of them to reach the Origin.
+     */
+    configureCaching(configuration) {
+        this.cloudFrontRegistry.configureCaching(configuration);
+    }
+}

package/dist/service/cloudfront/sim-cloudfront-commands.d.ts

@@ -5,10 +5,8 @@ import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-sco
 import type { SimAwsAccountId } from "../aws/sim-aws-account.js";
 import type { SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimCreateDistributionCommand, SimCreateDistributionCommandOutput } from "./command/create-distribution/create-distribution.command.js";
-import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
-import { type SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";
+import type { SimCloudFrontFunctionMap } from "./command/create-function/create-function.handler.js";
 import type { SimDeleteDistributionCommand, SimDeleteDistributionCommandOutput } from "./command/delete-distribution/delete-distribution.command.js";
-import type { SimDeleteFunctionCommand, SimDeleteFunctionCommandOutput } from "./command/delete-function/delete-function.command.js";
 import type { SimGetDistributionCommand, SimGetDistributionCommandOutput } from "./command/get-distribution/get-distribution.command.js";
 import type { SimUpdateDistributionCommand, SimUpdateDistributionCommandOutput } from "./command/update-distribution/update-distribution.command.js";
 import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "./distribution/sim-cloudfront-distribution.js";
@@ -16,11 +14,15 @@ import type { SimCfCustomOriginDispatcher } from "./origin/custom/sim-cf-custom-
 import { type SimCloudFrontS3OriginResolver } from "./origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "./origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
+import type { SimCloudFrontOriginRequestPolicyRegistry } from "./origin-request-policy/sim-cf-origin-request-policy-registry.js";
 import { SimCloudFrontRegistry } from "./registry/sim-cloud-front-registry.js";
 import type { SimCfWebAclResolver } from "./web-acl/sim-cf-web-acl.js";
 import type { SimCfEdgeFunctions } from "./edge/sim-cf-edge-functions.js";
 import { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-store-commands.js";
 import { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
+import { SimCfFunctionCommands } from "./cff/sim-cf-function-commands.js";
+import { SimCfInvalidationCommands } from "./command/invalidation/sim-cf-invalidation-commands.js";
 /**
  * How one simulated CloudFront is put together.
  */
@@ -43,6 +45,8 @@ interface SimCloudFrontCommandsProperties extends SimCloudFrontProperties {
     readonly cloudFrontFunctions: SimCloudFrontFunctionMap;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
 }
 /**
  * Options carried by any simulated CloudFront request.
@@ -51,6 +55,11 @@ export interface SimCloudFrontRequestOptions {
     readonly caller?: SimAwsCaller;
 }
 export type SimCloudFrontDistributionMap = Map<SimCloudFrontDistributionId, SimCloudFrontDistribution>;
+/**
+ * The Distributions of one simulated CloudFront, as a caller reading them back
+ * sees them.
+ */
+export type SimCloudFrontDistributionsById = ReadonlyMap<SimCloudFrontDistributionId, SimCloudFrontDistribution>;
 /**
  * The commands of one simulated CloudFront, and the state they share.
  *
@@ -75,8 +84,15 @@ export declare class SimCloudFrontCommands {
      * well as by the Distribution commands, which check one can be associated.
      */
     readonly edgeFunctions: SimCfEdgeFunctions | undefined;
+    /**
+     * The CloudFront Function commands, and the Functions they work on.
+     */
+    readonly functions: SimCfFunctionCommands;
+    /**
+     * The invalidation commands, and the Distributions they clear.
+     */
+    readonly invalidations: SimCfInvalidationCommands;
     private readonly distributionState;
-    private readonly functionState;
     private readonly configurationState;
     constructor(properties: SimCloudFrontCommandsProperties);
     /**
@@ -95,13 +111,5 @@ export declare class SimCloudFrontCommands {
      * Handle a Delete Distribution Command from the SDK.
      */
     deleteDistribution(command: SimDeleteDistributionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDeleteDistributionCommandOutput>;
-    /**
-     * Handle a Create Function Command from the SDK.
-     */
-    createFunction(command: SimCreateFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimCreateFunctionCommandOutput>;
-    /**
-     * Handle a Delete Function Command from the SDK.
-     */
-    deleteFunction(command: SimDeleteFunctionCommand, options?: SimCloudFrontRequestOptions): Promise<SimDeleteFunctionCommandOutput>;
 }
 export {};

