@kensio/yulin 1.20.7 → 1.20.8

package/dist/service/glue/cfn/table/sim-cfn-glue-storage-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-storage-descriptor.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-storage-descriptor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAErG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,SAAS;IACT,UAAU;IACV,aAAa;IACb,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,WAAW;IACX,eAAe;IACf,YAAY;CACb,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IAC7B,QAAQ,CAAwB;IAChC,QAAQ,CAAoB;IAErC,YAAY,OAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC,MAAwB;QAC3B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE5B,OAAO,cAAc,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAC/C;YACD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACnC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;YAC3C,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACjD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CACpD;YACD,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1D,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CACzC;YACD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CACZ,MAAwB,EACxB,KAA0B,EAC1B,IAAY;QAEZ,OAAO,MAAM,CAAC,MAAM;aACjB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;aACjB,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,cAAc,CAAC,MAAwB;QACrC,0BAA0B,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM;YACN,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-creator.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimGlueTable } from "../../table/sim-glue-table.js";
+import type { SimGlue } from "../../sim-glue.js";
+interface SimCfnGlueTableCreatorProperties {
+    readonly glue: SimGlue;
+    readonly catalogId: string;
+}
+/**
+ * Creates simulated tables from AWS::Glue::Table Resources.
+ *
+ * The database has to be there. A template declaring both usually leaves
+ * CloudFormation to work the order out from the `Ref` the table's
+ * `DatabaseName` carries, and one that names a database no stack creates fails
+ * here the way `CreateTable` fails.
+ */
+export declare class SimCfnGlueTableCreator {
+    #private;
+    constructor(properties: SimCfnGlueTableCreatorProperties);
+    /**
+     * Create a table from an AWS::Glue::Table Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimGlueTable;
+    /**
+     * Delete a table created from an AWS::Glue::Table Resource.
+     */
+    delete(table: SimGlueTable): void;
+}
+export {};
+//# sourceMappingURL=sim-cfn-glue-table-creator.d.ts.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAIjD,UAAU,gCAAgC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;;IAIjC,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;OAEG;IACH,MAAM,CACJ,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,YAAY,CAsBd;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEhC;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-creator.js

@@ -0,0 +1,47 @@
+import { requireSimCfnGlueCatalogId } from "../sim-cfn-glue-catalog-id.js";
+import { SimCfnGlueTableProperties } from "./sim-cfn-glue-table-properties.js";
+/**
+ * Creates simulated tables from AWS::Glue::Table Resources.
+ *
+ * The database has to be there. A template declaring both usually leaves
+ * CloudFormation to work the order out from the `Ref` the table's
+ * `DatabaseName` carries, and one that names a database no stack creates fails
+ * here the way `CreateTable` fails.
+ */
+export class SimCfnGlueTableCreator {
+    #glue;
+    #catalogId;
+    constructor(properties) {
+        this.#glue = properties.glue;
+        this.#catalogId = properties.catalogId;
+    }
+    /**
+     * Create a table from an AWS::Glue::Table Resource.
+     */
+    create(resource, properties) {
+        const tableProperties = new SimCfnGlueTableProperties({
+            resource,
+            properties,
+        });
+        requireSimCfnGlueCatalogId({
+            resourceType: "AWS::Glue::Table",
+            logicalId: resource.logicalId,
+            declared: tableProperties.catalogId(),
+            simulated: this.#catalogId,
+        });
+        const databaseName = tableProperties.databaseName();
+        const tableName = tableProperties.tableName();
+        const tableInput = tableProperties.tableInput();
+        tableProperties.recordIgnoredProperties();
+        return this.#glue
+            .catalogWriter()
+            .createTable(databaseName, tableName, tableInput);
+    }
+    /**
+     * Delete a table created from an AWS::Glue::Table Resource.
+     */
+    delete(table) {
+        this.#glue.catalogWriter().deleteTable(table.databaseName, table.name);
+    }
+}
+//# sourceMappingURL=sim-cfn-glue-table-creator.js.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-creator.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAO/E;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACxB,KAAK,CAAU;IACf,UAAU,CAAS;IAE5B,YAAY,UAA4C;QACtD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,QAAwB,EACxB,UAAqC;QAErC,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACpD,QAAQ;YACR,UAAU;SACX,CAAC,CAAC;QAEH,0BAA0B,CAAC;YACzB,YAAY,EAAE,kBAAkB;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,eAAe,CAAC,SAAS,EAAE;YACrC,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,CAAC;QAEhD,eAAe,CAAC,uBAAuB,EAAE,CAAC;QAE1C,OAAO,IAAI,CAAC,KAAK;aACd,aAAa,EAAE;aACf,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAmB;QACxB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-input.d.ts

