@kensio/yulin 1.20.16 → 1.21.0

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-key.js

@@ -0,0 +1,50 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCloudFrontCacheKey } from "../../cache-policy/sim-cf-cache-key.js";
+import { simCfnCfPolicySection, } from "../policy/sim-cfn-cf-policy-section.js";
+import { simCfnCfCookiesSpec, simCfnCfHeadersSpec, simCfnCfQueryStringsSpec, } from "./sim-cfn-cf-cache-policy-section.js";
+const parametersField = "ParametersInCacheKeyAndForwardedToOrigin";
+/**
+ * Read the `ParametersInCacheKeyAndForwardedToOrigin` of a
+ * `CachePolicyConfig` into the cache key a policy carries.
+ *
+ * A template leaving the whole thing out gets CloudFront's own `none` in all
+ * three sections, with neither compression flag set.
+ */
+export function simCfnCfCachePolicyCacheKey(config, refuse) {
+    // oxlint-disable-next-line security/detect-object-injection
+    const parameters = config[parametersField];
+    if (parameters === undefined) {
+        return new SimCloudFrontCacheKey();
+    }
+    if (!isRecord(parameters)) {
+        return refuse(`${parametersField} must be an object`);
+    }
+    const cookies = simCfnCfPolicySection(parameters, simCfnCfCookiesSpec, refuse);
+    const headers = simCfnCfPolicySection(parameters, simCfnCfHeadersSpec, refuse);
+    const queries = simCfnCfPolicySection(parameters, simCfnCfQueryStringsSpec, refuse);
+    return new SimCloudFrontCacheKey({
+        cookieBehavior: cookies.behavior,
+        cookies: cookies.items,
+        headerBehavior: headers.behavior,
+        headers: headers.items,
+        queryStringBehavior: queries.behavior,
+        queryStrings: queries.items,
+        enableAcceptEncodingGzip: encodingFlag(parameters, "Gzip", refuse),
+        enableAcceptEncodingBrotli: encodingFlag(parameters, "Brotli", refuse),
+    });
+}
+/**
+ * One of the two flags that put the normalized `Accept-Encoding` header in the
+ * cache key. Both are off where a template says nothing.
+ */
+function encodingFlag(parameters, encoding, refuse) {
+    const field = `EnableAcceptEncoding${encoding}`;
+    // oxlint-disable-next-line security/detect-object-injection
+    const value = parameters[field];
+    if (value === undefined) {
+        return false;
+    }
+    return typeof value === "boolean"
+        ? value
+        : refuse(`${parametersField} ${field} must be a boolean`);
+}

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-section.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The three sections of a cache key, each with the fields CloudFormation
+ * names it by and the behaviours CloudFront offers for it.
+ *
+ * An origin request policy writes the same three sections under the same field
+ * names, and `simCfnCfPolicySection` reads either kind from a spec like these.
+ */
+export declare const simCfnCfCookiesSpec: {
+    readonly section: "CookiesConfig";
+    readonly behaviorField: "CookieBehavior";
+    readonly itemsField: "Cookies";
+    readonly behaviors: readonly ["none", "whitelist", "allExcept", "all"];
+    readonly defaultBehavior: "none";
+};
+export declare const simCfnCfHeadersSpec: {
+    readonly section: "HeadersConfig";
+    readonly behaviorField: "HeaderBehavior";
+    readonly itemsField: "Headers";
+    readonly behaviors: readonly ["none", "whitelist"];
+    readonly defaultBehavior: "none";
+};
+export declare const simCfnCfQueryStringsSpec: {
+    readonly section: "QueryStringsConfig";
+    readonly behaviorField: "QueryStringBehavior";
+    readonly itemsField: "QueryStrings";
+    readonly behaviors: readonly ["none", "whitelist", "allExcept", "all"];
+    readonly defaultBehavior: "none";
+};