package/dist/service/cloudfront/sim-cloudfront-commands.js

@@ -1,9 +1,7 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simIamGlobalServiceRegion, simIamInRegion, } from "../iam/authorize/sim-iam-region-auth-z.js";
 import { CreateDistributionCommandHandler } from "./command/create-distribution/create-distribution.handler.js";
-import { CreateFunctionCommandHandler, } from "./command/create-function/create-function.handler.js";
 import { DeleteDistributionCommandHandler } from "./command/delete-distribution/delete-distribution.handler.js";
-import { DeleteFunctionCommandHandler } from "./command/delete-function/delete-function.handler.js";
 import { GetDistributionCommandHandler } from "./command/get-distribution/get-distribution.handler.js";
 import { UpdateDistributionCommandHandler } from "./command/update-distribution/update-distribution.handler.js";
 import { emptyCloudFrontS3OriginResolver, } from "./origin/s3/sim-cloudfront-s3-origin.js";
@@ -13,6 +11,8 @@ import { SimCfKeyValueStoreCommands } from "./key-value-store/sim-cf-key-value-s
 import { SimCloudFrontKeyValueStoreRegistry } from "./key-value-store/sim-cf-key-value-store-registry.js";
 import { SimCloudFrontKeyValueStoreApi } from "./sim-cloudfront-key-value-store.js";
 import { SimCffKeyValueStoreUsers } from "./cff/kvs/sim-cff-key-value-store-users.js";
+import { SimCfFunctionCommands } from "./cff/sim-cf-function-commands.js";
+import { SimCfInvalidationCommands } from "./command/invalidation/sim-cf-invalidation-commands.js";
 /**
  * The commands of one simulated CloudFront, and the state they share.
  *
@@ -37,8 +37,15 @@ export class SimCloudFrontCommands {
      * well as by the Distribution commands, which check one can be associated.
      */
     edgeFunctions;
+    /**
+     * The CloudFront Function commands, and the Functions they work on.
+     */
+    functions;
+    /**
+     * The invalidation commands, and the Distributions they clear.
+     */
+    invalidations;
     distributionState;
-    functionState;
     configurationState;
     constructor(properties) {
         const { accountId, distributions, cloudFrontFunctions, cloudFrontRegistry = new SimCloudFrontRegistry(), s3OriginResolver = emptyCloudFrontS3OriginResolver, customOriginDispatcher, acmRegistry, webAclResolver, edgeFunctions, background = new BackgroundTasks(), } = properties;
@@ -54,13 +61,19 @@ export class SimCloudFrontCommands {
             iam,
             background,
         };
-        this.functionState = {
+        this.functions = new SimCfFunctionCommands({
             accountId,
             cloudFrontFunctions,
             iam,
             background,
             keyValueStores,
-        };
+        });
+        this.invalidations = new SimCfInvalidationCommands({
+            accountId,
+            distributions,
+            iam,
+            background,
+        });
         this.configurationState = {
             s3OriginResolver,
             customOriginDispatcher,
@@ -69,6 +82,8 @@ export class SimCloudFrontCommands {
             edgeFunctions,
             originAccessControls: properties.originAccessControls,
             responseHeadersPolicies: properties.responseHeadersPolicies,
+            cachePolicies: properties.cachePolicies,
+            originRequestPolicies: properties.originRequestPolicies,
         };
         const keyValueStoreAccess = new SimCfKeyValueStoreAccess({
             accountId,
@@ -111,16 +126,4 @@ export class SimCloudFrontCommands {
     async deleteDistribution(command, options) {
         return await new DeleteDistributionCommandHandler(this.distributionState).handle(command, options);
     }
-    /**
-     * Handle a Create Function Command from the SDK.
-     */
-    async createFunction(command, options) {
-        return await new CreateFunctionCommandHandler(this.functionState).handle(command, options);
-    }
-    /**
-     * Handle a Delete Function Command from the SDK.
-     */
-    async deleteFunction(command, options) {
-        return await new DeleteFunctionCommandHandler(this.functionState).handle(command, options);
-    }
 }

