@kensio/yulin 1.21.1 → 1.21.3

package/dist/service/cloudformation/resource/factory/sim-cfn-resource-factory.type.d.ts

@@ -1,4 +1,5 @@
 import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../sim-cfn-resource.js";
+import type { SimCloudFormationResourceUpdateContext } from "../sim-cfn-resource.type.js";
 export interface SimCfnServiceResourceFactory {
     create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
     /**
@@ -15,6 +16,14 @@ export interface SimCfnServiceResourceFactory {
      * the teardown records it and carries on.
      */
     delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
+    /**
+     * Refuse an invalid replacement before CloudFormation deletes anything.
+     *
+     * Most simulated Resource types have no update-specific validation. A
+     * service can implement this hook when an update carries constraints that a
+     * create request cannot check.
+     */
+    assertUpdateAllowed?(resourceTypeName: string, current: SimCfnResource, updated: SimCfnResource, context: SimCloudFormationResourceUpdateContext): Promise<void> | void;
 }
 export interface SimCloudFormationParsedResourceType {
     readonly providerName: string;

package/dist/service/cloudformation/resource/sim-cfn-resource.type.d.ts

@@ -86,3 +86,14 @@ export interface SimCloudFormationResourceDeleteContext {
     /** The principal the teardown runs as, as creation carries it. */
     readonly caller?: SimAwsCaller | undefined;
 }
+/**
+ * The two resolved Resource definitions available to update validation.
+ */
+export interface SimCloudFormationResourceUpdateContext {
+    readonly simAws: SimAws;
+    readonly currentResources: ReadonlyMap<string, SimCfnResource>;
+    readonly updatedResources: ReadonlyMap<string, SimCfnResource>;
+    readonly currentResolvedProperties: SimCfnTemplateValueRecord;
+    readonly updatedResolvedProperties: SimCfnTemplateValueRecord;
+    readonly caller?: SimAwsCaller | undefined;
+}

package/dist/service/cloudformation/resource/update/sim-cfn-resource-update-validator.d.ts

@@ -0,0 +1,26 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCfnResource } from "../sim-cfn-resource.js";
+interface SimCfnResourceUpdateValidatorProperties {
+    readonly current: SimCfnResource;
+    readonly updated: SimCfnResource;
+}
+interface AssertSimCfnResourceUpdateAllowedProperties {
+    readonly simAws: SimAws;
+    readonly currentResources: ReadonlyMap<string, SimCfnResource>;
+    readonly updatedResources: ReadonlyMap<string, SimCfnResource>;
+    readonly caller?: SimAwsCaller | undefined;
+}
+/**
+ * Runs service-specific validation for one Resource replacement.
+ */
+export declare class SimCfnResourceUpdateValidator {
+    private readonly current;
+    private readonly updated;
+    constructor(properties: SimCfnResourceUpdateValidatorProperties);
+    /**
+     * Refuse an invalid update before its current Resource is deleted.
+     */
+    assertAllowed(properties: AssertSimCfnResourceUpdateAllowedProperties): Promise<void>;
+}
+export {};

package/dist/service/cloudformation/resource/update/sim-cfn-resource-update-validator.js

@@ -0,0 +1,55 @@
+import { parseSimCloudFormationResourceType } from "../parser/sim-cfn-resource-parser.js";
+import { resolveSimCloudFormationServiceResourceFactory } from "../resolve/service/sim-cfn-service-resolver.js";
+import { isSimCfnUnsupportedResourceError } from "../unsupported/sim-cfn-unsupported-resource.js";
+/**
+ * Runs service-specific validation for one Resource replacement.
+ */
+export class SimCfnResourceUpdateValidator {
+    current;
+    updated;
+    constructor(properties) {
+        this.current = properties.current;
+        this.updated = properties.updated;
+    }
+    /**
+     * Refuse an invalid update before its current Resource is deleted.
+     */
+    async assertAllowed(properties) {
+        const { current, updated } = this;
+        const { simAws, currentResources, updatedResources, caller } = properties;
+        const { type } = updated;
+        if (type === undefined || current.type !== type) {
+            return;
+        }
+        const resourceType = parseSimCloudFormationResourceType(type);
+        let factory;
+        try {
+            factory = resolveSimCloudFormationServiceResourceFactory(simAws, updated.accountRegionScope, resourceType);
+        }
+        catch (error) {
+            if (isSimCfnUnsupportedResourceError(error)) {
+                return;
+            }
+            throw error;
+        }
+        if (factory.assertUpdateAllowed === undefined) {
+            return;
+        }
+        await factory.assertUpdateAllowed(resourceType.resourceTypeName, current, updated, {
+            simAws,
+            currentResources,
+            updatedResources,
+            currentResolvedProperties: await current.resolvedProperties({
+                simAws,
+                resources: currentResources,
+                caller,
+            }),
+            updatedResolvedProperties: await updated.resolvedProperties({
+                simAws,
+                resources: updatedResources,
+                caller,
+            }),
+            caller,
+        });
+    }
+}