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-section.js

@@ -0,0 +1,29 @@
+import { simCfCacheKeyCookieBehaviors, simCfCacheKeyHeaderBehaviors, simCfCacheKeyQueryStringBehaviors, } from "../../cache-policy/sim-cf-cache-key.js";
+/**
+ * The three sections of a cache key, each with the fields CloudFormation
+ * names it by and the behaviours CloudFront offers for it.
+ *
+ * An origin request policy writes the same three sections under the same field
+ * names, and `simCfnCfPolicySection` reads either kind from a spec like these.
+ */
+export const simCfnCfCookiesSpec = {
+    section: "CookiesConfig",
+    behaviorField: "CookieBehavior",
+    itemsField: "Cookies",
+    behaviors: simCfCacheKeyCookieBehaviors,
+    defaultBehavior: "none",
+};
+export const simCfnCfHeadersSpec = {
+    section: "HeadersConfig",
+    behaviorField: "HeaderBehavior",
+    itemsField: "Headers",
+    behaviors: simCfCacheKeyHeaderBehaviors,
+    defaultBehavior: "none",
+};
+export const simCfnCfQueryStringsSpec = {
+    section: "QueryStringsConfig",
+    behaviorField: "QueryStringBehavior",
+    itemsField: "QueryStrings",
+    behaviors: simCfCacheKeyQueryStringBehaviors,
+    defaultBehavior: "none",
+};

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-behavior-policy-kinds.d.ts

@@ -0,0 +1,16 @@
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+/**
+ * One kind of policy a Behavior names, in the terms a template writes it in,
+ * with the way this simulation is asked whether it holds one and what the
+ * Behavior loses along with it.
+ */
+export interface BehaviorPolicyKind {
+    readonly property: "ResponseHeadersPolicyId" | "CachePolicyId" | "OriginRequestPolicyId";
+    readonly name: string;
+    readonly loses: string;
+    readonly held: (cloudFront: SimCloudFront, policyId: string) => boolean;
+}
+/**
+ * The three policies a Behavior names outside itself.
+ */
+export declare const behaviorPolicyKinds: readonly BehaviorPolicyKind[];

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-behavior-policy-kinds.js

@@ -0,0 +1,23 @@
+/**
+ * The three policies a Behavior names outside itself.
+ */
+export const behaviorPolicyKinds = [
+    {
+        property: "ResponseHeadersPolicyId",
+        name: "response headers policy",
+        loses: "serves every response without the headers that policy would have set",
+        held: (cloudFront, policyId) => cloudFront.getResponseHeadersPolicyById(policyId) !== undefined,
+    },
+    {
+        property: "CachePolicyId",
+        name: "cache policy",
+        loses: "reports no CachePolicyId",
+        held: (cloudFront, policyId) => cloudFront.getCachePolicyById(policyId) !== undefined,
+    },
+    {
+        property: "OriginRequestPolicyId",
+        name: "origin request policy",
+        loses: "reports no OriginRequestPolicyId",
+        held: (cloudFront, policyId) => cloudFront.getOriginRequestPolicyById(policyId) !== undefined,
+    },
+];

package/dist/service/cloudfront/cfn/distro/{sim-cfn-cf-distro-response-headers-policy.d.ts → sim-cfn-cf-distro-behavior-policies.d.ts}

