@kensio/yulin 1.20.17 → 1.21.0

package/dist/service/cloudfront/cache-policy/sim-cf-managed-cache-policies.d.ts

@@ -19,9 +19,14 @@ export declare const simCfManagedCachePolicyIds: {
  * The seven managed cache policies, built fresh for one simulated CloudFront.
  *
  * CloudFront owns these and every account has them, so a Behavior can name one
- * without a template creating anything. Each carries the ID and the name AWS
- * publishes for it. The cache key and the TTLs behind each one are left out,
- * along with those of a policy a template creates.
+ * without a template creating anything. Each carries the ID, the name, the
+ * TTLs and the cache key AWS publishes for it, so a Behavior on
+ * `CachingOptimized` here holds what one in an account holds.
+ *
+ * The normalized `Accept-Encoding` header AWS lists in some of these keys is
+ * not a header name in the whitelist. It is what the two `EnableAcceptEncoding`
+ * flags put in the key, which is why a policy carrying no header at all still
+ * caches a compressed object apart from an uncompressed one.
  *
  * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html
  */

package/dist/service/cloudfront/cache-policy/sim-cf-managed-cache-policies.js

@@ -1,3 +1,4 @@
+import { SimCloudFrontCacheKey } from "./sim-cf-cache-key.js";
 import { SimCloudFrontCachePolicy, } from "./sim-cf-cache-policy.js";
 /**
  * The IDs AWS publishes for its managed cache policies.
@@ -15,34 +16,117 @@ export const simCfManagedCachePolicyIds = {
     useOriginCacheControlHeaders: "83da9c7e-98b4-4e11-a168-04f0df8e2c65",
     useOriginCacheControlHeadersQueryStrings: "4cc15a8a-d715-48a4-82b8-cc0b614638fe",
 };
+const daySeconds = 86_400;
+const yearSeconds = 31_536_000;
+/**
+ * The headers the two UseOriginCacheControlHeaders policies key on. They
+ * differ from each other in their query strings alone.
+ */
+const originCacheControlHeaders = [
+    "Host",
+    "Origin",
+    "X-HTTP-Method-Override",
+    "X-HTTP-Method",
+    "X-Method-Override",
+];
 /**
  * The seven managed cache policies, built fresh for one simulated CloudFront.
  *
  * CloudFront owns these and every account has them, so a Behavior can name one
- * without a template creating anything. Each carries the ID and the name AWS
- * publishes for it. The cache key and the TTLs behind each one are left out,
- * along with those of a policy a template creates.
+ * without a template creating anything. Each carries the ID, the name, the
+ * TTLs and the cache key AWS publishes for it, so a Behavior on
+ * `CachingOptimized` here holds what one in an account holds.
+ *
+ * The normalized `Accept-Encoding` header AWS lists in some of these keys is
+ * not a header name in the whitelist. It is what the two `EnableAcceptEncoding`
+ * flags put in the key, which is why a policy carrying no header at all still
+ * caches a compressed object apart from an uncompressed one.
  *
  * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html
  */
 export function simCfManagedCachePolicies() {
     const policies = [
-        managedCachePolicy(simCfManagedCachePolicyIds.amplify, "Amplify"),
-        managedCachePolicy(simCfManagedCachePolicyIds.cachingOptimized, "CachingOptimized"),
-        managedCachePolicy(simCfManagedCachePolicyIds.cachingOptimizedForUncompressedObjects, "CachingOptimizedForUncompressedObjects"),
-        managedCachePolicy(simCfManagedCachePolicyIds.cachingDisabled, "CachingDisabled"),
-        managedCachePolicy(simCfManagedCachePolicyIds.elementalMediaPackage, "Elemental-MediaPackage"),
-        managedCachePolicy(simCfManagedCachePolicyIds.useOriginCacheControlHeaders, "UseOriginCacheControlHeaders"),
-        managedCachePolicy(simCfManagedCachePolicyIds.useOriginCacheControlHeadersQueryStrings, "UseOriginCacheControlHeaders-QueryStrings"),
+        managedCachePolicy(simCfManagedCachePolicyIds.amplify, "Amplify", {
+            minTtlSec: 2,
+            defaultTtlSec: 2,
+            maxTtlSec: 600,
+            cacheKey: new SimCloudFrontCacheKey({
+                cookieBehavior: "all",
+                headerBehavior: "whitelist",
+                headers: ["Authorization", "CloudFront-Viewer-Country", "Host"],
+                queryStringBehavior: "all",
+                enableAcceptEncodingGzip: true,
+                enableAcceptEncodingBrotli: true,