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.d.ts

@@ -8,6 +8,7 @@ import type { SimCfnResource } from "../resource/sim-cfn-resource.js";
 import type { SimCfnTemplate } from "../template/sim-cfn-template.js";
 import type { SimCfnResourceOrder } from "./deploy/sim-cfn-resource-order.js";
 import { SimCfnStackUpdater } from "./update/sim-cfn-stack-updater.js";
+import type { SimCfnStackResourceReplacement } from "./update/sim-cfn-stack-update-plan.js";
 import type { SimCloudFormationStackName } from "./sim-cfn-stack.js";
 interface SimCfnStackUpdateProperties {
     readonly background: BackgroundScheduler;
@@ -87,6 +88,10 @@ export declare class SimCfnStackResourceOperations {
      * Stack.
      */
     delete(resources: ReadonlyMap<string, SimCfnResource>, deleting: readonly SimCfnResource[]): Promise<void>;
+    /**
+     * Validate every Resource replacement before the update changes the Stack.
+     */
+    assertUpdatesAllowed(currentResources: ReadonlyMap<string, SimCfnResource>, updatedResources: ReadonlyMap<string, SimCfnResource>, replacements: readonly SimCfnStackResourceReplacement[]): Promise<void>;
     /**
      * An update of this Stack from a changed template, in the same scope.
      */

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.js

@@ -2,6 +2,7 @@ import { SimCdkAssetsPublisher } from "../cdk/assets/sim-cdk-assets-publisher.js
 import { SimCfnStackResourceCreator } from "./deploy/sim-cfn-stack-resource-creator.js";
 import { SimCfnStackResourceDeleter } from "./teardown/sim-cfn-stack-resource-deleter.js";
 import { SimCfnStackUpdater } from "./update/sim-cfn-stack-updater.js";
+import { SimCfnResourceUpdateValidator } from "../resource/update/sim-cfn-resource-update-validator.js";
 /**
  * What a Stack can ask simulated AWS to do with its Resources.
  *
@@ -77,6 +78,22 @@ export class SimCfnStackResourceOperations {
     async delete(resources, deleting) {
         await this.deleter(resources).delete(deleting);
     }
+    /**
+     * Validate every Resource replacement before the update changes the Stack.
+     */
+    async assertUpdatesAllowed(currentResources, updatedResources, replacements) {
+        await Promise.all(replacements.map(async ({ current, updated }) => {
+            await new SimCfnResourceUpdateValidator({
+                current,
+                updated,
+            }).assertAllowed({
+                simAws: this.simAws,
+                currentResources,
+                updatedResources,
+                caller: this.caller,
+            });
+        }));
+    }
     /**
      * An update of this Stack from a changed template, in the same scope.
      */

package/dist/service/cloudformation/stack/update/sim-cfn-stack-update-plan.d.ts

@@ -3,6 +3,10 @@ interface SimCfnStackUpdatePlanProperties {
     readonly current: ReadonlyMap<string, SimCfnResource>;
     readonly updated: ReadonlyMap<string, SimCfnResource>;
 }
+export interface SimCfnStackResourceReplacement {
+    readonly current: SimCfnResource;
+    readonly updated: SimCfnResource;
+}
 /**
  * What an update has to do to a Stack's Resources, worked out before any of it
  * happens.
@@ -17,6 +21,8 @@ interface SimCfnStackUpdatePlanProperties {
  * simCfnStackReplacedLogicalIds decides what changed.
  */
 export declare class SimCfnStackUpdatePlan {
+    /** The current and updated halves of each Resource replacement. */
+    readonly replacements: readonly SimCfnStackResourceReplacement[];
     /**
      * The deployed Resources to delete: the ones the new template drops, and the
      * deployed halves of the ones it replaces.
@@ -27,7 +33,7 @@ export declare class SimCfnStackUpdatePlan {
      * halves of the ones it replaces.
      */
     readonly creations: readonly SimCfnResource[];
-    private readonly updated;
+    readonly updated: ReadonlyMap<string, SimCfnResource>;
     constructor(properties: SimCfnStackUpdatePlanProperties);
     /**
      * Whether the update changes any Resource at all.