@@ -0,0 +1,16 @@
+import type { SimCfnPropertyIgnorer } from "../../../cloudformation/resource/ignore/sim-cfn-ignored-property.type.js";
+import type { SimGlueTableInput } from "../../table/sim-glue-table-schema.js";
+import type { SimCfnGlueRecord } from "../sim-cfn-glue-record.js";
+/**
+ * Reads a TableInput into what the table is created with.
+ *
+ * `Parameters` is read here rather than recorded as ignored, because Athena
+ * partition projection lives entirely in it.
+ */
+export declare class SimCfnGlueTableInputReader {
+    #private;
+    constructor(ignorer: SimCfnPropertyIgnorer);
+    /** Read the whole input. */
+    read(fields: SimCfnGlueRecord): SimGlueTableInput;
+}
+//# sourceMappingURL=sim-cfn-glue-table-input.d.ts.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0EAA0E,CAAC;AACtH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAGlE;;;;;GAKG;AACH,qBAAa,0BAA0B;;IAGrC,YAAY,OAAO,EAAE,qBAAqB,EAEzC;IAED,4BAA4B;IAC5B,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,iBAAiB,CAchD;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-input.js

@@ -0,0 +1,26 @@
+import { SimCfnGlueStorageDescriptor } from "./sim-cfn-glue-storage-descriptor.js";
+/**
+ * Reads a TableInput into what the table is created with.
+ *
+ * `Parameters` is read here rather than recorded as ignored, because Athena
+ * partition projection lives entirely in it.
+ */
+export class SimCfnGlueTableInputReader {
+    #storage;
+    constructor(ignorer) {
+        this.#storage = new SimCfnGlueStorageDescriptor(ignorer);
+    }
+    /** Read the whole input. */
+    read(fields) {
+        return {
+            description: fields.string("Description"),
+            owner: fields.string("Owner"),
+            retention: fields.number("Retention"),
+            tableType: fields.string("TableType"),
+            partitionKeys: fields.read("PartitionKeys", (value, path) => this.#storage.columns.list(fields.values, value, path)),
+            storageDescriptor: fields.read("StorageDescriptor", (value, path) => this.#storage.read(fields.nested(value, path))),
+            parameters: fields.parameters("Parameters"),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-glue-table-input.js.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-input.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-input.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IAC5B,QAAQ,CAA8B;IAE/C,YAAY,OAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,MAAwB;QAC3B,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YACrC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CACvD;YACD,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAC/C;YACD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;SAC5C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-properties.d.ts

