@kensio/yulin 1.20.4 → 1.20.5

package/dist/service/cloudfront/response-headers-policy/sim-cf-managed-response-headers-policies.js

@@ -0,0 +1,119 @@
+import { SimCloudFrontResponseHeader } from "./sim-cf-response-header.js";
+import { SimCloudFrontResponseHeadersPolicyCors } from "./sim-cf-response-headers-policy-cors.js";
+import { SimCloudFrontResponseHeadersPolicy, } from "./sim-cf-response-headers-policy.js";
+/**
+ * The IDs AWS publishes for its managed response headers policies.
+ *
+ * A template names one of these directly. CDK's `ResponseHeadersPolicy`
+ * statics carry the same five, and synthesize the ID into a Behavior's
+ * `ResponseHeadersPolicyId` with no Resource behind it.
+ */
+export const simCfManagedResponseHeadersPolicyIds = {
+    simpleCors: "60669652-455b-4ae9-85a4-c4c02393f86c",
+    corsWithPreflight: "5cc3b908-e619-4b99-88e5-2cf7f45965bd",
+    securityHeaders: "67f7725c-6f97-4210-82d7-5512b31e9d03",
+    corsAndSecurityHeaders: "e61eb60c-9c35-4d20-a928-2b84e02af89c",
+    corsWithPreflightAndSecurityHeaders: "eaab4381-ed33-4a86-88ca-d9558dc6cd63",
+};
+/**
+ * The security headers section the three managed policies that carry one set.
+ *
+ * All three carry the same list. Only `X-Content-Type-Options` overrides the
+ * Origin, so a site sending its own `X-Frame-Options` keeps it while its
+ * `nosniff` is replaced.
+ */
+function securityHeaders() {
+    return [
+        new SimCloudFrontResponseHeader({
+            name: "Referrer-Policy",
+            value: "strict-origin-when-cross-origin",
+        }),
+        new SimCloudFrontResponseHeader({
+            name: "Strict-Transport-Security",
+            value: "max-age=31536000",
+        }),
+        new SimCloudFrontResponseHeader({
+            name: "X-Content-Type-Options",
+            value: "nosniff",
+            override: true,
+        }),
+        new SimCloudFrontResponseHeader({
+            name: "X-Frame-Options",
+            value: "SAMEORIGIN",
+        }),
+        new SimCloudFrontResponseHeader({
+            name: "X-XSS-Protection",
+            value: "1; mode=block",
+        }),
+    ];
+}
+/**
+ * The CORS section behind SimpleCORS, allowing a simple request from any
+ * Origin with `Access-Control-Allow-Origin` alone.
+ */
+function simpleCors() {
+    return new SimCloudFrontResponseHeadersPolicyCors({
+        allowCredentials: false,
+        allowHeaders: [],
+        allowMethods: [],
+        allowOrigins: ["*"],
+        originOverride: false,
+    });
+}
+/**
+ * The CORS section behind CORS-With-Preflight, which adds the method list and
+ * a wildcard `Access-Control-Expose-Headers` to the wildcard Origin.
+ */
+function preflightCors() {
+    return new SimCloudFrontResponseHeadersPolicyCors({
+        allowCredentials: false,
+        allowHeaders: [],
+        allowMethods: ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"],
+        allowOrigins: ["*"],
+        exposeHeaders: ["*"],
+        originOverride: false,
+    });
+}
+/**
+ * The five managed response headers policies, built fresh for one simulated
+ * CloudFront.
+ *
+ * CloudFront owns these and every account has them, so a Behavior can name one
+ * without a template creating anything. They are built per registry so that
+ * one simulation never hands another a policy object.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-response-headers-policies.html
+ */
+export function simCfManagedResponseHeadersPolicies() {
+    const policies = [
+        new SimCloudFrontResponseHeadersPolicy({
+            id: simCfManagedResponseHeadersPolicyIds.simpleCors,
+            name: "SimpleCORS",
+            cors: simpleCors(),
+        }),
+        new SimCloudFrontResponseHeadersPolicy({
+            id: simCfManagedResponseHeadersPolicyIds.corsWithPreflight,
+            name: "CORS-With-Preflight",
+            cors: preflightCors(),
+        }),
+        new SimCloudFrontResponseHeadersPolicy({
+            id: simCfManagedResponseHeadersPolicyIds.securityHeaders,
+            name: "SecurityHeadersPolicy",
+            securityHeaders: securityHeaders(),
+        }),
+        new SimCloudFrontResponseHeadersPolicy({
+            id: simCfManagedResponseHeadersPolicyIds.corsAndSecurityHeaders,
+            name: "CORS-and-SecurityHeadersPolicy",
+            cors: simpleCors(),
+            securityHeaders: securityHeaders(),
+        }),
+        new SimCloudFrontResponseHeadersPolicy({
+            id: simCfManagedResponseHeadersPolicyIds.corsWithPreflightAndSecurityHeaders,
+            name: "CORS-with-preflight-and-SecurityHeadersPolicy",
+            cors: preflightCors(),
+            securityHeaders: securityHeaders(),
+        }),
+    ];
+    return new Map(policies.map((policy) => [policy.id, policy]));
+}
+//# sourceMappingURL=sim-cf-managed-response-headers-policies.js.map

