@kensio/yulin 1.21.3 → 1.21.5

package/dist/service/cloudformation/command/update-stack/update-stack-template.d.ts

@@ -0,0 +1,22 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimCfnExports } from "../../export/sim-cfn-exports.js";
+import type { SimCfnStack } from "../../stack/sim-cfn-stack.js";
+import type { SimCfnTemplate } from "../../template/sim-cfn-template.js";
+import type { SimUpdateStackCommandInput } from "./update-stack.command.js";
+interface SimCfnUpdateStackTemplateProperties {
+    readonly simAws: SimAws;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly stack: SimCfnStack;
+    readonly input: SimUpdateStackCommandInput;
+    readonly exports?: SimCfnExports | undefined;
+}
+/**
+ * The template an update applies, read against the Parameter values it carries.
+ *
+ * `UsePreviousTemplate` takes the template the Stack already holds, which is
+ * how an update changes nothing but a Parameter value. Every other update is
+ * given the body it is to apply.
+ */
+export declare function simCfnUpdateStackTemplate(properties: SimCfnUpdateStackTemplateProperties): SimCfnTemplate;
+export {};

package/dist/service/cloudformation/command/update-stack/update-stack-template.js

@@ -0,0 +1,34 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnCommandTemplate, simCfnHeldTemplate, } from "../../template/sim-cfn-command-template.js";
+import { simCfnUpdateStackParameters } from "./update-stack-previous-values.js";
+/**
+ * The template an update applies, read against the Parameter values it carries.
+ *
+ * `UsePreviousTemplate` takes the template the Stack already holds, which is
+ * how an update changes nothing but a Parameter value. Every other update is
+ * given the body it is to apply.
+ */
+export function simCfnUpdateStackTemplate(properties) {
+    const { simAws, accountRegionScope, stack, input, exports } = properties;
+    const context = {
+        simAws,
+        accountRegionScope,
+        stackName: stack.stackName,
+        stackId: stack.stackId,
+        input: {
+            Parameters: simCfnUpdateStackParameters({
+                input,
+                deployed: stack.currentTemplate.parameters,
+            }),
+        },
+        exports,
+    };
+    if (input.UsePreviousTemplate === true) {
+        return simCfnHeldTemplate({ ...context, template: stack.template });
+    }
+    assertDefined(input.TemplateBody, "UpdateStackCommand.input.TemplateBody");
+    return simCfnCommandTemplate({
+        ...context,
+        templateBody: input.TemplateBody,
+    });
+}

package/dist/service/cloudformation/command/update-stack/update-stack.command.d.ts

@@ -6,6 +6,17 @@ import type { SimCreateStackParameter } from "../create-stack/create-stack.comma
 export interface SimUpdateStackCommand {
     readonly input: SimUpdateStackCommandInput;
 }
+/**
+ * A Parameter value an update supplies, or asks the Stack for.
+ *
+ * An update names every Parameter the template declares, so one whose value has
+ * not changed is carried by `UsePreviousValue` rather than being written out
+ * again. Supplying both that and a `ParameterValue` says two things at once,
+ * and is refused.
+ */
+export interface SimUpdateStackParameter extends SimCreateStackParameter {
+    readonly UsePreviousValue?: boolean | undefined;
+}
 /**
  * Minimal structural sim CloudFormation UpdateStack input.
  *
@@ -14,7 +25,12 @@ export interface SimUpdateStackCommand {
 export interface SimUpdateStackCommandInput {
     readonly StackName?: string | undefined;
     readonly TemplateBody?: string | undefined;
-    readonly Parameters?: readonly SimCreateStackParameter[] | undefined;
+    /**
+     * Update from the template the Stack already holds, which is how a Parameter
+     * value is changed on its own. Supplying a `TemplateBody` as well is refused.
+     */
+    readonly UsePreviousTemplate?: boolean | undefined;
+    readonly Parameters?: readonly SimUpdateStackParameter[] | undefined;
 }
 /**
  * Minimal structural sim CloudFormation UpdateStack output.

package/dist/service/cloudformation/command/update-stack/update-stack.handler.d.ts

@@ -22,6 +22,11 @@ interface UpdateStackCommandHandlerProperties {
      * one. Left out, the Stack goes on running as whoever deployed it.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The principal to publish the re-synthesized CDK file assets as, for an
+     * update that names one. Left out, they are published as `caller`.
+     */
+    readonly assetsCaller?: SimAwsCaller | undefined;
     /** The export names published in this Account and Region. */
     readonly exports?: SimCfnExports | undefined;
 }
@@ -37,6 +42,7 @@ export declare class UpdateStackCommandHandler implements CommandHandler<SimUpda
     private readonly background;
     private readonly cdkOutContext;
     private readonly caller;
+    private readonly assetsCaller;
     private readonly exports;
     constructor(properties: UpdateStackCommandHandlerProperties);
     /**