+            }),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.cachingOptimized, "CachingOptimized", {
+            minTtlSec: 1,
+            defaultTtlSec: daySeconds,
+            maxTtlSec: yearSeconds,
+            cacheKey: new SimCloudFrontCacheKey({
+                enableAcceptEncodingGzip: true,
+                enableAcceptEncodingBrotli: true,
+            }),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.cachingOptimizedForUncompressedObjects, "CachingOptimizedForUncompressedObjects", {
+            minTtlSec: 1,
+            defaultTtlSec: daySeconds,
+            maxTtlSec: yearSeconds,
+            cacheKey: new SimCloudFrontCacheKey(),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.cachingDisabled, "CachingDisabled", {
+            minTtlSec: 0,
+            defaultTtlSec: 0,
+            maxTtlSec: 0,
+            cacheKey: new SimCloudFrontCacheKey(),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.elementalMediaPackage, "Elemental-MediaPackage", {
+            minTtlSec: 0,
+            defaultTtlSec: daySeconds,
+            maxTtlSec: yearSeconds,
+            cacheKey: new SimCloudFrontCacheKey({
+                headerBehavior: "whitelist",
+                headers: ["Origin"],
+                queryStringBehavior: "whitelist",
+                queryStrings: ["aws.manifestfilter", "start", "end", "m"],
+                enableAcceptEncodingGzip: true,
+            }),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.useOriginCacheControlHeaders, "UseOriginCacheControlHeaders", {
+            minTtlSec: 0,
+            defaultTtlSec: 0,
+            maxTtlSec: yearSeconds,
+            cacheKey: new SimCloudFrontCacheKey({
+                cookieBehavior: "all",
+                headerBehavior: "whitelist",
+                headers: originCacheControlHeaders,
+                enableAcceptEncodingGzip: true,
+                enableAcceptEncodingBrotli: true,
+            }),
+        }),
+        managedCachePolicy(simCfManagedCachePolicyIds.useOriginCacheControlHeadersQueryStrings, "UseOriginCacheControlHeaders-QueryStrings", {
+            minTtlSec: 0,
+            defaultTtlSec: 0,
+            maxTtlSec: yearSeconds,
+            cacheKey: new SimCloudFrontCacheKey({
+                cookieBehavior: "all",
+                headerBehavior: "whitelist",
+                headers: originCacheControlHeaders,
+                queryStringBehavior: "all",
+                enableAcceptEncodingGzip: true,
+                enableAcceptEncodingBrotli: true,
+            }),
+        }),
     ];
     return new Map(policies.map((policy) => [policy.id, policy]));
 }
 /**
- * One managed policy, under the ID and the name AWS gives it.
+ * One managed policy, under the ID, the name and the settings AWS gives it.
  */
-function managedCachePolicy(id, name) {
+function managedCachePolicy(id, name, settings) {
     return new SimCloudFrontCachePolicy({
         id: id,
         name,
+        ...settings,
     });
 }

package/dist/service/cloudfront/cff/sim-cff-search-distribution.fixture.js

@@ -2,6 +2,7 @@ import { assertNonNullable } from "@kensio/smartass";
 import { SimAwsLocalUrl } from "../../../serve/http/url/sim-aws-local-url.js";
 import { simHttpApiLambdaProxyFactory } from "../../apigatewayv2/api/sim-http-api-lambda-proxy.factory.js";
 import { simCfDistroConfigFactory } from "../distribution/sim-cf-distro-config.factory.js";
+import { simCfManagedOriginRequestPolicyIds } from "../origin-request-policy/sim-cf-managed-origin-request-policies.js";
 import { makeCffFunctionCodeInput } from "./function-code-input/cff-function-code-input.js";
 /**
  * Put a viewer-request Function in front of an Origin echoing the query it is
@@ -36,6 +37,9 @@ export async function searchDistributionUrl(simAws, path, handler) {
                 DefaultCacheBehavior: {
                     TargetOriginId: "SiteOrigin",
                     ViewerProtocolPolicy: "allow-all",
+                    // The Origin echoes the query it is sent, which reaches it only
+                    // where the Behavior forwards it.
+                    OriginRequestPolicyId: simCfManagedOriginRequestPolicyIds.allViewer,
                     FunctionAssociations: {
                         Items: [
                             {