package/dist/service/cloudfront/response-headers-policy/sim-cf-managed-response-headers-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-managed-response-headers-policies.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-managed-response-headers-policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EACL,kCAAkC,GAGnC,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,UAAU,EAAE,sCAAsC;IAClD,iBAAiB,EAAE,sCAAsC;IACzD,eAAe,EAAE,sCAAsC;IACvD,sBAAsB,EAAE,sCAAsC;IAC9D,mCAAmC,EAAE,sCAAsC;CACnE,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,eAAe;IACtB,OAAO;QACL,IAAI,2BAA2B,CAAC;YAC9B,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,iCAAiC;SACzC,CAAC;QACF,IAAI,2BAA2B,CAAC;YAC9B,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,kBAAkB;SAC1B,CAAC;QACF,IAAI,2BAA2B,CAAC;YAC9B,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,2BAA2B,CAAC;YAC9B,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,YAAY;SACpB,CAAC;QACF,IAAI,2BAA2B,CAAC;YAC9B,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,eAAe;SACvB,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,OAAO,IAAI,sCAAsC,CAAC;QAChD,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC,GAAG,CAAC;QACnB,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa;IACpB,OAAO,IAAI,sCAAsC,CAAC;QAChD,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;QAC1E,YAAY,EAAE,CAAC,GAAG,CAAC;QACnB,aAAa,EAAE,CAAC,GAAG,CAAC;QACpB,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC;IACjD,MAAM,QAAQ,GAAG;QACf,IAAI,kCAAkC,CAAC;YACrC,EAAE,EAAE,oCAAoC,CAAC,UAAkD;YAC3F,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,UAAU,EAAE;SACnB,CAAC;QACF,IAAI,kCAAkC,CAAC;YACrC,EAAE,EAAE,oCAAoC,CAAC,iBAAyD;YAClG,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,aAAa,EAAE;SACtB,CAAC;QACF,IAAI,kCAAkC,CAAC;YACrC,EAAE,EAAE,oCAAoC,CAAC,eAAuD;YAChG,IAAI,EAAE,uBAAuB;YAC7B,eAAe,EAAE,eAAe,EAAE;SACnC,CAAC;QACF,IAAI,kCAAkC,CAAC;YACrC,EAAE,EAAE,oCAAoC,CAAC,sBAA8D;YACvG,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,UAAU,EAAE;YAClB,eAAe,EAAE,eAAe,EAAE;SACnC,CAAC;QACF,IAAI,kCAAkC,CAAC;YACrC,EAAE,EAAE,oCAAoC,CAAC,mCAA2E;YACpH,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,aAAa,EAAE;YACrB,eAAe,EAAE,eAAe,EAAE;SACnC,CAAC;KACH,CAAC;IAEF,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.d.ts

@@ -28,15 +28,30 @@ export declare class SimCloudFrontResponseHeadersPolicyCors {
     private readonly originOverride;
     constructor(properties: SimCloudFrontResponseHeadersPolicyCorsProperties);
     /**
-     * Set this policy's CORS headers on a response, for the `Origin` header a
-     * viewer request carried.
+     * Set this policy's CORS headers on a response, for the `Origin` header and
+     * the method a viewer request carried.
      *
      * `OriginOverride` decides the whole section rather than one header at a
      * time, unlike a custom or security header: without it, an Origin response
      * carrying any CORS header at all keeps every header this section would have
      * set off the response, whether or not the policy names that header.
+     *
+     * The method defaults to `GET`, which is to say a simple request. Only a
+     * caller with an `OPTIONS` request in hand needs to say so.
+     */
+    apply(headers: Headers, requestOrigin: string | null, requestMethod?: string): void;
+    /**
+     * Set the headers CloudFront documents against a preflight request alone.
+     *
+     * `AccessControlAllowMethods`, `AccessControlAllowHeaders` and
+     * `AccessControlMaxAgeSec` each answer the question a preflight asks, and a
+     * browser reads none of them off a simple request.
+     *
+     * An empty list names no method and no header. CloudFront leaves the header
+     * off there, the way it leaves off the expose list, and a header carrying an
+     * empty value would mean something else to a browser.
      */
-    apply(headers: Headers, requestOrigin: string | null): void;
+    private applyPreflight;
     private resolveAllowOrigin;
     private resolvedAllowMethods;
 }