package/dist/service/cloudfront/sim-cloudfront-distributions.d.ts

@@ -0,0 +1,21 @@
+import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "./distribution/sim-cloudfront-distribution.js";
+import { SimCloudFrontCaching } from "./sim-cloudfront-caching.js";
+import type { SimCloudFrontDistributionMap, SimCloudFrontDistributionsById } from "./sim-cloudfront-commands.js";
+/**
+ * The Distributions one simulated CloudFront holds.
+ *
+ * The commands work on this map, and a test reads it back through these
+ * accessors. `SimCloudFront` extends this, and a caller reaches the
+ * Distributions on the one service object.
+ */
+export declare class SimCloudFrontDistributions extends SimCloudFrontCaching {
+    protected readonly distributions: SimCloudFrontDistributionMap;
+    /**
+     * Get the simulated Distributions owned by this sim CloudFront service.
+     */
+    getDistributions(): SimCloudFrontDistributionsById;
+    /**
+     * Get a simulated CloudFront Distribution by ID.
+     */
+    getSimDistributionById(distributionId: SimCloudFrontDistributionId | string): SimCloudFrontDistribution | undefined;
+}

package/dist/service/cloudfront/sim-cloudfront-distributions.js

@@ -0,0 +1,23 @@
+import { SimCloudFrontCaching } from "./sim-cloudfront-caching.js";
+/**
+ * The Distributions one simulated CloudFront holds.
+ *
+ * The commands work on this map, and a test reads it back through these
+ * accessors. `SimCloudFront` extends this, and a caller reaches the
+ * Distributions on the one service object.
+ */
+export class SimCloudFrontDistributions extends SimCloudFrontCaching {
+    distributions = new Map();
+    /**
+     * Get the simulated Distributions owned by this sim CloudFront service.
+     */
+    getDistributions() {
+        return this.distributions;
+    }
+    /**
+     * Get a simulated CloudFront Distribution by ID.
+     */
+    getSimDistributionById(distributionId) {
+        return this.distributions.get(distributionId);
+    }
+}

package/dist/service/cloudfront/sim-cloudfront-origin-access-controls.d.ts

@@ -0,0 +1,30 @@
+import type { SimCloudFrontOriginAccessControl, SimCloudFrontOriginAccessControlId } from "./origin-access-control/sim-cf-origin-access-control.js";
+import { SimCloudFrontOriginAccessControlRegistry } from "./origin-access-control/sim-cf-origin-access-control-registry.js";
+import { SimCloudFrontPolicies } from "./sim-cloudfront-policies.js";
+/**
+ * The origin access controls one simulated CloudFront holds.
+ *
+ * An Origin names one by ID, and this is where it is found. There is no
+ * CreateOriginAccessControl command in this simulation, so CloudFormation is
+ * the only thing that makes one, and these methods are how it hands one over.
+ * `SimCloudFront` extends this, and a caller reaches them on the one service
+ * object.
+ */
+export declare class SimCloudFrontOriginAccessControls extends SimCloudFrontPolicies {
+    protected readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
+    /**
+     * Store a simulated origin access control.
+     *
+     * A name another origin access control already holds is refused, as
+     * CloudFront refuses one.
+     */
+    addOriginAccessControl(originAccessControl: SimCloudFrontOriginAccessControl): void;
+    /**
+     * Forget a simulated origin access control.
+     */
+    removeOriginAccessControl(originAccessControlId: SimCloudFrontOriginAccessControlId): void;
+    /**
+     * Get a simulated origin access control by ID.
+     */
+    getOriginAccessControlById(originAccessControlId: SimCloudFrontOriginAccessControlId | string): SimCloudFrontOriginAccessControl | undefined;
+}