@@ -2,8 +2,9 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 /**
- * The DistributionConfig to deploy, without a `ResponseHeadersPolicyId` naming
- * a response headers policy this simulation does not hold.
+ * The DistributionConfig to deploy, without a policy ID naming a response
+ * headers policy, a cache policy or an origin request policy this simulation
+ * does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -14,10 +15,11 @@ import type { SimCloudFront } from "../../sim-cloudfront.js";
  * make with it. That is the same reason an absent `WebACLId` is left out here.
  *
  * So the property is left off that Behavior and recorded on
- * `stack.ignoredProperties`. The Behavior deploys and serves every response
- * without the policy's headers. A test that cares reads the record.
+ * `stack.ignoredProperties`. The Behavior deploys, and a test that cares reads
+ * the record. CloudFront's managed policies count as held, so a Behavior
+ * naming one keeps it.
  *
- * One Behavior losing its policy leaves the others holding theirs. CloudFront's
- * managed policies count as held, so a Behavior naming one keeps it.
+ * One Behavior losing a policy leaves the others holding theirs, and a
+ * Behavior losing one kind of policy keeps the others.
  */
-export declare function simCfnCfDistroWithHeldResponseHeadersPolicies(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, cloudFront: SimCloudFront): SimCloudFrontDistributionConfig;
+export declare function simCfnCfDistroWithHeldBehaviorPolicies(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, cloudFront: SimCloudFront): SimCloudFrontDistributionConfig;

package/dist/service/cloudfront/cfn/distro/{sim-cfn-cf-distro-response-headers-policy.js → sim-cfn-cf-distro-behavior-policies.js}

@@ -1,39 +1,13 @@
 import { normalizeSimCfList } from "../../command/create-distribution/sim-cf-normalize-list.js";
+import { SimCfnCfDistroPolicyDrops } from "./sim-cfn-cf-distro-policy-drops.js";
 /**
  * The path a dropped policy on the default Behavior is recorded under.
  */
 const defaultBehaviorPath = "DistributionConfig.DefaultCacheBehavior";
 /**
- * Takes a `ResponseHeadersPolicyId` naming a policy this simulation does not
- * hold off the Behavior that named it, and records each one.
- */
-class SimCfnCfDistroPolicyDrops {
-    resource;
-    cloudFront;
-    count = 0;
-    constructor(resource, cloudFront) {
-        this.resource = resource;
-        this.cloudFront = cloudFront;
-    }
-    /**
-     * One Behavior, keeping a policy that is here and dropping one that is not.
-     */
-    heldPolicy(behavior, behaviorPath) {
-        const policyId = behavior.ResponseHeadersPolicyId;
-        if (policyId === undefined ||
-            this.cloudFront.getResponseHeadersPolicyById(policyId) !== undefined) {
-            return behavior;
-        }
-        this.count += 1;
-        this.resource.ignoreProperty(`${behaviorPath}.ResponseHeadersPolicyId`, `response headers policy ${policyId} is not held by this simulation, ` +
-            `so the Behavior is deployed without one and serves every response ` +
-            `without the headers that policy would have set`);
-        return { ...behavior, ResponseHeadersPolicyId: undefined };
-    }
-}
-/**
- * The DistributionConfig to deploy, without a `ResponseHeadersPolicyId` naming
- * a response headers policy this simulation does not hold.
+ * The DistributionConfig to deploy, without a policy ID naming a response
+ * headers policy, a cache policy or an origin request policy this simulation
+ * does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -44,13 +18,14 @@ class SimCfnCfDistroPolicyDrops {
  * make with it. That is the same reason an absent `WebACLId` is left out here.
  *
  * So the property is left off that Behavior and recorded on
- * `stack.ignoredProperties`. The Behavior deploys and serves every response
- * without the policy's headers. A test that cares reads the record.
+ * `stack.ignoredProperties`. The Behavior deploys, and a test that cares reads
+ * the record. CloudFront's managed policies count as held, so a Behavior
+ * naming one keeps it.
  *
- * One Behavior losing its policy leaves the others holding theirs. CloudFront's
- * managed policies count as held, so a Behavior naming one keeps it.
+ * One Behavior losing a policy leaves the others holding theirs, and a
+ * Behavior losing one kind of policy keeps the others.
  */
-export function simCfnCfDistroWithHeldResponseHeadersPolicies(resource, distributionConfig, cloudFront) {
+export function simCfnCfDistroWithHeldBehaviorPolicies(resource, distributionConfig, cloudFront) {
     const drops = new SimCfnCfDistroPolicyDrops(resource, cloudFront);
     const defaultCacheBehavior = distroDefaultBehavior(drops, distributionConfig);
     const cacheBehaviors = distroCacheBehaviors(drops, distributionConfig);
@@ -71,7 +46,7 @@ function distroDefaultBehavior(drops, distributionConfig) {
     if (behavior === undefined) {
         return undefined;
     }
-    return drops.heldPolicy(behavior, defaultBehaviorPath);
+    return drops.heldPolicies(behavior, defaultBehaviorPath);
 }
 /**
  * Every path-based cache Behavior, each without a policy that is not here.
@@ -88,6 +63,6 @@ function distroCacheBehaviors(drops, distributionConfig) {
     }
     return {
         ...behaviors,
-        Items: items.map((behavior, index) => drops.heldPolicy(behavior, `DistributionConfig.CacheBehaviors.${behavior.PathPattern ?? String(index)}`)),
+        Items: items.map((behavior, index) => drops.heldPolicies(behavior, `DistributionConfig.CacheBehaviors.${behavior.PathPattern ?? String(index)}`)),
     };
 }