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy-cors.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AA4BA,UAAU,gDAAgD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,YAAY,UAAU,EAAE,gDAAgD,EAQvE;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CA8C1D;IAED,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,oBAAoB;CAK7B"}
+{"version":3,"file":"sim-cf-response-headers-policy-cors.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AA4BA,UAAU,gDAAgD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,YAAY,UAAU,EAAE,gDAAgD,EAQvE;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CACH,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,aAAa,SAAQ,GACpB,IAAI,CAwCN;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,oBAAoB;CAK7B"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.js

@@ -52,15 +52,18 @@ export class SimCloudFrontResponseHeadersPolicyCors {
         this.originOverride = properties.originOverride;
     }
     /**
-     * Set this policy's CORS headers on a response, for the `Origin` header a
-     * viewer request carried.
+     * Set this policy's CORS headers on a response, for the `Origin` header and
+     * the method a viewer request carried.
      *
      * `OriginOverride` decides the whole section rather than one header at a
      * time, unlike a custom or security header: without it, an Origin response
      * carrying any CORS header at all keeps every header this section would have
      * set off the response, whether or not the policy names that header.
+     *
+     * The method defaults to `GET`, which is to say a simple request. Only a
+     * caller with an `OPTIONS` request in hand needs to say so.
      */
-    apply(headers, requestOrigin) {
+    apply(headers, requestOrigin, requestMethod = "GET") {
         if (!this.originOverride &&
             corsResponseHeaders.some((n) => headers.has(n))) {
             return;
@@ -76,8 +79,6 @@ export class SimCloudFrontResponseHeadersPolicyCors {
         if (allowOrigin !== "*") {
             headers.append("Vary", "Origin");
         }
-        headers.set("Access-Control-Allow-Methods", this.resolvedAllowMethods().join(","));
-        headers.set("Access-Control-Allow-Headers", this.allowHeaders.join(","));
         // A false Access-Control-Allow-Credentials is not a header value the
         // fetch spec recognises, so CloudFront leaves it off rather than sending
         // a value meaning the same as absence.
@@ -87,6 +88,28 @@ export class SimCloudFrontResponseHeadersPolicyCors {
         if (this.exposeHeaders.length > 0) {
             headers.set("Access-Control-Expose-Headers", this.exposeHeaders.join(","));
         }
+        if (requestMethod === "OPTIONS") {
+            this.applyPreflight(headers);
+        }
+    }
+    /**
+     * Set the headers CloudFront documents against a preflight request alone.
+     *
+     * `AccessControlAllowMethods`, `AccessControlAllowHeaders` and
+     * `AccessControlMaxAgeSec` each answer the question a preflight asks, and a
+     * browser reads none of them off a simple request.
+     *
+     * An empty list names no method and no header. CloudFront leaves the header
+     * off there, the way it leaves off the expose list, and a header carrying an
+     * empty value would mean something else to a browser.
+     */
+    applyPreflight(headers) {
+        if (this.allowMethods.length > 0) {
+            headers.set("Access-Control-Allow-Methods", this.resolvedAllowMethods().join(","));
+        }
+        if (this.allowHeaders.length > 0) {
+            headers.set("Access-Control-Allow-Headers", this.allowHeaders.join(","));
+        }
         if (this.maxAgeSec !== undefined) {
             headers.set("Access-Control-Max-Age", String(this.maxAgeSec));
         }