@@ -0,0 +1,31 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimGlueTableInput } from "../../table/sim-glue-table-schema.js";
+interface SimCfnGlueTablePropertiesProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * Reads AWS::Glue::Table CloudFormation properties.
+ */
+export declare class SimCfnGlueTableProperties {
+    #private;
+    constructor(properties: SimCfnGlueTablePropertiesProperties);
+    /** The catalog id the template names, when it names one. */
+    catalogId(): string | undefined;
+    /** The database the table belongs to, which real Glue requires. */
+    databaseName(): string;
+    /**
+     * The table name.
+     *
+     * An unnamed table is named after the stack and the logical ID, lowercased,
+     * since Glue names are lowercase for Hive compatibility.
+     */
+    tableName(): string;
+    /** What the table is created with, beyond its name and its database. */
+    tableInput(): SimGlueTableInput;
+    /** Record the properties the table is created without acting on. */
+    recordIgnoredProperties(): void;
+}
+export {};
+//# sourceMappingURL=sim-cfn-glue-table-properties.d.ts.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAS9E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;GAEG;AACH,qBAAa,yBAAyB;;IAKpC,YAAY,UAAU,EAAE,mCAAmC,EAY1D;IAED,4DAA4D;IAC5D,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,mEAAmE;IACnE,YAAY,IAAI,MAAM,CAKrB;IAED;;;;;OAKG;IACH,SAAS,IAAI,MAAM,CAOlB;IAED,wEAAwE;IACxE,UAAU,IAAI,iBAAiB,CAE9B;IAED,oEAAoE;IACpE,uBAAuB,IAAI,IAAI,CAM9B;CAQF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-properties.js

@@ -0,0 +1,55 @@
+import { glueCfnPropertyError } from "../sim-cfn-glue-property-error.js";
+import { SimCfnGlueRecord } from "../sim-cfn-glue-record.js";
+import { SimCfnGlueValues } from "../sim-cfn-glue-values.js";
+import { SimCfnGlueTableInputReader } from "./sim-cfn-glue-table-input.js";
+import { simCfnGlueTableIgnored } from "./sim-cfn-glue-table-rules.js";
+const resourceType = "AWS::Glue::Table";
+/**
+ * Reads AWS::Glue::Table CloudFormation properties.
+ */
+export class SimCfnGlueTableProperties {
+    #resource;
+    #fields;
+    #reader;
+    constructor(properties) {
+        const values = new SimCfnGlueValues((reason) => glueCfnPropertyError(resourceType, properties.resource.logicalId, reason));
+        this.#resource = properties.resource;
+        this.#fields = new SimCfnGlueRecord(values, properties.properties, resourceType);
+        this.#reader = new SimCfnGlueTableInputReader(properties.resource);
+    }
+    /** The catalog id the template names, when it names one. */
+    catalogId() {
+        return this.#fields.string("CatalogId");
+    }
+    /** The database the table belongs to, which real Glue requires. */
+    databaseName() {
+        return this.#fields.values.string(this.#fields.required("DatabaseName"), "DatabaseName");
+    }
+    /**
+     * The table name.
+     *
+     * An unnamed table is named after the stack and the logical ID, lowercased,
+     * since Glue names are lowercase for Hive compatibility.
+     */
+    tableName() {
+        const stackName = this.#resource.stackName ?? "stack";
+        return (this.#input().string("Name") ??
+            `${stackName}-${this.#resource.logicalId}`.toLowerCase());
+    }
+    /** What the table is created with, beyond its name and its database. */
+    tableInput() {
+        return this.#reader.read(this.#input());
+    }
+    /** Record the properties the table is created without acting on. */
+    recordIgnoredProperties() {
+        simCfnGlueTableIgnored({
+            resource: this.#resource,
+            names: this.#fields.keys(),
+            inputNames: this.#input().keys(),
+        });
+    }
+    #input() {
+        return this.#fields.nested(this.#fields.required("TableInput"), "TableInput");
+    }
+}
+//# sourceMappingURL=sim-cfn-glue-table-properties.js.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-properties.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-properties.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAOxC;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC3B,SAAS,CAAiB;IAC1B,OAAO,CAAmB;IAC1B,OAAO,CAA6B;IAE7C,YAAY,UAA+C;QACzD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,oBAAoB,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAC1E,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CACjC,MAAM,EACN,UAAU,CAAC,UAAU,EACrB,YAAY,CACb,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,0BAA0B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC;IAED,4DAA4D;IAC5D,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EACrC,cAAc,CACf,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS;QACP,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC;QAEtD,OAAO,CACL,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,oEAAoE;IACpE,uBAAuB;QACrB,sBAAsB,CAAC;YACrB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAC1B,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CACxB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EACnC,YAAY,CACb,CAAC;IACJ,CAAC;CACF"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-rules.d.ts