package/dist/service/cloudformation/command/update-stack/update-stack.handler.js

@@ -1,8 +1,7 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { SimCfnTemplate } from "../../template/sim-cfn-template.js";
-import { SimCfnParameters } from "../../parameters/sim-cfn-parameters.js";
-import { makeSimCfnParameterStore } from "../../parameters/store/sim-cfn-parameter-store.js";
 import { SimCloudFormationValidationError } from "../../error/sim-cloudformation.error.js";
+import { assertSimCfnUpdateStackTemplateSource } from "./update-stack-previous-values.js";
+import { simCfnUpdateStackTemplate } from "./update-stack-template.js";
 /**
  * Simulated CloudFormation UpdateStackCommand handler.
  *
@@ -15,6 +14,7 @@ export class UpdateStackCommandHandler {
     background;
     cdkOutContext;
     caller;
+    assetsCaller;
     exports;
     constructor(properties) {
         this.simAws = properties.simAws;
@@ -23,6 +23,7 @@ export class UpdateStackCommandHandler {
         this.background = properties.background;
         this.cdkOutContext = properties.cdkOutContext;
         this.caller = properties.caller;
+        this.assetsCaller = properties.assetsCaller;
         this.exports = properties.exports;
     }
     /**
@@ -38,7 +39,7 @@ export class UpdateStackCommandHandler {
      */
     async handle(command) {
         assertDefined(command.input.StackName, "UpdateStackCommand.input.StackName");
-        assertDefined(command.input.TemplateBody, "UpdateStackCommand.input.TemplateBody");
+        assertSimCfnUpdateStackTemplateSource(command.input);
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
         const stackName = command.input.StackName;
@@ -46,21 +47,19 @@ export class UpdateStackCommandHandler {
         if (stack === undefined) {
             throw new SimCloudFormationValidationError(`Stack with id ${stackName} does not exist`);
         }
-        const parameters = SimCfnParameters.fromInput(command.input, {
-            stackName,
-            parameterStore: makeSimCfnParameterStore({
-                simAws: this.simAws,
-                accountRegionScope: this.accountRegionScope,
-            }),
-        });
-        await stack.update(SimCfnTemplate.fromTemplateBody(command.input.TemplateBody, {
-            stackName,
-            parameters,
+        await stack.update(simCfnUpdateStackTemplate({
+            simAws: this.simAws,
             accountRegionScope: this.accountRegionScope,
+            stack,
+            input: command.input,
             exports: this.exports,
-        }), { cdkOutContext: this.cdkOutContext, caller: this.caller });
+        }), {
+            cdkOutContext: this.cdkOutContext,
+            caller: this.caller,
+            assetsCaller: this.assetsCaller,
+        });
         return {
-            StackId: stack.stackName,
+            StackId: stack.stackId,
             $metadata: {},
         };
     }

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-deployer.js

@@ -27,7 +27,7 @@ export class SimCfnCdkOutDeployer {
     }
     async deployStack(stack, plan, deployed) {
         const { simAws, accountRegionScope } = this.scope;
-        const { transform, caller, resourceOrder, ...options } = cdkOutOptionsFor(stack, plan.stackOptions);
+        const { transform, caller, assetsCaller, resourceOrder, ...options } = cdkOutOptionsFor(stack, plan.stackOptions);
         return await simAws
             .accountRegionScope(accountRegionScope.accountId, stack.regionName)
             .cloudFormation()
@@ -36,6 +36,7 @@ export class SimCfnCdkOutDeployer {
             stackName: stack.stackName,
             ...options,
             caller: caller ?? plan.caller,
+            assetsCaller: assetsCaller ?? plan.assetsCaller,
             resourceOrder: resourceOrder ?? plan.resourceOrder,
             transform: cdkOutBoundTransform(transform, deployed),
         });

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-options-deployed.d.ts

@@ -0,0 +1,10 @@
+import type { SimCdkAssemblyStack } from "../cdk/sim-cdk-assembly-manifest.js";
+import type { SimCfnCdkOutStackOptionsByName } from "./sim-cfn-cdk-out-stack-options.js";
+/**
+ * Refuse options keyed against a Stack that is not being deployed.
+ *
+ * A renamed Stack would otherwise take its bindings, its caller and its
+ * transform with it without saying anything, and the deployment that lost them
+ * looks like one that never had them.
+ */
+export declare function assertCdkOutOptionsAreDeployed(optionsByName: SimCfnCdkOutStackOptionsByName | undefined, deploying: readonly SimCdkAssemblyStack[]): void;