package/dist/service/cloudformation/stack/update/sim-cfn-stack-update-plan.js

@@ -13,6 +13,8 @@ import { simCfnStackReplacedLogicalIds } from "./sim-cfn-stack-replaced-resource
  * simCfnStackReplacedLogicalIds decides what changed.
  */
 export class SimCfnStackUpdatePlan {
+    /** The current and updated halves of each Resource replacement. */
+    replacements;
     /**
      * The deployed Resources to delete: the ones the new template drops, and the
      * deployed halves of the ones it replaces.
@@ -28,6 +30,17 @@ export class SimCfnStackUpdatePlan {
         const { current, updated } = properties;
         const replaced = simCfnStackReplacedLogicalIds({ current, updated });
         this.updated = updated;
+        this.replacements = replaced
+            .values()
+            .map((logicalId) => {
+            const currentResource = current.get(logicalId);
+            const updatedResource = updated.get(logicalId);
+            if (currentResource === undefined || updatedResource === undefined) {
+                throw new Error(`CloudFormation replacement ${logicalId} is missing one of its Resource definitions`);
+            }
+            return { current: currentResource, updated: updatedResource };
+        })
+            .toArray();
         // Both lists are worked out now rather than on demand, because the Stack's
         // Resource map is the current one and applying the plan changes it.
         this.deletions = current

package/dist/service/cloudformation/stack/update/sim-cfn-stack-updater.js

@@ -57,6 +57,7 @@ export class SimCfnStackUpdater {
     async apply() {
         const { resources, operations } = this.properties;
         const { plan } = this;
+        await operations.assertUpdatesAllowed(resources, plan.updated, plan.replacements);
         await operations.delete(resources, plan.deletions);
         plan.applyTo(resources);
         await operations.create(resources, plan.creations);

package/dist/service/dynamodb/cfn/sim-cfn-dynamodb-resource-factory.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFormationResourceUpdateContext } from "../../cloudformation/resource/sim-cfn-resource.type.js";
 import type { SimDynamoDb } from "../sim-dynamodb.js";
 interface SimDynamoDbCfnResourceFactoryProperties {
     readonly dynamoDb: SimDynamoDb;
@@ -26,5 +27,9 @@ export declare class SimDynamoDbCfnResourceFactory implements SimCfnServiceResou
      * Delete a simulated DynamoDB resource created from a CloudFormation Resource.
      */
     delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
+    /**
+     * Validate a DynamoDB Resource replacement before its table is deleted.
+     */
+    assertUpdateAllowed(resourceTypeName: string, current: SimCfnResource, updated: SimCfnResource, context: SimCloudFormationResourceUpdateContext): void;
 }
 export {};

package/dist/service/dynamodb/cfn/sim-cfn-dynamodb-resource-factory.js

@@ -2,6 +2,7 @@ import { simCfnResourceCallerOptions } from "../../cloudformation/resource/calle
 import { SimCfnDynamoDbGlobalTableCreator } from "./global-table/sim-cfn-dynamodb-global-table-creator.js";
 import { SimCfnDynamoDbTableCreator } from "./table/sim-cfn-dynamodb-table-creator.js";
 import { SimCfnDynamoDbResourceDeleter } from "./sim-cfn-dynamodb-resource-deleter.js";
+import { SimCfnDynamoDbTableUpdateValidator } from "./table/sim-cfn-dynamodb-table-update-validator.js";
 /**
  * CloudFormation Resource factory for simulated DynamoDB resources.
  */
@@ -50,4 +51,18 @@ export class SimDynamoDbCfnResourceFactory {
     async delete(resourceTypeName, resource, context) {
         await this.deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
+    /**
+     * Validate a DynamoDB Resource replacement before its table is deleted.
+     */
+    assertUpdateAllowed(resourceTypeName, current, updated, context) {
+        if (resourceTypeName !== "Table") {
+            return;
+        }
+        new SimCfnDynamoDbTableUpdateValidator({
+            currentResource: current,
+            updatedResource: updated,
+            currentProperties: context.currentResolvedProperties,
+            updatedProperties: context.updatedResolvedProperties,
+        }).assertAllowed();
+    }
 }