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts

@@ -10,11 +10,12 @@ interface SimCfnCfDistroCreatorProperties {
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` naming a policy it does not hold. CloudFront has no
- * Resource of its own for any of the three, so all of them live on the
- * Distribution itself, and refusing one would take the Distribution down over
- * something that was never the point of the template. The site a local dev
- * server and a suite of tests make requests to has to survive that.
+ * `ResponseHeadersPolicyId`, `CachePolicyId` or `OriginRequestPolicyId`
+ * naming a policy it does not hold. CloudFront has no Resource of its own for
+ * any of them, so all of them live on the Distribution itself, and refusing
+ * one would take the Distribution down over something that was never the point
+ * of the template. The site a local dev server and a suite of tests make
+ * requests to has to survive that.
  */
 export declare class SimCfnCfDistroCreator {
     private readonly cloudFront;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -1,7 +1,7 @@
 import { assertDefined, assertNotNull, } from "../../../../util/type-guard/defined.js";
 import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-validator.js";
 import { simCfnCfDistroWithRunnableEdgeAssociations } from "./sim-cfn-cf-distro-edge-associations.js";
-import { simCfnCfDistroWithHeldResponseHeadersPolicies } from "./sim-cfn-cf-distro-response-headers-policy.js";
+import { simCfnCfDistroWithHeldBehaviorPolicies } from "./sim-cfn-cf-distro-behavior-policies.js";
 import { simCfnCfDistroWithoutAbsentWebAcl } from "./sim-cfn-cf-distro-web-acl.js";
 import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/caller/sim-cfn-resource-caller-options.js";
 /**
@@ -9,11 +9,12 @@ import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/ca
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` naming a policy it does not hold. CloudFront has no
- * Resource of its own for any of the three, so all of them live on the
- * Distribution itself, and refusing one would take the Distribution down over
- * something that was never the point of the template. The site a local dev
- * server and a suite of tests make requests to has to survive that.
+ * `ResponseHeadersPolicyId`, `CachePolicyId` or `OriginRequestPolicyId`
+ * naming a policy it does not hold. CloudFront has no Resource of its own for
+ * any of them, so all of them live on the Distribution itself, and refusing
+ * one would take the Distribution down over something that was never the point
+ * of the template. The site a local dev server and a suite of tests make
+ * requests to has to survive that.
  */
 export class SimCfnCfDistroCreator {
     cloudFront;
@@ -49,5 +50,5 @@ export class SimCfnCfDistroCreator {
  * act on, each recorded on the Resource.
  */
 function deployableConfig(resource, distributionConfig, simAws, cloudFront) {
-    return simCfnCfDistroWithoutAbsentWebAcl(resource, simCfnCfDistroWithHeldResponseHeadersPolicies(resource, simCfnCfDistroWithRunnableEdgeAssociations(resource, distributionConfig, simAws), cloudFront), simAws);
+    return simCfnCfDistroWithoutAbsentWebAcl(resource, simCfnCfDistroWithHeldBehaviorPolicies(resource, simCfnCfDistroWithRunnableEdgeAssociations(resource, distributionConfig, simAws), cloudFront), simAws);
 }