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-config.d.ts

@@ -4,14 +4,19 @@ import { SimCloudFrontCachePolicy } from "../../cache-policy/sim-cf-cache-policy
 /**
  * Reads an AWS::CloudFront::CachePolicy Resource into a simulated policy.
  *
- * `Name` and `Comment` are what the policy carries. The cache key sections and
- * the TTLs are read past: what they configure is a cache this simulation has
- * yet to grow. A Resource missing its `Name` is refused, as CloudFormation
- * refuses one.
+ * The policy carries its `Name`, its `Comment`, its three TTLs and the cache
+ * key of its `ParametersInCacheKeyAndForwardedToOrigin`. A TTL a template left
+ * out falls back to CloudFront's own default rather than to nothing, so a
+ * policy holds what one in an account holds either way. A Resource missing its
+ * `Name` is refused, as CloudFormation refuses one.
  */
 export declare class SimCfnCfCachePolicyConfig {
     private readonly resource;
     private readonly properties;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    private readonly refuse;
     constructor(properties: {
         readonly resource: SimCfnResource;
         readonly properties: SimCfnTemplateValueRecord;
@@ -20,8 +25,4 @@ export declare class SimCfnCfCachePolicyConfig {
      * Build the simulated policy this Resource describes.
      */
     build(): SimCloudFrontCachePolicy;
-    /**
-     * Refuse this Resource, saying which part of it could not be read.
-     */
-    private refuse;
 }

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-config.js

@@ -1,16 +1,24 @@
 import { isRecord } from "../../../../util/type-guard/record.js";
 import { SimCloudFrontCachePolicy } from "../../cache-policy/sim-cf-cache-policy.js";
+import { simCfnCfCachePolicyCacheKey } from "./sim-cfn-cf-cache-policy-key.js";
 /**
  * Reads an AWS::CloudFront::CachePolicy Resource into a simulated policy.
  *
- * `Name` and `Comment` are what the policy carries. The cache key sections and
- * the TTLs are read past: what they configure is a cache this simulation has
- * yet to grow. A Resource missing its `Name` is refused, as CloudFormation
- * refuses one.
+ * The policy carries its `Name`, its `Comment`, its three TTLs and the cache
+ * key of its `ParametersInCacheKeyAndForwardedToOrigin`. A TTL a template left
+ * out falls back to CloudFront's own default rather than to nothing, so a
+ * policy holds what one in an account holds either way. A Resource missing its
+ * `Name` is refused, as CloudFormation refuses one.
  */
 export class SimCfnCfCachePolicyConfig {
     resource;
     properties;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    refuse = (detail) => {
+        throw new Error(`Invalid AWS::CloudFront::CachePolicy ${this.resource.logicalId}: ${detail}`);
+    };
     constructor(properties) {
         this.resource = properties.resource;
         this.properties = properties.properties;
@@ -19,24 +27,45 @@ export class SimCfnCfCachePolicyConfig {
      * Build the simulated policy this Resource describes.
      */
     build() {
+        const { refuse } = this;
         const config = this.properties["CachePolicyConfig"];
         if (!isRecord(config)) {
-            return this.refuse("CachePolicyConfig must be an object");
+            return refuse("CachePolicyConfig must be an object");
         }
         const name = config["Name"];
         if (typeof name !== "string") {
-            return this.refuse("CachePolicyConfig needs a string Name");
+            return refuse("CachePolicyConfig needs a string Name");
         }
         const comment = config["Comment"];
+        const minTtlSec = ttlSeconds(config, "MinTTL", refuse);
+        const defaultTtlSec = ttlSeconds(config, "DefaultTTL", refuse);
+        const maxTtlSec = ttlSeconds(config, "MaxTTL", refuse);
         return new SimCloudFrontCachePolicy({
             name,
             ...(typeof comment === "string" && { comment }),
+            ...(minTtlSec !== undefined && { minTtlSec }),
+            ...(defaultTtlSec !== undefined && { defaultTtlSec }),
+            ...(maxTtlSec !== undefined && { maxTtlSec }),
+            cacheKey: simCfnCfCachePolicyCacheKey(config, refuse),
         });
     }
-    /**
-     * Refuse this Resource, saying which part of it could not be read.
-     */
-    refuse(detail) {
-        throw new Error(`Invalid AWS::CloudFront::CachePolicy ${this.resource.logicalId}: ${detail}`);
+}
+/**
+ * One TTL, or nothing where the template left it out for CloudFront's default
+ * to stand in.
+ *
+ * A template here is often a JavaScript object rather than parsed JSON, so a
+ * fraction, a negative or a NaN can reach this where a deployed template could
+ * not carry one, and none of them is a length of time an object could sit in a
+ * cache for.
+ */
+function ttlSeconds(config, field, refuse) {
+    // oxlint-disable-next-line security/detect-object-injection
+    const value = config[field];
+    if (value === undefined) {
+        return undefined;
     }
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 0
+        ? value
+        : refuse(`CachePolicyConfig ${field} must be a whole number of seconds`);
 }