@@ -0,0 +1,12 @@
+import type { SimCfnPropertyIgnorer } from "../../../cloudformation/resource/ignore/sim-cfn-ignored-property.type.js";
+interface SimCfnGlueTableIgnoredProperties {
+    readonly resource: SimCfnPropertyIgnorer;
+    readonly names: readonly string[];
+    readonly inputNames: readonly string[];
+}
+/**
+ * Record every AWS::Glue::Table property the table is created without.
+ */
+export declare function simCfnGlueTableIgnored(properties: SimCfnGlueTableIgnoredProperties): void;
+export {};
+//# sourceMappingURL=sim-cfn-glue-table-rules.d.ts.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0EAA0E,CAAC;AAmBtH,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,gCAAgC,GAC3C,IAAI,CAoBN"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-rules.js

@@ -0,0 +1,37 @@
+import { unsimulatedTableInputReasons, unsimulatedTableReasons, } from "./sim-cfn-glue-table-unsimulated-properties.js";
+const readNames = new Set(["CatalogId", "DatabaseName", "TableInput"]);
+const readInputNames = new Set([
+    "Name",
+    "Description",
+    "Owner",
+    "Retention",
+    "TableType",
+    "PartitionKeys",
+    "StorageDescriptor",
+    "Parameters",
+]);
+/**
+ * Record every AWS::Glue::Table property the table is created without.
+ */
+export function simCfnGlueTableIgnored(properties) {
+    const { resource } = properties;
+    for (const name of properties.names) {
+        if (!readNames.has(name)) {
+            ignore(resource, name, "AWS::Glue::Table", unsimulatedTableReasons);
+        }
+    }
+    for (const name of properties.inputNames) {
+        if (!readInputNames.has(name)) {
+            ignore(resource, name, "TableInput", unsimulatedTableInputReasons, `TableInput.${name}`);
+        }
+    }
+}
+function ignore(resource, name, owner, reasons, path = name) {
+    const reason = reasons.get(name);
+    resource.ignoreProperty(path, reason === undefined
+        ? `${path} is not a ${owner} property simulated Glue knows about, so ` +
+            `the table is created without it`
+        : `${path} is a real ${owner} property simulated Glue does not act ` +
+            `on: ${reason}`);
+}
+//# sourceMappingURL=sim-cfn-glue-table-rules.js.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-rules.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-rules.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,gDAAgD,CAAC;AAExD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,aAAa;IACb,OAAO;IACP,WAAW;IACX,WAAW;IACX,eAAe;IACf,mBAAmB;IACnB,YAAY;CACb,CAAC,CAAC;AAQH;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAA4C;IAE5C,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CACJ,QAAQ,EACR,IAAI,EACJ,YAAY,EACZ,4BAA4B,EAC5B,cAAc,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,QAA+B,EAC/B,IAAY,EACZ,KAAa,EACb,OAAoC,EACpC,IAAI,GAAG,IAAI;IAEX,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEjC,QAAQ,CAAC,cAAc,CACrB,IAAI,EACJ,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,GAAG,IAAI,aAAa,KAAK,2CAA2C;YAClE,iCAAiC;QACrC,CAAC,CAAC,GAAG,IAAI,cAAc,KAAK,wCAAwC;YAChE,OAAO,MAAM,EAAE,CACtB,CAAC;AACJ,CAAC"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The AWS::Glue::Table properties this simulation has nothing to act on, and
+ * why.
+ *
+ * A table here is a definition rather than a dataset, so anything describing
+ * how data would be read back or written is recorded and left out.
+ */
+export declare const unsimulatedTableReasons: ReadonlyMap<string, string>;
+/**
+ * The AWS::Glue::Table TableInput properties this simulation has nothing to
+ * act on, and why.
+ */
+export declare const unsimulatedTableInputReasons: ReadonlyMap<string, string>;
+/**
+ * The StorageDescriptor properties this simulation has nothing to act on, and
+ * why.
+ */
+export declare const unsimulatedStorageDescriptorReasons: ReadonlyMap<string, string>;
+//# sourceMappingURL=sim-cfn-glue-table-unsimulated-properties.d.ts.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-unsimulated-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAM9D,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CA4BjE,CAAC;AAEL;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAwBxE,CAAC"}