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy-cors.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAEhF,MAAM,uBAAuB,GAAG;IAC9B,KAAK;IACL,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;CACG,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG;IAC1B,6BAA6B;IAC7B,8BAA8B;IAC9B,8BAA8B;IAC9B,kCAAkC;IAClC,+BAA+B;IAC/B,wBAAwB;CAChB,CAAC;AAYX;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,gBAAgB,CAAU;IAC1B,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,aAAa,CAAoB;IACjC,SAAS,CAAqB;IAC9B,cAAc,CAAU;IAEzC,YAAY,UAA4D;QACtE,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAgB,EAAE,aAA4B;QAClD,IACE,CAAC,IAAI,CAAC,cAAc;YACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC/C,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;QAExD,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,GAAG,CACT,8BAA8B,EAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CACtC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzE,qEAAqE;QACrE,yEAAyE;QACzE,uCAAuC;QACvC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CACT,+BAA+B,EAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7B,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,aAA4B;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,CACtD;YACC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,oBAAoB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-cf-response-headers-policy-cors.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAEhF,MAAM,uBAAuB,GAAG;IAC9B,KAAK;IACL,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;CACG,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG;IAC1B,6BAA6B;IAC7B,8BAA8B;IAC9B,8BAA8B;IAC9B,kCAAkC;IAClC,+BAA+B;IAC/B,wBAAwB;CAChB,CAAC;AAYX;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,gBAAgB,CAAU;IAC1B,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,YAAY,CAAoB;IAChC,aAAa,CAAoB;IACjC,SAAS,CAAqB;IAC9B,cAAc,CAAU;IAEzC,YAAY,UAA4D;QACtE,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CACH,OAAgB,EAChB,aAA4B,EAC5B,aAAa,GAAG,KAAK;QAErB,IACE,CAAC,IAAI,CAAC,cAAc;YACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC/C,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;QAExD,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,uCAAuC;QACvC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CACT,+BAA+B,EAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7B,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,cAAc,CAAC,OAAgB;QACrC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CACT,8BAA8B,EAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CACtC,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,aAA4B;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,CACtD;YACC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,oBAAoB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.d.ts

@@ -5,12 +5,18 @@ import type { SimCloudFrontResponseHeadersPolicy, SimCloudFrontResponseHeadersPo
  * Policies are found by ID, which is what a cache Behavior's
  * `responseHeadersPolicyId` names, and by name, which is what decides whether a
  * new one may be stored.
+ *
+ * AWS's five managed policies are held apart from the ones a template creates.
+ * CloudFront keeps them in its own namespace, so a template may create a policy
+ * called `SecurityHeadersPolicy` of its own, and deleting the stack that
+ * created it leaves the managed one where it was.
  */
 export declare class SimCloudFrontResponseHeadersPolicyRegistry {
     private readonly policies;
+    private readonly managedPolicies;
     /**
-     * Store a policy, refusing a name another policy already holds as CloudFront
-     * does.
+     * Store a policy a template created, refusing a name another such policy
+     * already holds as CloudFront does.
      */
     add(policy: SimCloudFrontResponseHeadersPolicy): void;
     /**
@@ -18,11 +24,15 @@ export declare class SimCloudFrontResponseHeadersPolicyRegistry {
      */
     remove(policyId: SimCloudFrontResponseHeadersPolicyId): void;
     /**
-     * Get a policy by ID.
+     * Get a policy by ID, whether a template created it or AWS manages it.
      */
     byId(policyId: SimCloudFrontResponseHeadersPolicyId | string): SimCloudFrontResponseHeadersPolicy | undefined;
     /**
-     * Get a policy by name.
+     * Get a policy a template created, by name.
+     *
+     * A managed policy is left out. Its name belongs to CloudFront's own
+     * namespace, and this is what decides whether a template may store a policy
+     * under a name.
      */
     byName(policyName: string): SimCloudFrontResponseHeadersPolicy | undefined;
 }

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kCAAkC,EAClC,oCAAoC,EAErC,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,qBAAa,0CAA0C;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAE7E;;;OAGG;IACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,GAAG,IAAI,CAQpD;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,oCAAoC,GAAG,IAAI,CAE3D;IAED;;OAEG;IACH,IAAI,CACF,QAAQ,EAAE,oCAAoC,GAAG,MAAM,GACtD,kCAAkC,GAAG,SAAS,CAEhD;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS,CAEzE;CACF"}
+{"version":3,"file":"sim-cf-response-headers-policy-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kCAAkC,EAClC,oCAAoC,EAErC,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH,qBAAa,0CAA0C;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAC7E,OAAO,CAAC,QAAQ,CAAC,eAAe,CACQ;IAExC;;;OAGG;IACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,GAAG,IAAI,CAQpD;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,oCAAoC,GAAG,IAAI,CAE3D;IAED;;OAEG;IACH,IAAI,CACF,QAAQ,EAAE,oCAAoC,GAAG,MAAM,GACtD,kCAAkC,GAAG,SAAS,CAIhD;IAED;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS,CAEzE;CACF"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.js