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-update-validator.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+interface SimCfnDynamoDbTableUpdateValidatorProperties {
+    readonly currentResource: SimCfnResource;
+    readonly updatedResource: SimCfnResource;
+    readonly currentProperties: SimCfnTemplateValueRecord;
+    readonly updatedProperties: SimCfnTemplateValueRecord;
+}
+/**
+ * Validates constraints that apply when CloudFormation updates a table.
+ */
+export declare class SimCfnDynamoDbTableUpdateValidator {
+    private readonly properties;
+    constructor(properties: SimCfnDynamoDbTableUpdateValidatorProperties);
+    /**
+     * Refuse a template diff that asks DynamoDB for too many index operations.
+     *
+     * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html
+     */
+    assertAllowed(): void;
+    private tableProperties;
+    private indexUpdates;
+}
+export {};

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-update-validator.js

@@ -0,0 +1,38 @@
+import { readSimDynamoDbIndexName } from "../../secondary-index/sim-dynamodb-index-name.js";
+import { SimDynamoDbIndexUpdate } from "../../table/sim-dynamodb-index-update.js";
+import { SimCfnDynamoDbTableProperties } from "./sim-cfn-dynamodb-table-properties.js";
+/**
+ * Validates constraints that apply when CloudFormation updates a table.
+ */
+export class SimCfnDynamoDbTableUpdateValidator {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Refuse a template diff that asks DynamoDB for too many index operations.
+     *
+     * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html
+     */
+    assertAllowed() {
+        const { currentResource, updatedResource } = this.properties;
+        const current = this.tableProperties(currentResource, this.properties.currentProperties).globalSecondaryIndexes();
+        const updated = this.tableProperties(updatedResource, this.properties.updatedProperties).globalSecondaryIndexes();
+        SimDynamoDbIndexUpdate.fromInput(this.indexUpdates(current, updated));
+    }
+    tableProperties(resource, properties) {
+        return new SimCfnDynamoDbTableProperties({ resource, properties });
+    }
+    indexUpdates(current, updated) {
+        const currentNames = new Set(current.map((index) => readSimDynamoDbIndexName(index.IndexName)));
+        const updatedNames = new Set(updated.map((index) => readSimDynamoDbIndexName(index.IndexName)));
+        return [
+            ...updated
+                .filter((index) => !currentNames.has(readSimDynamoDbIndexName(index.IndexName)))
+                .map((index) => ({ Create: index })),
+            ...current
+                .filter((index) => !updatedNames.has(readSimDynamoDbIndexName(index.IndexName)))
+                .map((index) => ({ Delete: { IndexName: index.IndexName } })),
+        ];
+    }
+}

package/dist/service/dynamodb/table/sim-dynamodb-index-update.js

@@ -73,8 +73,7 @@ export class SimDynamoDbIndexUpdate {
             .map((entry) => deletedIndexName(entry))
             .filter((name) => name !== undefined);
         if (created.length + deleted.length > 1) {
-            throw new SimDynamoDbValidationException("You can create or delete only one global secondary index per " +
-                "UpdateTable operation");
+            throw new SimDynamoDbValidationException("Cannot perform more than one GSI creation or deletion in a single update");
         }
         return new this({ created: created.at(0), deletedName: deleted.at(0) });
     }

package/dist/service/ses/command/configuration-set/sim-ses-configuration-set-commands.js