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-policy-drops.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFrontCacheBehaviorConfig } from "../../command/create-distribution/create-distribution.command.js";
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+/**
+ * Takes a policy ID naming a policy this simulation does not hold off the
+ * Behavior that named it, and records each one on the Resource.
+ */
+export declare class SimCfnCfDistroPolicyDrops {
+    private readonly resource;
+    private readonly cloudFront;
+    count: number;
+    constructor(resource: SimCfnResource, cloudFront: SimCloudFront);
+    /**
+     * One Behavior, keeping the policies that are here and dropping those that
+     * are not.
+     */
+    heldPolicies(behavior: SimCloudFrontCacheBehaviorConfig, behaviorPath: string): SimCloudFrontCacheBehaviorConfig;
+    /**
+     * One policy property of one Behavior, dropped where the ID names nothing
+     * this simulation holds.
+     */
+    private heldPolicy;
+}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-policy-drops.js

@@ -0,0 +1,35 @@
+import { behaviorPolicyKinds, } from "./sim-cfn-cf-behavior-policy-kinds.js";
+/**
+ * Takes a policy ID naming a policy this simulation does not hold off the
+ * Behavior that named it, and records each one on the Resource.
+ */
+export class SimCfnCfDistroPolicyDrops {
+    resource;
+    cloudFront;
+    count = 0;
+    constructor(resource, cloudFront) {
+        this.resource = resource;
+        this.cloudFront = cloudFront;
+    }
+    /**
+     * One Behavior, keeping the policies that are here and dropping those that
+     * are not.
+     */
+    heldPolicies(behavior, behaviorPath) {
+        return behaviorPolicyKinds.reduce((held, kind) => this.heldPolicy(held, behaviorPath, kind), behavior);
+    }
+    /**
+     * One policy property of one Behavior, dropped where the ID names nothing
+     * this simulation holds.
+     */
+    heldPolicy(behavior, behaviorPath, kind) {
+        const policyId = behavior[kind.property];
+        if (policyId === undefined || kind.held(this.cloudFront, policyId)) {
+            return behavior;
+        }
+        this.count += 1;
+        this.resource.ignoreProperty(`${behaviorPath}.${kind.property}`, `${kind.name} ${policyId} is not held by this simulation, so the ` +
+            `Behavior is deployed without one and ${kind.loses}`);
+        return { ...behavior, [kind.property]: undefined };
+    }
+}

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-config.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCloudFrontOriginRequestPolicy } from "../../origin-request-policy/sim-cf-origin-request-policy.js";
+/**
+ * Reads an AWS::CloudFront::OriginRequestPolicy Resource into a simulated
+ * policy.
+ *
+ * The policy carries its `Name`, its `Comment` and the three sections that say
+ * what it forwards to the Origin. A section a template left out falls back to
+ * CloudFront's `none`. A Resource missing its `Name` is refused, as
+ * CloudFormation refuses one.
+ */
+export declare class SimCfnCfOriginRequestPolicyConfig {
+    private readonly resource;
+    private readonly properties;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    private readonly refuse;
+    constructor(properties: {
+        readonly resource: SimCfnResource;
+        readonly properties: SimCfnTemplateValueRecord;
+    });
+    /**
+     * Build the simulated policy this Resource describes.
+     */
+    build(): SimCloudFrontOriginRequestPolicy;
+}