@@ -1,16 +1,23 @@
 import { SimCloudFrontResponseHeadersPolicyAlreadyExists } from "../error/sim-cloudfront.error.js";
+import { simCfManagedResponseHeadersPolicies } from "./sim-cf-managed-response-headers-policies.js";
 /**
  * The response headers policies one simulated CloudFront holds.
  *
  * Policies are found by ID, which is what a cache Behavior's
  * `responseHeadersPolicyId` names, and by name, which is what decides whether a
  * new one may be stored.
+ *
+ * AWS's five managed policies are held apart from the ones a template creates.
+ * CloudFront keeps them in its own namespace, so a template may create a policy
+ * called `SecurityHeadersPolicy` of its own, and deleting the stack that
+ * created it leaves the managed one where it was.
  */
 export class SimCloudFrontResponseHeadersPolicyRegistry {
     policies = new Map();
+    managedPolicies = simCfManagedResponseHeadersPolicies();
     /**
-     * Store a policy, refusing a name another policy already holds as CloudFront
-     * does.
+     * Store a policy a template created, refusing a name another such policy
+     * already holds as CloudFront does.
      */
     add(policy) {
         if (this.byName(policy.name) !== undefined) {
@@ -25,13 +32,18 @@ export class SimCloudFrontResponseHeadersPolicyRegistry {
         this.policies.delete(policyId);
     }
     /**
-     * Get a policy by ID.
+     * Get a policy by ID, whether a template created it or AWS manages it.
      */
     byId(policyId) {
-        return this.policies.get(policyId);
+        const id = policyId;
+        return this.policies.get(id) ?? this.managedPolicies.get(id);
     }
     /**
-     * Get a policy by name.
+     * Get a policy a template created, by name.
+     *
+     * A managed policy is left out. Its name belongs to CloudFront's own
+     * namespace, and this is what decides whether a template may store a policy
+     * under a name.
      */
     byName(policyName) {
         return this.policies.values().find((policy) => policy.name === policyName);

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy-registry.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+CAA+C,EAAE,MAAM,kCAAkC,CAAC;AAOnG;;;;;;GAMG;AACH,MAAM,OAAO,0CAA0C;IACpC,QAAQ,GAA0C,IAAI,GAAG,EAAE,CAAC;IAE7E;;;OAGG;IACH,GAAG,CAAC,MAA0C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,+CAA+C,CACvD,0CAA0C,MAAM,CAAC,IAAI,iBAAiB,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAA8C;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,CACF,QAAuD;QAEvD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAgD,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAkB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"sim-cf-response-headers-policy-registry.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+CAA+C,EAAE,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAOpG;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0CAA0C;IACpC,QAAQ,GAA0C,IAAI,GAAG,EAAE,CAAC;IAC5D,eAAe,GAC9B,mCAAmC,EAAE,CAAC;IAExC;;;OAGG;IACH,GAAG,CAAC,MAA0C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,+CAA+C,CACvD,0CAA0C,MAAM,CAAC,IAAI,iBAAiB,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAA8C;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,CACF,QAAuD;QAEvD,MAAM,EAAE,GAAG,QAAgD,CAAC;QAE5D,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,UAAkB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.d.ts

@@ -31,12 +31,16 @@ export declare class SimCloudFrontResponseHeadersPolicy {
     constructor(properties: SimCloudFrontResponseHeadersPolicyProperties);
     /**
      * Return the response this policy makes of one the Origin gave back, for
-     * the `Origin` header the viewer request carried.
+     * the `Origin` header and the method the viewer request carried.
      *
      * The body is passed straight through. Only the headers change, so a response
      * whose body has already been read stays readable.
+     *
+     * The method reaches the CORS section alone, which answers a preflight with
+     * headers a simple request never sees. Every other section sets the same
+     * headers whatever the viewer asked for.
      */
-    apply(response: Response, requestOrigin?: string | null): Response;
+    apply(response: Response, requestOrigin?: string | null, requestMethod?: string): Response;
 }
 export type SimCloudFrontResponseHeadersPolicyMap = Map<SimCloudFrontResponseHeadersPolicyId, SimCloudFrontResponseHeadersPolicy>;
 export {};