@@ -82,15 +82,13 @@ export class SimSesConfigurationSetCommands {
 /**
  * What GetConfigurationSet answers with.
  *
- * Every group is reported, including the ones the set never declared, because
- * real SES answers with the defaults it applied rather than leaving them out.
+ * Sending, delivery and reputation options report their applied defaults.
+ * Suppression options stay absent unless the set declared an override.
  */
 function reported(configurationSet) {
     return {
         ConfigurationSetName: configurationSet.configurationSetName,
-        SuppressionOptions: {
-            SuppressedReasons: configurationSet.suppressedReasons,
-        },
+        ...reportedSuppressionOptions(configurationSet),
         SendingOptions: { SendingEnabled: configurationSet.sendingEnabled },
         DeliveryOptions: {
             TlsPolicy: configurationSet.deliveryOptions.tlsPolicy,
@@ -102,3 +100,13 @@ function reported(configurationSet) {
         },
     };
 }
+function reportedSuppressionOptions(configurationSet) {
+    if (configurationSet.suppressedReasons === undefined) {
+        return {};
+    }
+    return {
+        SuppressionOptions: {
+            SuppressedReasons: configurationSet.suppressedReasons,
+        },
+    };
+}

package/dist/service/ses/command/configuration-set/sim-ses-configuration-set-options.d.ts

@@ -5,6 +5,6 @@ import type { SimCreateConfigurationSetCommandInput } from "./configuration-set.
  * refuses.
  *
  * A set declaring none of these gets the defaults real SES applies: sending
- * on, no suppression reasons, optional TLS and no reputation metrics.
+ * on, account-level suppression, optional TLS and no reputation metrics.
  */
 export declare function readSimSesConfigurationSetOptions(input: SimCreateConfigurationSetCommandInput): SimSesConfigurationSetOptions;

package/dist/service/ses/command/configuration-set/sim-ses-configuration-set-options.js

@@ -11,11 +11,11 @@ const tlsPolicies = new Set(["REQUIRE", "OPTIONAL"]);
  * refuses.
  *
  * A set declaring none of these gets the defaults real SES applies: sending
- * on, no suppression reasons, optional TLS and no reputation metrics.
+ * on, account-level suppression, optional TLS and no reputation metrics.
  */
 export function readSimSesConfigurationSetOptions(input) {
     return {
-        suppressedReasons: readSuppressedReasons(input.SuppressionOptions?.SuppressedReasons),
+        suppressedReasons: readSuppressedReasons(input.SuppressionOptions),
         sendingEnabled: input.SendingOptions?.SendingEnabled ?? true,
         deliveryOptions: readDeliveryOptions(input.DeliveryOptions),
         reputationOptions: {
@@ -26,15 +26,15 @@ export function readSimSesConfigurationSetOptions(input) {
 /**
  * The suppression reasons a set names, refusing one SES has no meaning for.
  *
- * An absent `SuppressionOptions` leaves this empty. Real SES falls back to the
- * account-level setting there, and this simulation has no account suppression
- * list to fall back to.
+ * An absent `SuppressionOptions` returns undefined, which preserves the
+ * account-level fallback. A present group with no reasons returns an empty
+ * override and disables suppression for messages sent through the set.
  */
-function readSuppressedReasons(reasons) {
-    if (reasons === undefined) {
-        return [];
+function readSuppressedReasons(options) {
+    if (options === undefined) {
+        return undefined;
     }
-    return reasons.map((reason) => {
+    return (options.SuppressedReasons ?? []).map((reason) => {
         if (!isSuppressedReason(reason)) {
             throw new SimSesBadRequestException(`1 validation error detected: Value '${reason}' at ` +
                 `'suppressionOptions.suppressedReasons' failed to satisfy ` +

package/dist/service/ses/command/send/send.command.d.ts

@@ -11,11 +11,20 @@ export interface SimSesBody {
     readonly Text?: SimSesContent | undefined;
     readonly Html?: SimSesContent | undefined;
 }
+export interface SimSesAttachment {
+    readonly RawContent?: Uint8Array | undefined;
+    readonly ContentDisposition?: "ATTACHMENT" | "INLINE" | undefined;
+    readonly FileName?: string | undefined;
+    readonly ContentDescription?: string | undefined;
+    readonly ContentId?: string | undefined;
+    readonly ContentTransferEncoding?: "BASE64" | "QUOTED_PRINTABLE" | "SEVEN_BIT" | undefined;
+    readonly ContentType?: string | undefined;
+}
 export interface SimSesMessage {
     readonly Subject?: SimSesContent | undefined;
     readonly Body?: SimSesBody | undefined;
     readonly Headers?: readonly unknown[] | undefined;
-    readonly Attachments?: readonly unknown[] | undefined;
+    readonly Attachments?: readonly SimSesAttachment[] | undefined;
 }
 export interface SimSesRawMessage {
     readonly Data?: Uint8Array | string | undefined;