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-key.d.ts

@@ -0,0 +1,10 @@
+import { SimCloudFrontCacheKey } from "../../cache-policy/sim-cf-cache-key.js";
+import { type SimCfnCfPolicyRefuse } from "../policy/sim-cfn-cf-policy-section.js";
+/**
+ * Read the `ParametersInCacheKeyAndForwardedToOrigin` of a
+ * `CachePolicyConfig` into the cache key a policy carries.
+ *
+ * A template leaving the whole thing out gets CloudFront's own `none` in all
+ * three sections, with neither compression flag set.
+ */
+export declare function simCfnCfCachePolicyCacheKey(config: Record<string, unknown>, refuse: SimCfnCfPolicyRefuse): SimCloudFrontCacheKey;

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-key.js

@@ -0,0 +1,50 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { SimCloudFrontCacheKey } from "../../cache-policy/sim-cf-cache-key.js";
+import { simCfnCfPolicySection, } from "../policy/sim-cfn-cf-policy-section.js";
+import { simCfnCfCookiesSpec, simCfnCfHeadersSpec, simCfnCfQueryStringsSpec, } from "./sim-cfn-cf-cache-policy-section.js";
+const parametersField = "ParametersInCacheKeyAndForwardedToOrigin";
+/**
+ * Read the `ParametersInCacheKeyAndForwardedToOrigin` of a
+ * `CachePolicyConfig` into the cache key a policy carries.
+ *
+ * A template leaving the whole thing out gets CloudFront's own `none` in all
+ * three sections, with neither compression flag set.
+ */
+export function simCfnCfCachePolicyCacheKey(config, refuse) {
+    // oxlint-disable-next-line security/detect-object-injection
+    const parameters = config[parametersField];
+    if (parameters === undefined) {
+        return new SimCloudFrontCacheKey();
+    }
+    if (!isRecord(parameters)) {
+        return refuse(`${parametersField} must be an object`);
+    }
+    const cookies = simCfnCfPolicySection(parameters, simCfnCfCookiesSpec, refuse);
+    const headers = simCfnCfPolicySection(parameters, simCfnCfHeadersSpec, refuse);
+    const queries = simCfnCfPolicySection(parameters, simCfnCfQueryStringsSpec, refuse);
+    return new SimCloudFrontCacheKey({
+        cookieBehavior: cookies.behavior,
+        cookies: cookies.items,
+        headerBehavior: headers.behavior,
+        headers: headers.items,
+        queryStringBehavior: queries.behavior,
+        queryStrings: queries.items,
+        enableAcceptEncodingGzip: encodingFlag(parameters, "Gzip", refuse),
+        enableAcceptEncodingBrotli: encodingFlag(parameters, "Brotli", refuse),
+    });
+}
+/**
+ * One of the two flags that put the normalized `Accept-Encoding` header in the
+ * cache key. Both are off where a template says nothing.
+ */
+function encodingFlag(parameters, encoding, refuse) {
+    const field = `EnableAcceptEncoding${encoding}`;
+    // oxlint-disable-next-line security/detect-object-injection
+    const value = parameters[field];
+    if (value === undefined) {
+        return false;
+    }
+    return typeof value === "boolean"
+        ? value
+        : refuse(`${parametersField} ${field} must be a boolean`);
+}