package/dist/service/cloudfront/sim-cloudfront-origin-access-controls.js

@@ -0,0 +1,35 @@
+import { SimCloudFrontOriginAccessControlRegistry } from "./origin-access-control/sim-cf-origin-access-control-registry.js";
+import { SimCloudFrontPolicies } from "./sim-cloudfront-policies.js";
+/**
+ * The origin access controls one simulated CloudFront holds.
+ *
+ * An Origin names one by ID, and this is where it is found. There is no
+ * CreateOriginAccessControl command in this simulation, so CloudFormation is
+ * the only thing that makes one, and these methods are how it hands one over.
+ * `SimCloudFront` extends this, and a caller reaches them on the one service
+ * object.
+ */
+export class SimCloudFrontOriginAccessControls extends SimCloudFrontPolicies {
+    originAccessControls = new SimCloudFrontOriginAccessControlRegistry();
+    /**
+     * Store a simulated origin access control.
+     *
+     * A name another origin access control already holds is refused, as
+     * CloudFront refuses one.
+     */
+    addOriginAccessControl(originAccessControl) {
+        this.originAccessControls.add(originAccessControl);
+    }
+    /**
+     * Forget a simulated origin access control.
+     */
+    removeOriginAccessControl(originAccessControlId) {
+        this.originAccessControls.remove(originAccessControlId);
+    }
+    /**
+     * Get a simulated origin access control by ID.
+     */
+    getOriginAccessControlById(originAccessControlId) {
+        return this.originAccessControls.byId(originAccessControlId);
+    }
+}

package/dist/service/cloudfront/sim-cloudfront-policies.d.ts

@@ -0,0 +1,60 @@
+import type { SimCloudFrontCachePolicy, SimCloudFrontCachePolicyId } from "./cache-policy/sim-cf-cache-policy.js";
+import { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
+import type { SimCloudFrontOriginRequestPolicy, SimCloudFrontOriginRequestPolicyId } from "./origin-request-policy/sim-cf-origin-request-policy.js";
+import { SimCloudFrontOriginRequestPolicyRegistry } from "./origin-request-policy/sim-cf-origin-request-policy-registry.js";
+import type { SimCloudFrontResponseHeadersPolicy, SimCloudFrontResponseHeadersPolicyId } from "./response-headers-policy/sim-cf-response-headers-policy.js";
+import { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+/**
+ * The policies one simulated CloudFront holds.
+ *
+ * A cache Behavior names a response headers policy, a cache policy and an
+ * origin request policy by ID, and all three are stored here. None of them has
+ * a create command in this simulation, so CloudFormation is the only thing
+ * that makes one, and these methods are how it hands a policy over.
+ * `SimCloudFront` extends this, and a caller reaches the policies on the one
+ * service object.
+ */
+export declare class SimCloudFrontPolicies {
+    protected readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    protected readonly cachePolicies: SimCloudFrontCachePolicyRegistry;
+    protected readonly originRequestPolicies: SimCloudFrontOriginRequestPolicyRegistry;
+    /**
+     * Store a simulated response headers policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addResponseHeadersPolicy(policy: SimCloudFrontResponseHeadersPolicy): void;
+    /**
+     * Forget a simulated response headers policy.
+     */
+    removeResponseHeadersPolicy(policyId: SimCloudFrontResponseHeadersPolicyId): void;
+    /**
+     * Get a simulated response headers policy by ID.
+     */
+    getResponseHeadersPolicyById(policyId: SimCloudFrontResponseHeadersPolicyId | string): SimCloudFrontResponseHeadersPolicy | undefined;
+    /**
+     * Store a simulated cache policy. A name another policy already holds is
+     * refused, as CloudFront refuses one.
+     */
+    addCachePolicy(policy: SimCloudFrontCachePolicy): void;
+    /**
+     * Forget a simulated cache policy.
+     */
+    removeCachePolicy(policyId: SimCloudFrontCachePolicyId): void;
+    /**
+     * Get a simulated cache policy by ID.
+     */
+    getCachePolicyById(policyId: SimCloudFrontCachePolicyId | string): SimCloudFrontCachePolicy | undefined;
+    /**
+     * Store a simulated origin request policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addOriginRequestPolicy(policy: SimCloudFrontOriginRequestPolicy): void;
+    /**
+     * Forget a simulated origin request policy.
+     */
+    removeOriginRequestPolicy(policyId: SimCloudFrontOriginRequestPolicyId): void;
+    /**
+     * Get a simulated origin request policy by ID.
+     */
+    getOriginRequestPolicyById(policyId: SimCloudFrontOriginRequestPolicyId | string): SimCloudFrontOriginRequestPolicy | undefined;
+}