package/dist/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.js

@@ -0,0 +1,75 @@
+/**
+ * The AWS::Glue::Table properties this simulation has nothing to act on, and
+ * why.
+ *
+ * A table here is a definition rather than a dataset, so anything describing
+ * how data would be read back or written is recorded and left out.
+ */
+export const unsimulatedTableReasons = new Map([
+    [
+        "OpenTableFormatInput",
+        "no Iceberg metadata is written, so an open format table is created as " +
+            "an ordinary one",
+    ],
+]);
+/**
+ * The AWS::Glue::Table TableInput properties this simulation has nothing to
+ * act on, and why.
+ */
+export const unsimulatedTableInputReasons = new Map([
+    [
+        "LastAccessTime",
+        "nothing reads the table, so the last access time is whatever a caller " +
+            "declared rather than something the simulation keeps",
+    ],
+    [
+        "LastAnalyzedTime",
+        "no statistics are gathered, so nothing analyses the table",
+    ],
+    [
+        "TargetTable",
+        "a table linking to another catalog's table is not simulated, so this " +
+            "one holds only its own definition",
+    ],
+    [
+        "ViewDefinition",
+        "no SQL is parsed or run, so a view resolves to nothing",
+    ],
+    [
+        "ViewExpandedText",
+        "no SQL is parsed or run, so a view resolves to nothing",
+    ],
+    [
+        "ViewOriginalText",
+        "no SQL is parsed or run, so a view resolves to nothing",
+    ],
+]);
+/**
+ * The StorageDescriptor properties this simulation has nothing to act on, and
+ * why.
+ */
+export const unsimulatedStorageDescriptorReasons = new Map([
+    [
+        "AdditionalLocations",
+        "no object is read, so a table reads from none of its locations",
+    ],
+    [
+        "SchemaReference",
+        "the Schema Registry is not simulated, so a referenced schema resolves " +
+            "to nothing",
+    ],
+    [
+        "SkewedInfo",
+        "no query plan is built, so nothing takes a skewed value into account",
+    ],
+    [
+        "SortColumns",
+        "no data is read, so nothing relies on the order rows are stored in",
+    ],
+    [
+        "StoredAsSubDirectories",
+        "no object is listed, so nothing walks into a partition's " +
+            "subdirectories",
+    ],
+]);
+//# sourceMappingURL=sim-cfn-glue-table-unsimulated-properties.js.map

package/dist/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-glue-table-unsimulated-properties.js","sourceRoot":"","sources":["../../../../../src/service/glue/cfn/table/sim-cfn-glue-table-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAgC,IAAI,GAAG,CAAC;IAC1E;QACE,sBAAsB;QACtB,wEAAwE;YACtE,iBAAiB;KACpB;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,IAAI,GAAG,CAAC;IACN;QACE,gBAAgB;QAChB,wEAAwE;YACtE,qDAAqD;KACxD;IACD;QACE,kBAAkB;QAClB,2DAA2D;KAC5D;IACD;QACE,aAAa;QACb,uEAAuE;YACrE,mCAAmC;KACtC;IACD;QACE,gBAAgB;QAChB,wDAAwD;KACzD;IACD;QACE,kBAAkB;QAClB,wDAAwD;KACzD;IACD;QACE,kBAAkB;QAClB,wDAAwD;KACzD;CACF,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,IAAI,GAAG,CAAC;IACN;QACE,qBAAqB;QACrB,gEAAgE;KACjE;IACD;QACE,iBAAiB;QACjB,wEAAwE;YACtE,YAAY;KACf;IACD;QACE,YAAY;QACZ,sEAAsE;KACvE;IACD;QACE,aAAa;QACb,oEAAoE;KACrE;IACD;QACE,wBAAwB;QACxB,2DAA2D;YACzD,gBAAgB;KACnB;CACF,CAAC,CAAC"}