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-section.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The three sections of a cache key, each with the fields CloudFormation
+ * names it by and the behaviours CloudFront offers for it.
+ *
+ * An origin request policy writes the same three sections under the same field
+ * names, and `simCfnCfPolicySection` reads either kind from a spec like these.
+ */
+export declare const simCfnCfCookiesSpec: {
+    readonly section: "CookiesConfig";
+    readonly behaviorField: "CookieBehavior";
+    readonly itemsField: "Cookies";
+    readonly behaviors: readonly ["none", "whitelist", "allExcept", "all"];
+    readonly defaultBehavior: "none";
+};
+export declare const simCfnCfHeadersSpec: {
+    readonly section: "HeadersConfig";
+    readonly behaviorField: "HeaderBehavior";
+    readonly itemsField: "Headers";
+    readonly behaviors: readonly ["none", "whitelist"];
+    readonly defaultBehavior: "none";
+};
+export declare const simCfnCfQueryStringsSpec: {
+    readonly section: "QueryStringsConfig";
+    readonly behaviorField: "QueryStringBehavior";
+    readonly itemsField: "QueryStrings";
+    readonly behaviors: readonly ["none", "whitelist", "allExcept", "all"];
+    readonly defaultBehavior: "none";
+};

package/dist/service/cloudfront/cfn/cache-policy/sim-cfn-cf-cache-policy-section.js

@@ -0,0 +1,29 @@
+import { simCfCacheKeyCookieBehaviors, simCfCacheKeyHeaderBehaviors, simCfCacheKeyQueryStringBehaviors, } from "../../cache-policy/sim-cf-cache-key.js";
+/**
+ * The three sections of a cache key, each with the fields CloudFormation
+ * names it by and the behaviours CloudFront offers for it.
+ *
+ * An origin request policy writes the same three sections under the same field
+ * names, and `simCfnCfPolicySection` reads either kind from a spec like these.
+ */
+export const simCfnCfCookiesSpec = {
+    section: "CookiesConfig",
+    behaviorField: "CookieBehavior",
+    itemsField: "Cookies",
+    behaviors: simCfCacheKeyCookieBehaviors,
+    defaultBehavior: "none",
+};
+export const simCfnCfHeadersSpec = {
+    section: "HeadersConfig",
+    behaviorField: "HeaderBehavior",
+    itemsField: "Headers",
+    behaviors: simCfCacheKeyHeaderBehaviors,
+    defaultBehavior: "none",
+};
+export const simCfnCfQueryStringsSpec = {
+    section: "QueryStringsConfig",
+    behaviorField: "QueryStringBehavior",
+    itemsField: "QueryStrings",
+    behaviors: simCfCacheKeyQueryStringBehaviors,
+    defaultBehavior: "none",
+};

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-behavior-policy-kinds.d.ts

@@ -0,0 +1,16 @@
+import type { SimCloudFront } from "../../sim-cloudfront.js";
+/**
+ * One kind of policy a Behavior names, in the terms a template writes it in,
+ * with the way this simulation is asked whether it holds one and what the
+ * Behavior loses along with it.
+ */
+export interface BehaviorPolicyKind {
+    readonly property: "ResponseHeadersPolicyId" | "CachePolicyId" | "OriginRequestPolicyId";
+    readonly name: string;
+    readonly loses: string;
+    readonly held: (cloudFront: SimCloudFront, policyId: string) => boolean;
+}
+/**
+ * The three policies a Behavior names outside itself.
+ */
+export declare const behaviorPolicyKinds: readonly BehaviorPolicyKind[];