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-config.js

@@ -0,0 +1,46 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCloudFrontOriginRequestPolicy } from "../../origin-request-policy/sim-cf-origin-request-policy.js";
+import { simCfnCfOriginRequestForwarding } from "./sim-cfn-cf-orp-forwarding.js";
+/**
+ * Reads an AWS::CloudFront::OriginRequestPolicy Resource into a simulated
+ * policy.
+ *
+ * The policy carries its `Name`, its `Comment` and the three sections that say
+ * what it forwards to the Origin. A section a template left out falls back to
+ * CloudFront's `none`. A Resource missing its `Name` is refused, as
+ * CloudFormation refuses one.
+ */
+export class SimCfnCfOriginRequestPolicyConfig {
+    resource;
+    properties;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    refuse = (detail) => {
+        throw new Error(`Invalid AWS::CloudFront::OriginRequestPolicy ${this.resource.logicalId}: ${detail}`);
+    };
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * Build the simulated policy this Resource describes.
+     */
+    build() {
+        const { refuse } = this;
+        const config = this.properties["OriginRequestPolicyConfig"];
+        if (!isRecord(config)) {
+            return refuse("OriginRequestPolicyConfig must be an object");
+        }
+        const name = config["Name"];
+        if (typeof name !== "string") {
+            return refuse("OriginRequestPolicyConfig needs a string Name");
+        }
+        const comment = config["Comment"];
+        return new SimCloudFrontOriginRequestPolicy({
+            name,
+            ...(typeof comment === "string" && { comment }),
+            forwarding: simCfnCfOriginRequestForwarding(config, refuse),
+        });
+    }
+}

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-creator.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+import type { SimCloudFrontOriginRequestPolicy } from "../../origin-request-policy/sim-cf-origin-request-policy.js";
+interface SimCfnCfOriginRequestPolicyCreatorProperties {
+    readonly cloudFront: SimCloudFront;
+}
+/**
+ * Creates simulated origin request policies from
+ * AWS::CloudFront::OriginRequestPolicy Resources.
+ */
+export declare class SimCfnCfOriginRequestPolicyCreator {
+    private readonly cloudFront;
+    constructor(properties: SimCfnCfOriginRequestPolicyCreatorProperties);
+    /**
+     * Create and store the policy one Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimCloudFrontOriginRequestPolicy;
+    /**
+     * Remove a policy created from a Resource.
+     */
+    delete(resource: SimCfnResource): void;
+}
+export {};

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-creator.js

@@ -0,0 +1,32 @@
+import { SimCfnCfOriginRequestPolicyConfig } from "./sim-cfn-cf-orp-config.js";
+/**
+ * Creates simulated origin request policies from
+ * AWS::CloudFront::OriginRequestPolicy Resources.
+ */
+export class SimCfnCfOriginRequestPolicyCreator {
+    cloudFront;
+    constructor(properties) {
+        this.cloudFront = properties.cloudFront;
+    }
+    /**
+     * Create and store the policy one Resource describes.
+     */
+    create(resource, properties) {
+        const policy = new SimCfnCfOriginRequestPolicyConfig({
+            resource,
+            properties,
+        }).build();
+        this.cloudFront.addOriginRequestPolicy(policy);
+        return policy;
+    }
+    /**
+     * Remove a policy created from a Resource.
+     */
+    delete(resource) {
+        const policy = resource.simResource;
+        if (policy === undefined) {
+            return;
+        }
+        this.cloudFront.removeOriginRequestPolicy(policy.id);
+    }
+}

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-forwarding.d.ts

@@ -0,0 +1,10 @@
+import { SimCfOriginRequestForwarding } from "../../origin-request-policy/sim-cf-origin-request-forwarding.js";
+import { type SimCfnCfPolicyRefuse } from "../policy/sim-cfn-cf-policy-section.js";
+/**
+ * Read the three sections of an `OriginRequestPolicyConfig` into what the
+ * policy forwards.
+ *
+ * A template leaving a section out gets CloudFront's own `none`. A policy that
+ * says nothing forwards nothing.
+ */
+export declare function simCfnCfOriginRequestForwarding(config: Record<string, unknown>, refuse: SimCfnCfPolicyRefuse): SimCfOriginRequestForwarding;