package/dist/service/glue/command/authorize/sim-glue-authorize-resources.d.ts

@@ -0,0 +1,18 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimGlueAuthorizeProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly action: string;
+    readonly resources: readonly string[];
+    readonly caller: SimAwsCaller | undefined;
+}
+/**
+ * Authorize every resource an operation reaches, outermost first.
+ *
+ * The first refusal names the resource the policy left out, so a policy
+ * carrying the table and missing the catalog says the catalog.
+ */
+export declare function authorizeSimGlueResources(properties: SimGlueAuthorizeProperties): SimAwsResolvedCaller;
+export {};
+//# sourceMappingURL=sim-glue-authorize-resources.d.ts.map

package/dist/service/glue/command/authorize/sim-glue-authorize-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-glue-authorize-resources.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/command/authorize/sim-glue-authorize-resources.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,0BAA0B,GACrC,oBAAoB,CAqBtB"}

package/dist/service/glue/command/authorize/sim-glue-authorize-resources.js

@@ -0,0 +1,26 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Authorize every resource an operation reaches, outermost first.
+ *
+ * The first refusal names the resource the policy left out, so a policy
+ * carrying the table and missing the catalog says the catalog.
+ */
+export function authorizeSimGlueResources(properties) {
+    const { iam, action, caller } = properties;
+    let resolved;
+    for (const resource of properties.resources) {
+        const decision = iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+        resolved = decision.caller;
+    }
+    assertDefined(resolved, `the caller a Glue ${action} authorized`);
+    return resolved;
+}
+//# sourceMappingURL=sim-glue-authorize-resources.js.map

package/dist/service/glue/command/authorize/sim-glue-authorize-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-glue-authorize-resources.js","sourceRoot":"","sources":["../../../../../src/service/glue/command/authorize/sim-glue-authorize-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AASzE;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAsC;IAEtC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAC3C,IAAI,QAA0C,CAAC;IAE/C,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,qBAAqB,MAAM,aAAa,CAAC,CAAC;IAElE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/service/glue/command/authorize/sim-glue-authorizer.d.ts

@@ -0,0 +1,45 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimGlueAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to Glue requests.
+ *
+ * Data Catalog resources are a hierarchy with the catalog at the root, and an
+ * operation on one needs permission on that resource and on every ancestor of
+ * it. Reading a table needs the table, the database and the catalog, and a
+ * policy naming only the table ARN is denied. Deleting a database also needs
+ * permission on every table in it.
+ *
+ * That rule is why each method authorizes a list. A policy written for real
+ * Glue already names the ancestors, and one that names only the leaf fails the
+ * same way in both places.
+ */
+export declare class SimGlueAuthorizer {
+    #private;
+    constructor(properties: SimGlueAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on a database.
+     *
+     * The database need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the database is there.
+     */
+    authorizeDatabase(action: string, databaseName: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /** Ensure the caller may perform an action on a table. */
+    authorizeTable(action: string, databaseName: string, tableName: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /** Ensure the caller may delete a database holding these tables. */
+    authorizeDatabaseDeletion(databaseName: string, tableNames: readonly string[], caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action naming no particular database.
+     *
+     * The catalog has no ancestor, so it is the whole of the list.
+     */
+    authorizeCatalog(action: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+}
+export {};
+//# sourceMappingURL=sim-glue-authorizer.d.ts.map