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAEvG,MAAM,MAAM,oCAAoC,GAAG,KAAK,CACtD,MAAM,EACN,sCAAsC,CACvC,CAAC;AAEF,UAAU,4CAA4C;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,oCAAoC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAChE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,sCAAsC,GAAG,SAAS,CAAC;CACpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kCAAkC;IAC7C,SAAgB,EAAE,EAAE,oCAAoC,CAAC;IACzD,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtE,SAAgB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,SAAgB,eAAe,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACxE,SAAgB,YAAY,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACtE,SAAgB,IAAI,EAAE,sCAAsC,GAAG,SAAS,CAAC;IAEzE,YAAY,UAAU,EAAE,4CAA4C,EASnE;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,GAAE,MAAM,GAAG,IAAW,GAAG,QAAQ,CAuBvE;CACF;AAED,MAAM,MAAM,qCAAqC,GAAG,GAAG,CACrD,oCAAoC,EACpC,kCAAkC,CACnC,CAAC"}
+{"version":3,"file":"sim-cf-response-headers-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAEvG,MAAM,MAAM,oCAAoC,GAAG,KAAK,CACtD,MAAM,EACN,sCAAsC,CACvC,CAAC;AAEF,UAAU,4CAA4C;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,oCAAoC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAChE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,sCAAsC,GAAG,SAAS,CAAC;CACpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kCAAkC;IAC7C,SAAgB,EAAE,EAAE,oCAAoC,CAAC;IACzD,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtE,SAAgB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,SAAgB,eAAe,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACxE,SAAgB,YAAY,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACtE,SAAgB,IAAI,EAAE,sCAAsC,GAAG,SAAS,CAAC;IAEzE,YAAY,UAAU,EAAE,4CAA4C,EASnE;IAED;;;;;;;;;;OAUG;IACH,KAAK,CACH,QAAQ,EAAE,QAAQ,EAClB,aAAa,GAAE,MAAM,GAAG,IAAW,EACnC,aAAa,SAAQ,GACpB,QAAQ,CAuBV;CACF;AAED,MAAM,MAAM,qCAAqC,GAAG,GAAG,CACrD,oCAAoC,EACpC,kCAAkC,CACnC,CAAC"}

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.js

@@ -28,12 +28,16 @@ export class SimCloudFrontResponseHeadersPolicy {
     }
     /**
      * Return the response this policy makes of one the Origin gave back, for
-     * the `Origin` header the viewer request carried.
+     * the `Origin` header and the method the viewer request carried.
      *
      * The body is passed straight through. Only the headers change, so a response
      * whose body has already been read stays readable.
+     *
+     * The method reaches the CORS section alone, which answers a preflight with
+     * headers a simple request never sees. Every other section sets the same
+     * headers whatever the viewer asked for.
      */
-    apply(response, requestOrigin = null) {
+    apply(response, requestOrigin = null, requestMethod = "GET") {
         const headers = new Headers(response.headers);
         for (const headerName of this.headersToRemove) {
             headers.delete(headerName);
@@ -45,7 +49,7 @@ export class SimCloudFrontResponseHeadersPolicy {
             securityHeader.applyTo(headers);
         }
         this.serverTiming?.applyTo(headers);
-        this.cors?.apply(headers, requestOrigin);
+        this.cors?.apply(headers, requestOrigin, requestMethod);
         return new Response(response.body, {
             status: response.status,
             statusText: response.statusText,

package/dist/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-response-headers-policy.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC;;;;;;;;GAQG;AACH,MAAM,OAAO,kCAAkC;IAC7B,EAAE,CAAuC;IACzC,IAAI,CAAS;IACb,aAAa,CAAyC;IACtD,eAAe,CAAoB;IACnC,eAAe,CAAyC;IACxD,YAAY,CAA0C;IACtD,IAAI,CAAqD;IAEzE,YAAY,UAAwD;QAClE,IAAI,CAAC,EAAE;YACL,UAAU,CAAC,EAAE,IAAK,UAAU,EAA2C,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAkB,EAAE,aAAa,GAAkB,IAAI;QAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEzC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cf-response-headers-policy.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/response-headers-policy/sim-cf-response-headers-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC;;;;;;;;GAQG;AACH,MAAM,OAAO,kCAAkC;IAC7B,EAAE,CAAuC;IACzC,IAAI,CAAS;IACb,aAAa,CAAyC;IACtD,eAAe,CAAoB;IACnC,eAAe,CAAyC;IACxD,YAAY,CAA0C;IACtD,IAAI,CAAqD;IAEzE,YAAY,UAAwD;QAClE,IAAI,CAAC,EAAE;YACL,UAAU,CAAC,EAAE,IAAK,UAAU,EAA2C,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CACH,QAAkB,EAClB,aAAa,GAAkB,IAAI,EACnC,aAAa,GAAG,KAAK;QAErB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAExD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLogsDelivery } from "../../delivery/sim-logs-delivery.js";
+import type { SimLogs } from "../../sim-logs.js";
+interface SimCfnDeliveryCreatorProperties {
+    readonly logs: SimLogs;
+}
+/**
+ * Creates simulated deliveries from AWS::Logs::Delivery Resources.
+ *
+ * A delivery is the join between a source and a destination, and both have to
+ * be deployed before it. A template gets that ordering from naming them
+ * through `Ref` and `Fn::GetAtt`.
+ */
+export declare class SimCfnDeliveryCreator {
+    #private;
+    constructor(properties: SimCfnDeliveryCreatorProperties);
+    /**
+     * Create a delivery from an AWS::Logs::Delivery Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLogsDelivery>;
+    /**
+     * Delete a delivery created from a CloudFormation Resource.
+     */
+    delete(delivery: SimLogsDelivery): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-delivery-creator.d.ts.map