package/dist/service/ses/command/send/sim-ses-read-content.d.ts

@@ -1,4 +1,4 @@
-import type { SimSesSentEmailBody } from "../../email/sim-ses-sent-email.js";
+import type { SimSesSentEmailAttachment, SimSesSentEmailBody } from "../../email/sim-ses-sent-email.js";
 /**
  * What a message says, read out of the content of a send.
  *
@@ -11,6 +11,7 @@ import type { SimSesSentEmailBody } from "../../email/sim-ses-sent-email.js";
 export interface SimSesReadContent {
     readonly subject: string;
     readonly body: SimSesSentEmailBody;
+    readonly attachments: readonly SimSesSentEmailAttachment[];
     /** The template this was rendered from, if it was rendered from a stored one. */
     readonly templateName: string | undefined;
     /** The data the placeholders were filled from, parsed out of the JSON. */

package/dist/service/ses/command/send/sim-ses-send-email.js

@@ -65,6 +65,7 @@ export class SimSesSendEmail {
             replyToAddresses: [...(input.ReplyToAddresses ?? [])],
             subject: content.subject,
             body: content.body,
+            attachments: content.attachments,
             templateName: content.templateName,
             templateData: content.templateData,
             configurationSetName,

package/dist/service/ses/command/send/sim-ses-service-send.js

@@ -62,6 +62,7 @@ export class SimSesServiceSend {
             replyToAddresses: [...request.replyToAddresses],
             subject: request.subject,
             body: { text: request.body, html: undefined },
+            attachments: [],
             templateName: undefined,
             templateData: undefined,
             configurationSetName,

package/dist/service/ses/command/send/sim-ses-simple-content.js

@@ -1,4 +1,4 @@
-import { SimSesBadRequestException, SimSesUnsupportedOperationException, } from "../../error/sim-ses.error.js";
+import { SimSesBadRequestException } from "../../error/sim-ses.error.js";
 /**
  * Read a message a send wrote out in full, refusing what real SES refuses and
  * what this simulation does not model.
@@ -8,10 +8,6 @@ import { SimSesBadRequestException, SimSesUnsupportedOperationException, } from
  * not have accepted.
  */
 export function readSimSesSimpleMessage(message) {
-    if (message.Attachments !== undefined) {
-        throw new SimSesUnsupportedOperationException("Attachments are not simulated, so SendEmail refuses them rather than " +
-            "recording a message without them");
-    }
     const subject = message.Subject?.Data;
     if (subject === undefined) {
         throw new SimSesBadRequestException("1 validation error detected: Value at 'content.simple.subject' " +
@@ -26,7 +22,32 @@ export function readSimSesSimpleMessage(message) {
     return {
         subject,
         body: { text, html },
+        attachments: (message.Attachments ?? []).map((attachment, index) => readAttachment(attachment, index)),
         templateName: undefined,
         templateData: undefined,
     };
 }
+/** Read and validate one attachment from a simple message. */
+function readAttachment(attachment, index) {
+    if (attachment.RawContent === undefined) {
+        throw missingAttachmentMember(index, "rawContent");
+    }
+    if (attachment.FileName === undefined) {
+        throw missingAttachmentMember(index, "fileName");
+    }
+    return {
+        rawContent: Uint8Array.from(attachment.RawContent),
+        fileName: attachment.FileName,
+        contentType: attachment.ContentType,
+        contentDisposition: attachment.ContentDisposition,
+        contentDescription: attachment.ContentDescription,
+        contentId: attachment.ContentId,
+        contentTransferEncoding: attachment.ContentTransferEncoding,
+    };
+}
+/** Build the SES validation error for a missing attachment member. */
+function missingAttachmentMember(index, member) {
+    return new SimSesBadRequestException("1 validation error detected: Value at " +
+        `'content.simple.attachments.${String(index)}.${member}' failed to ` +
+        "satisfy constraint: Member must not be null");
+}

package/dist/service/ses/command/send/sim-ses-template-send.js

@@ -35,6 +35,7 @@ export class SimSesTemplateSendReader {
                 text: renderOptional(content.text, data),
                 html: renderOptional(content.html, data),
             },
+            attachments: [],
             templateName: template.TemplateName,
             templateData: data,
         };