package/dist/service/glue/command/authorize/sim-glue-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-glue-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/glue/command/authorize/sim-glue-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAStG,UAAU,2BAA2B;IACnC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;;IAI5B,YAAY,UAAU,EAAE,2BAA2B,EAGlD;IAED;;;;;;OAMG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED,0DAA0D;IAC1D,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED,oEAAoE;IACpE,yBAAyB,CACvB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;OAIG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;CAcF"}

package/dist/service/glue/command/authorize/sim-glue-authorizer.js

@@ -0,0 +1,59 @@
+import { simGlueCatalogArn } from "../../arn/sim-glue-arn.js";
+import { authorizeSimGlueResources } from "./sim-glue-authorize-resources.js";
+import { simGlueDatabaseDeletionResources, simGlueDatabaseResources, simGlueTableResources, } from "../../arn/sim-glue-authorized-resources.js";
+/**
+ * Applies simulated IAM authorization to Glue requests.
+ *
+ * Data Catalog resources are a hierarchy with the catalog at the root, and an
+ * operation on one needs permission on that resource and on every ancestor of
+ * it. Reading a table needs the table, the database and the catalog, and a
+ * policy naming only the table ARN is denied. Deleting a database also needs
+ * permission on every table in it.
+ *
+ * That rule is why each method authorizes a list. A policy written for real
+ * Glue already names the ancestors, and one that names only the leaf fails the
+ * same way in both places.
+ */
+export class SimGlueAuthorizer {
+    #iam;
+    #scope;
+    constructor(properties) {
+        this.#iam = properties.iam;
+        this.#scope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may perform an action on a database.
+     *
+     * The database need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the database is there.
+     */
+    authorizeDatabase(action, databaseName, caller) {
+        return this.#authorize(action, simGlueDatabaseResources(this.#scope, databaseName), caller);
+    }
+    /** Ensure the caller may perform an action on a table. */
+    authorizeTable(action, databaseName, tableName, caller) {
+        return this.#authorize(action, simGlueTableResources(this.#scope, databaseName, tableName), caller);
+    }
+    /** Ensure the caller may delete a database holding these tables. */
+    authorizeDatabaseDeletion(databaseName, tableNames, caller) {
+        return this.#authorize("glue:DeleteDatabase", simGlueDatabaseDeletionResources(this.#scope, databaseName, tableNames), caller);
+    }
+    /**
+     * Ensure the caller may perform an action naming no particular database.
+     *
+     * The catalog has no ancestor, so it is the whole of the list.
+     */
+    authorizeCatalog(action, caller) {
+        return this.#authorize(action, [simGlueCatalogArn(this.#scope)], caller);
+    }
+    #authorize(action, resources, caller) {
+        return authorizeSimGlueResources({
+            iam: this.#iam,
+            action,
+            resources,
+            caller,
+        });
+    }
+}
+//# sourceMappingURL=sim-glue-authorizer.js.map

package/dist/service/glue/command/authorize/sim-glue-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-glue-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/glue/command/authorize/sim-glue-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,4CAA4C,CAAC;AAOpD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACnB,IAAI,CAA0B;IAC9B,MAAM,CAA2B;IAE1C,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CACf,MAAc,EACd,YAAoB,EACpB,MAAqB;QAErB,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,EACN,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EACnD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,cAAc,CACZ,MAAc,EACd,YAAoB,EACpB,SAAiB,EACjB,MAAqB;QAErB,OAAO,IAAI,CAAC,UAAU,CACpB,MAAM,EACN,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,EAC3D,MAAM,CACP,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,yBAAyB,CACvB,YAAoB,EACpB,UAA6B,EAC7B,MAAqB;QAErB,OAAO,IAAI,CAAC,UAAU,CACpB,qBAAqB,EACrB,gCAAgC,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,EACvE,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CACd,MAAc,EACd,MAAqB;QAErB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,UAAU,CACR,MAAc,EACd,SAA4B,EAC5B,MAAgC;QAEhC,OAAO,yBAAyB,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,MAAM;YACN,SAAS;YACT,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF"}