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-behavior-policy-kinds.js

@@ -0,0 +1,23 @@
+/**
+ * The three policies a Behavior names outside itself.
+ */
+export const behaviorPolicyKinds = [
+    {
+        property: "ResponseHeadersPolicyId",
+        name: "response headers policy",
+        loses: "serves every response without the headers that policy would have set",
+        held: (cloudFront, policyId) => cloudFront.getResponseHeadersPolicyById(policyId) !== undefined,
+    },
+    {
+        property: "CachePolicyId",
+        name: "cache policy",
+        loses: "reports no CachePolicyId",
+        held: (cloudFront, policyId) => cloudFront.getCachePolicyById(policyId) !== undefined,
+    },
+    {
+        property: "OriginRequestPolicyId",
+        name: "origin request policy",
+        loses: "reports no OriginRequestPolicyId",
+        held: (cloudFront, policyId) => cloudFront.getOriginRequestPolicyById(policyId) !== undefined,
+    },
+];

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-behavior-policies.d.ts

@@ -3,7 +3,8 @@ import type { SimCloudFrontDistributionConfig } from "../../command/create-distr
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 /**
  * The DistributionConfig to deploy, without a policy ID naming a response
- * headers policy or a cache policy this simulation does not hold.
+ * headers policy, a cache policy or an origin request policy this simulation
+ * does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -19,6 +20,6 @@ import type { SimCloudFront } from "../../sim-cloudfront.js";
  * naming one keeps it.
  *
  * One Behavior losing a policy leaves the others holding theirs, and a
- * Behavior losing one kind of policy keeps the other.
+ * Behavior losing one kind of policy keeps the others.
  */
 export declare function simCfnCfDistroWithHeldBehaviorPolicies(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, cloudFront: SimCloudFront): SimCloudFrontDistributionConfig;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-behavior-policies.js

@@ -6,7 +6,8 @@ import { SimCfnCfDistroPolicyDrops } from "./sim-cfn-cf-distro-policy-drops.js";
 const defaultBehaviorPath = "DistributionConfig.DefaultCacheBehavior";
 /**
  * The DistributionConfig to deploy, without a policy ID naming a response
- * headers policy or a cache policy this simulation does not hold.
+ * headers policy, a cache policy or an origin request policy this simulation
+ * does not hold.
  *
  * `CreateDistribution` refuses such an ID, as real CloudFront refuses one, and
  * a Distribution deployed from a template is the one place that refusal costs
@@ -22,7 +23,7 @@ const defaultBehaviorPath = "DistributionConfig.DefaultCacheBehavior";
  * naming one keeps it.
  *
  * One Behavior losing a policy leaves the others holding theirs, and a
- * Behavior losing one kind of policy keeps the other.
+ * Behavior losing one kind of policy keeps the others.
  */
 export function simCfnCfDistroWithHeldBehaviorPolicies(resource, distributionConfig, cloudFront) {
     const drops = new SimCfnCfDistroPolicyDrops(resource, cloudFront);

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts

@@ -10,12 +10,12 @@ interface SimCfnCfDistroCreatorProperties {
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` or `CachePolicyId` naming a policy it does not
- * hold. CloudFront has no Resource of its own for any of them, so all of them
- * live on the Distribution itself, and refusing one would take the
- * Distribution down over something that was never the point of the template.
- * The site a local dev server and a suite of tests make requests to has to
- * survive that.
+ * `ResponseHeadersPolicyId`, `CachePolicyId` or `OriginRequestPolicyId`
+ * naming a policy it does not hold. CloudFront has no Resource of its own for
+ * any of them, so all of them live on the Distribution itself, and refusing
+ * one would take the Distribution down over something that was never the point
+ * of the template. The site a local dev server and a suite of tests make
+ * requests to has to survive that.
  */
 export declare class SimCfnCfDistroCreator {
     private readonly cloudFront;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -9,12 +9,12 @@ import { simCfnResourceCallerOptions } from "../../../cloudformation/resource/ca
  *
  * A `WebACLId` naming a web ACL this simulation does not hold is left out and
  * recorded, and so are a Lambda@Edge association it cannot run and a
- * `ResponseHeadersPolicyId` or `CachePolicyId` naming a policy it does not
- * hold. CloudFront has no Resource of its own for any of them, so all of them
- * live on the Distribution itself, and refusing one would take the
- * Distribution down over something that was never the point of the template.
- * The site a local dev server and a suite of tests make requests to has to
- * survive that.
+ * `ResponseHeadersPolicyId`, `CachePolicyId` or `OriginRequestPolicyId`
+ * naming a policy it does not hold. CloudFront has no Resource of its own for
+ * any of them, so all of them live on the Distribution itself, and refusing
+ * one would take the Distribution down over something that was never the point
+ * of the template. The site a local dev server and a suite of tests make
+ * requests to has to survive that.
  */
 export class SimCfnCfDistroCreator {
     cloudFront;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-policy-drops.js