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-delivery-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/delivery/sim-cfn-delivery-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAejD,UAAU,+BAA+B;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;;IAGhC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,eAAe,CAAC,CAsB1B;IAED;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAErD;CACF"}

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.js

@@ -0,0 +1,52 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnDeliveryInput } from "./sim-cfn-delivery-input.js";
+import { SimCfnDeliveryProperties } from "./sim-cfn-delivery-properties.js";
+import { deliveryUnsimulatedReasons } from "./sim-cfn-delivery-unsimulated-properties.js";
+const resourceType = "AWS::Logs::Delivery";
+const actedOnProperties = new Set([
+    "DeliverySourceName",
+    "DeliveryDestinationArn",
+    "RecordFields",
+    "FieldDelimiter",
+    "S3SuffixPath",
+    "S3EnableHiveCompatiblePath",
+]);
+/**
+ * Creates simulated deliveries from AWS::Logs::Delivery Resources.
+ *
+ * A delivery is the join between a source and a destination, and both have to
+ * be deployed before it. A template gets that ordering from naming them
+ * through `Ref` and `Fn::GetAtt`.
+ */
+export class SimCfnDeliveryCreator {
+    #logs;
+    constructor(properties) {
+        this.#logs = properties.logs;
+    }
+    /**
+     * Create a delivery from an AWS::Logs::Delivery Resource.
+     */
+    async create(resource, properties) {
+        const reader = new SimCfnDeliveryProperties({
+            resource,
+            properties,
+            resourceType,
+            actedOnProperties,
+            unsimulatedReasons: deliveryUnsimulatedReasons,
+        });
+        reader.recordIgnoredProperties();
+        const created = await this.#logs.createDelivery({
+            input: simCfnDeliveryInput(reader),
+        });
+        const delivery = this.#logs.findDelivery(created.delivery?.id ?? "");
+        assertDefined(delivery, `sim CloudWatch Logs delivery for CloudFormation Resource ${resource.logicalId}`);
+        return delivery;
+    }
+    /**
+     * Delete a delivery created from a CloudFormation Resource.
+     */
+    async delete(delivery) {
+        await this.#logs.deleteDelivery({ input: { id: delivery.id } });
+    }
+}
+//# sourceMappingURL=sim-cfn-delivery-creator.js.map

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-delivery-creator.js","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/delivery/sim-cfn-delivery-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,oBAAoB;IACpB,wBAAwB;IACxB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,4BAA4B;CAC7B,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAAU;IAExB,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC;YAC1C,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,iBAAiB;YACjB,kBAAkB,EAAE,0BAA0B;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAC9C,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,aAAa,CACX,QAAQ,EACR,4DAA4D,QAAQ,CAAC,SAAS,EAAE,CACjF,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAyB;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLogsDeliveryDestination } from "../../delivery/sim-logs-delivery-destination.js";
+import type { SimLogs } from "../../sim-logs.js";
+interface SimCfnDeliveryDestinationCreatorProperties {
+    readonly logs: SimLogs;
+}
+/**
+ * Creates simulated delivery destinations from AWS::Logs::DeliveryDestination
+ * Resources.
+ *
+ * The output format is fixed once the destination is there, so a template that
+ * changes it replaces the Resource. Sim CloudFormation replaces a Resource
+ * whose template entry changed at all, which lands on the same behaviour
+ * without the destination having to say so.
+ */
+export declare class SimCfnDeliveryDestinationCreator {
+    #private;
+    constructor(properties: SimCfnDeliveryDestinationCreatorProperties);
+    /**
+     * Create a delivery destination from a CloudFormation Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLogsDeliveryDestination>;
+    /**
+     * Delete a delivery destination created from a CloudFormation Resource.
+     */
+    delete(destination: SimLogsDeliveryDestination): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-delivery-destination-creator.d.ts.map