package/dist/service/ses/command/suppression/suppression.command.d.ts

@@ -2,8 +2,9 @@ import type { SimResponseMetadata } from "../../../aws/metadata/response-metadat
 /**
  * What a suppression list entry says, in the shape the SES v2 API reports it.
  *
- * `Attributes` is left out. It describes the bounce or complaint SES put the
- * address on the list for, and nothing bounces here.
+ * `Attributes` is left out. Real SES uses it for details of the feedback event
+ * that put the address on the list. Explicit simulator feedback records the
+ * reason and time only.
  */
 export interface SimSesSuppressedDestinationDetail {
     readonly EmailAddress: string;

package/dist/service/ses/configuration-set/sim-ses-configuration-set.d.ts

@@ -32,7 +32,7 @@ export interface SimSesConfigurationSetReputationOptions {
  * Everything a configuration set holds apart from its name.
  */
 export interface SimSesConfigurationSetOptions {
-    readonly suppressedReasons: readonly SimSesSuppressedReason[];
+    readonly suppressedReasons: readonly SimSesSuppressedReason[] | undefined;
     readonly sendingEnabled: boolean;
     readonly deliveryOptions: SimSesConfigurationSetDeliveryOptions;
     readonly reputationOptions: SimSesConfigurationSetReputationOptions;
@@ -48,11 +48,9 @@ interface SimSesConfigurationSetProperties {
  * A configuration set is a named group of settings a send can be made under,
  * covering suppression, whether sending is on, how the message is handed on
  * and whether reputation metrics are published. None of it changes what a
- * message says, which is why this is state to read back rather than behaviour
- * to reproduce.
- *
- * Sending is the exception, and it is left to the work that attaches a set to
- * a send. Here the switch is recorded and acted on by nothing.
+ * message says. The sending switch controls acceptance, and the suppression
+ * reasons control feedback. Delivery and reputation options remain state for
+ * a test to read back.
  */
 export declare class SimSesConfigurationSet {
     readonly configurationSetName: string;
@@ -60,11 +58,12 @@ export declare class SimSesConfigurationSet {
     /**
      * The reasons that would put a recipient on the account suppression list.
      *
-     * Empty where the set declares no `SuppressionOptions`. Real SES falls back
-     * to the account setting there, and this simulation has no account
-     * suppression list to fall back to.
+     * Undefined where the set declares no `SuppressionOptions`, which makes a
+     * send fall back to the account setting. An empty list is an explicit
+     * override that disables suppression for feedback recorded for a message
+     * sent through this set.
      */
-    readonly suppressedReasons: readonly SimSesSuppressedReason[];
+    readonly suppressedReasons: readonly SimSesSuppressedReason[] | undefined;
     /** Whether SES would accept a send made through this set. */
     readonly sendingEnabled: boolean;
     readonly deliveryOptions: SimSesConfigurationSetDeliveryOptions;

package/dist/service/ses/configuration-set/sim-ses-configuration-set.js

@@ -10,11 +10,9 @@ export const simSesSuppressedReasons = [
  * A configuration set is a named group of settings a send can be made under,
  * covering suppression, whether sending is on, how the message is handed on
  * and whether reputation metrics are published. None of it changes what a
- * message says, which is why this is state to read back rather than behaviour
- * to reproduce.
- *
- * Sending is the exception, and it is left to the work that attaches a set to
- * a send. Here the switch is recorded and acted on by nothing.
+ * message says. The sending switch controls acceptance, and the suppression
+ * reasons control feedback. Delivery and reputation options remain state for
+ * a test to read back.
  */
 export class SimSesConfigurationSet {
     configurationSetName;
@@ -22,9 +20,10 @@ export class SimSesConfigurationSet {
     /**
      * The reasons that would put a recipient on the account suppression list.
      *
-     * Empty where the set declares no `SuppressionOptions`. Real SES falls back
-     * to the account setting there, and this simulation has no account
-     * suppression list to fall back to.
+     * Undefined where the set declares no `SuppressionOptions`, which makes a
+     * send fall back to the account setting. An empty list is an explicit
+     * override that disables suppression for feedback recorded for a message
+     * sent through this set.
      */
     suppressedReasons;
     /** Whether SES would accept a send made through this set. */