@@ -1,3 +1,4 @@
+import { behaviorPolicyKinds, } from "./sim-cfn-cf-behavior-policy-kinds.js";
 /**
  * Takes a policy ID naming a policy this simulation does not hold off the
  * Behavior that named it, and records each one on the Resource.
@@ -15,36 +16,20 @@ export class SimCfnCfDistroPolicyDrops {
      * are not.
      */
     heldPolicies(behavior, behaviorPath) {
-        const withHeaders = this.heldPolicy(behavior, behaviorPath, "ResponseHeadersPolicyId", (policyId) => this.cloudFront.getResponseHeadersPolicyById(policyId) !== undefined, headersPolicyDropReason);
-        return this.heldPolicy(withHeaders, behaviorPath, "CachePolicyId", (policyId) => this.cloudFront.getCachePolicyById(policyId) !== undefined, cachePolicyDropReason);
+        return behaviorPolicyKinds.reduce((held, kind) => this.heldPolicy(held, behaviorPath, kind), behavior);
     }
     /**
      * One policy property of one Behavior, dropped where the ID names nothing
      * this simulation holds.
      */
-    heldPolicy(behavior, behaviorPath, property, held, reason) {
-        // oxlint-disable-next-line security/detect-object-injection
-        const policyId = behavior[property];
-        if (policyId === undefined || held(policyId)) {
+    heldPolicy(behavior, behaviorPath, kind) {
+        const policyId = behavior[kind.property];
+        if (policyId === undefined || kind.held(this.cloudFront, policyId)) {
             return behavior;
         }
         this.count += 1;
-        this.resource.ignoreProperty(`${behaviorPath}.${property}`, reason(policyId));
-        return { ...behavior, [property]: undefined };
+        this.resource.ignoreProperty(`${behaviorPath}.${kind.property}`, `${kind.name} ${policyId} is not held by this simulation, so the ` +
+            `Behavior is deployed without one and ${kind.loses}`);
+        return { ...behavior, [kind.property]: undefined };
     }
 }
-/**
- * What a Behavior loses along with a response headers policy.
- */
-function headersPolicyDropReason(policyId) {
-    return (`response headers policy ${policyId} is not held by this simulation, so ` +
-        `the Behavior is deployed without one and serves every response without ` +
-        `the headers that policy would have set`);
-}
-/**
- * What a Behavior loses along with a cache policy.
- */
-function cachePolicyDropReason(policyId) {
-    return (`cache policy ${policyId} is not held by this simulation, so the ` +
-        `Behavior is deployed without one and reports no CachePolicyId`);
-}

package/dist/service/cloudfront/cfn/origin-request-policy/sim-cfn-cf-orp-config.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import { SimCloudFrontOriginRequestPolicy } from "../../origin-request-policy/sim-cf-origin-request-policy.js";
+/**
+ * Reads an AWS::CloudFront::OriginRequestPolicy Resource into a simulated
+ * policy.
+ *
+ * The policy carries its `Name`, its `Comment` and the three sections that say
+ * what it forwards to the Origin. A section a template left out falls back to
+ * CloudFront's `none`. A Resource missing its `Name` is refused, as
+ * CloudFormation refuses one.
+ */
+export declare class SimCfnCfOriginRequestPolicyConfig {
+    private readonly resource;
+    private readonly properties;
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    private readonly refuse;
+    constructor(properties: {
+        readonly resource: SimCfnResource;
+        readonly properties: SimCfnTemplateValueRecord;
+    });
+    /**
+     * Build the simulated policy this Resource describes.
+     */
+    build(): SimCloudFrontOriginRequestPolicy;
+}