package/dist/service/cloudfront/sim-cloudfront-policies.js

@@ -0,0 +1,75 @@
+import { SimCloudFrontCachePolicyRegistry } from "./cache-policy/sim-cf-cache-policy-registry.js";
+import { SimCloudFrontOriginRequestPolicyRegistry } from "./origin-request-policy/sim-cf-origin-request-policy-registry.js";
+import { SimCloudFrontResponseHeadersPolicyRegistry } from "./response-headers-policy/sim-cf-response-headers-policy-registry.js";
+/**
+ * The policies one simulated CloudFront holds.
+ *
+ * A cache Behavior names a response headers policy, a cache policy and an
+ * origin request policy by ID, and all three are stored here. None of them has
+ * a create command in this simulation, so CloudFormation is the only thing
+ * that makes one, and these methods are how it hands a policy over.
+ * `SimCloudFront` extends this, and a caller reaches the policies on the one
+ * service object.
+ */
+export class SimCloudFrontPolicies {
+    responseHeadersPolicies = new SimCloudFrontResponseHeadersPolicyRegistry();
+    cachePolicies = new SimCloudFrontCachePolicyRegistry();
+    originRequestPolicies = new SimCloudFrontOriginRequestPolicyRegistry();
+    /**
+     * Store a simulated response headers policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addResponseHeadersPolicy(policy) {
+        this.responseHeadersPolicies.add(policy);
+    }
+    /**
+     * Forget a simulated response headers policy.
+     */
+    removeResponseHeadersPolicy(policyId) {
+        this.responseHeadersPolicies.remove(policyId);
+    }
+    /**
+     * Get a simulated response headers policy by ID.
+     */
+    getResponseHeadersPolicyById(policyId) {
+        return this.responseHeadersPolicies.byId(policyId);
+    }
+    /**
+     * Store a simulated cache policy. A name another policy already holds is
+     * refused, as CloudFront refuses one.
+     */
+    addCachePolicy(policy) {
+        this.cachePolicies.add(policy);
+    }
+    /**
+     * Forget a simulated cache policy.
+     */
+    removeCachePolicy(policyId) {
+        this.cachePolicies.remove(policyId);
+    }
+    /**
+     * Get a simulated cache policy by ID.
+     */
+    getCachePolicyById(policyId) {
+        return this.cachePolicies.byId(policyId);
+    }
+    /**
+     * Store a simulated origin request policy. A name another policy already
+     * holds is refused, as CloudFront refuses one.
+     */
+    addOriginRequestPolicy(policy) {
+        this.originRequestPolicies.add(policy);
+    }
+    /**
+     * Forget a simulated origin request policy.
+     */
+    removeOriginRequestPolicy(policyId) {
+        this.originRequestPolicies.remove(policyId);
+    }
+    /**
+     * Get a simulated origin request policy by ID.
+     */
+    getOriginRequestPolicyById(policyId) {
+        return this.originRequestPolicies.byId(policyId);
+    }
+}