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-forwarding.js

@@ -0,0 +1,51 @@
+import { simCfForwardedCookieBehaviors, simCfForwardedHeaderBehaviors, simCfForwardedQueryStringBehaviors, SimCfOriginRequestForwarding, } from "../../origin-request-policy/sim-cf-origin-request-forwarding.js";
+import { simCfnCfPolicySection, } from "../policy/sim-cfn-cf-policy-section.js";
+/**
+ * The three sections of an origin request policy, each with the fields
+ * CloudFormation names it by and the behaviours CloudFront offers for it.
+ *
+ * The fields are the ones a cache policy writes. The header section is where
+ * the two kinds part: an origin request policy can forward every header the
+ * viewer sent, which is no use as a cache key.
+ */
+const cookiesSpec = {
+    section: "CookiesConfig",
+    behaviorField: "CookieBehavior",
+    itemsField: "Cookies",
+    behaviors: simCfForwardedCookieBehaviors,
+    defaultBehavior: "none",
+};
+const headersSpec = {
+    section: "HeadersConfig",
+    behaviorField: "HeaderBehavior",
+    itemsField: "Headers",
+    behaviors: simCfForwardedHeaderBehaviors,
+    defaultBehavior: "none",
+};
+const queryStringsSpec = {
+    section: "QueryStringsConfig",
+    behaviorField: "QueryStringBehavior",
+    itemsField: "QueryStrings",
+    behaviors: simCfForwardedQueryStringBehaviors,
+    defaultBehavior: "none",
+};
+/**
+ * Read the three sections of an `OriginRequestPolicyConfig` into what the
+ * policy forwards.
+ *
+ * A template leaving a section out gets CloudFront's own `none`. A policy that
+ * says nothing forwards nothing.
+ */
+export function simCfnCfOriginRequestForwarding(config, refuse) {
+    const cookies = simCfnCfPolicySection(config, cookiesSpec, refuse);
+    const headers = simCfnCfPolicySection(config, headersSpec, refuse);
+    const queries = simCfnCfPolicySection(config, queryStringsSpec, refuse);
+    return new SimCfOriginRequestForwarding({
+        cookieBehavior: cookies.behavior,
+        cookies: cookies.items,
+        headerBehavior: headers.behavior,
+        headers: headers.items,
+        queryStringBehavior: queries.behavior,
+        queryStrings: queries.items,
+    });
+}

package/dist/service/cloudfront/cfn/policy/sim-cfn-cf-policy-section.d.ts

@@ -0,0 +1,22 @@
+export type SimCfnCfPolicyRefuse = (detail: string) => never;
+export interface SimCfnCfPolicySectionSpec<TBehavior extends string> {
+    readonly section: string;
+    readonly behaviorField: string;
+    readonly itemsField: string;
+    readonly behaviors: readonly TBehavior[];
+    readonly defaultBehavior: TBehavior;
+}
+/**
+ * One `<name>Config` section of a cache policy or an origin request policy, as
+ * the behaviour it names and the names that behaviour applies to.
+ *
+ * The two policy kinds write these sections the same way, down to the field
+ * names, and differ only in the behaviours each section offers. An absent
+ * section is CloudFront's `none` with an empty list, and so is a section that
+ * named no behaviour of its own. A behaviour outside the set CloudFront offers
+ * for the section is refused.
+ */
+export declare function simCfnCfPolicySection<TBehavior extends string>(parameters: Record<string, unknown>, spec: SimCfnCfPolicySectionSpec<TBehavior>, refuse: SimCfnCfPolicyRefuse): {
+    behavior: TBehavior;
+    items: readonly string[];
+};