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-delivery-destination-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAWjD,UAAU,0CAA0C;IAClD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,qBAAa,gCAAgC;;IAG3C,YAAY,UAAU,EAAE,0CAA0C,EAEjE;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;IAED;;OAEG;IACG,MAAM,CAAC,WAAW,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAInE;CACF"}

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.js

@@ -0,0 +1,59 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimCfnDeliveryProperties } from "./sim-cfn-delivery-properties.js";
+import { deliveryDestinationUnsimulatedReasons } from "./sim-cfn-delivery-unsimulated-properties.js";
+const resourceType = "AWS::Logs::DeliveryDestination";
+const actedOnProperties = new Set([
+    "Name",
+    "DestinationResourceArn",
+    "OutputFormat",
+]);
+/**
+ * Creates simulated delivery destinations from AWS::Logs::DeliveryDestination
+ * Resources.
+ *
+ * The output format is fixed once the destination is there, so a template that
+ * changes it replaces the Resource. Sim CloudFormation replaces a Resource
+ * whose template entry changed at all, which lands on the same behaviour
+ * without the destination having to say so.
+ */
+export class SimCfnDeliveryDestinationCreator {
+    #logs;
+    constructor(properties) {
+        this.#logs = properties.logs;
+    }
+    /**
+     * Create a delivery destination from a CloudFormation Resource.
+     */
+    async create(resource, properties) {
+        const reader = new SimCfnDeliveryProperties({
+            resource,
+            properties,
+            resourceType,
+            actedOnProperties,
+            unsimulatedReasons: deliveryDestinationUnsimulatedReasons,
+        });
+        const name = reader.requiredString("Name");
+        reader.recordIgnoredProperties();
+        await this.#logs.putDeliveryDestination({
+            input: {
+                name,
+                outputFormat: reader.optionalString("OutputFormat"),
+                deliveryDestinationConfiguration: {
+                    destinationResourceArn: reader.requiredString("DestinationResourceArn"),
+                },
+            },
+        });
+        const destination = this.#logs.findDeliveryDestination(name);
+        assertDefined(destination, `sim CloudWatch Logs delivery destination for CloudFormation Resource ${resource.logicalId}`);
+        return destination;
+    }
+    /**
+     * Delete a delivery destination created from a CloudFormation Resource.
+     */
+    async delete(destination) {
+        await this.#logs.deleteDeliveryDestination({
+            input: { name: destination.name },
+        });
+    }
+}
+//# sourceMappingURL=sim-cfn-delivery-destination-creator.js.map

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-delivery-destination-creator.js","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/delivery/sim-cfn-delivery-destination-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,8CAA8C,CAAC;AAErG,MAAM,YAAY,GAAG,gCAAgC,CAAC;AACtD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,wBAAwB;IACxB,cAAc;CACf,CAAC,CAAC;AAMH;;;;;;;;GAQG;AACH,MAAM,OAAO,gCAAgC;IAClC,KAAK,CAAU;IAExB,YAAY,UAAsD;QAChE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC;YAC1C,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,iBAAiB;YACjB,kBAAkB,EAAE,qCAAqC;SAC1D,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;YACtC,KAAK,EAAE;gBACL,IAAI;gBACJ,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC;gBACnD,gCAAgC,EAAE;oBAChC,sBAAsB,EAAE,MAAM,CAAC,cAAc,CAC3C,wBAAwB,CACzB;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAE7D,aAAa,CACX,WAAW,EACX,wEAAwE,QAAQ,CAAC,SAAS,EAAE,CAC7F,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,WAAuC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-input.d.ts

@@ -0,0 +1,12 @@
+import type { SimCreateDeliveryCommandInput } from "../../command/delivery/delivery.command.js";
+import type { SimCfnDeliveryProperties } from "./sim-cfn-delivery-properties.js";
+/**
+ * The CreateDelivery request an AWS::Logs::Delivery Resource asks for.
+ *
+ * The template carries the S3 layout as two flat properties, and the API takes
+ * them nested. Neither is passed on unless the template set one of them, so a
+ * delivery to a log group or a Firehose stream is created without the S3
+ * configuration the API would refuse.
+ */
+export declare function simCfnDeliveryInput(reader: SimCfnDeliveryProperties): SimCreateDeliveryCommandInput;
+//# sourceMappingURL=sim-cfn-delivery-input.d.ts.map

package/dist/service/logs/cfn/delivery/sim-cfn-delivery-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-delivery-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/delivery/sim-cfn-delivery-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,wBAAwB,GAC/B,6BAA6B,CAiB/B"}