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-options-deployed.js

@@ -0,0 +1,14 @@
+/**
+ * Refuse options keyed against a Stack that is not being deployed.
+ *
+ * A renamed Stack would otherwise take its bindings, its caller and its
+ * transform with it without saying anything, and the deployment that lost them
+ * looks like one that never had them.
+ */
+export function assertCdkOutOptionsAreDeployed(optionsByName, deploying) {
+    const names = new Set(deploying.flatMap((stack) => [stack.stackName, stack.artifactId]));
+    const unmatched = Object.keys(optionsByName ?? {}).filter((name) => !names.has(name));
+    if (unmatched.length > 0) {
+        throw new Error(`Options were given for ${unmatched.join(", ")}, which no Stack being deployed is named. The Stacks being deployed are ${deploying.map((stack) => stack.stackName).join(", ")}.`);
+    }
+}

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-plan.d.ts

@@ -1,7 +1,7 @@
 import type { AwsRegionName } from "../../aws/sim-aws-region.js";
 import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
 import { type SimCdkAssemblyStack } from "../cdk/sim-cdk-assembly-manifest.js";
-import { type SimCfnCdkOutStackOptionsByName } from "./sim-cfn-cdk-out-stack-options.js";
+import type { SimCfnCdkOutStackOptionsByName } from "./sim-cfn-cdk-out-stack-options.js";
 import type { SimCfnResourceOrder } from "../stack/deploy/sim-cfn-resource-order.js";
 export interface SimCloudFormationDeployCdkOutProperties {
     /** The `cdk.out` directory to deploy, holding a `manifest.json`. */
@@ -23,6 +23,15 @@ export interface SimCloudFormationDeployCdkOutProperties {
      * in `stackOptions` overrides for its own Stack.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The principal every Stack in the assembly publishes its CDK file assets
+     * as, which one named in `stackOptions` overrides for its own Stack.
+     *
+     * A real `cdk deploy` publishes assets as the file publishing Role and
+     * processes each template as the execution Role. Left out, an assembly
+     * publishes its assets as `caller`.
+     */
+    readonly assetsCaller?: SimAwsCaller | undefined;
     /**
      * The order every Stack in the assembly creates Resources with no dependency
      * between them in, which one named in `stackOptions` overrides for its own
@@ -43,6 +52,7 @@ export interface SimCfnCdkOutPlannedStack extends SimCdkAssemblyStack {
 export interface SimCfnCdkOutPlan {
     readonly stacks: readonly SimCfnCdkOutPlannedStack[];
     readonly caller?: SimAwsCaller | undefined;
+    readonly assetsCaller?: SimAwsCaller | undefined;
     readonly resourceOrder?: SimCfnResourceOrder | undefined;
     readonly stackOptions?: SimCfnCdkOutStackOptionsByName | undefined;
 }

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-plan.js

@@ -2,7 +2,7 @@ import path from "node:path";
 import { loadCdkAssemblyStacks, } from "../cdk/sim-cdk-assembly-manifest.js";
 import { orderCdkAssemblyStacks } from "../cdk/sim-cdk-assembly-order.js";
 import { selectCdkAssemblyStacks } from "../cdk/sim-cdk-assembly-selection.js";
-import { assertCdkOutOptionsAreDeployed, } from "./sim-cfn-cdk-out-stack-options.js";
+import { assertCdkOutOptionsAreDeployed } from "./sim-cfn-cdk-out-options-deployed.js";
 /**
  * Work out which Stacks to deploy, in what order, and into which region.
  *
@@ -10,7 +10,7 @@ import { assertCdkOutOptionsAreDeployed, } from "./sim-cfn-cdk-out-stack-options
  * an assembly that cannot be deployed says so before any Stack is created.
  */
 export async function planCdkOutDeployment(properties) {
-    const { directoryPath, stackNames, caller, resourceOrder, stackOptions } = cdkOutDeployment(properties.request);
+    const { directoryPath, stackNames, caller, assetsCaller, resourceOrder, stackOptions, } = cdkOutDeployment(properties.request);
     const selected = selectCdkAssemblyStacks({
         stacks: await loadCdkAssemblyStacks(directoryPath),
         stackNames,
@@ -23,6 +23,7 @@ export async function planCdkOutDeployment(properties) {
             regionName: stack.regionName ?? properties.defaultRegionName,
         })),
         caller,
+        assetsCaller,
         resourceOrder,
         stackOptions,
     };

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-stack-options.d.ts

@@ -34,6 +34,11 @@ export interface SimCfnCdkOutStackOptions {
      * application Stack deployed by another is what this is for.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The principal this Stack publishes its CDK file assets as, where the
+     * assembly's own assets caller is not the right one for it.
+     */
+    readonly assetsCaller?: SimAwsCaller | undefined;
     /**
      * The order this Stack creates Resources with no dependency between them in,
      * where the assembly's own order is not the right one for it.
@@ -53,11 +58,3 @@ export declare function cdkOutOptionsFor(stack: SimCdkAssemblyStack, optionsByNa
  * keeps the deployment it was handed while the call goes on deploying.
  */
 export declare function cdkOutBoundTransform(transform: SimCfnCdkOutTemplateTransform | undefined, deployed: ReadonlyMap<string, SimCfnDeployedStack>): SimCfnTemplateFileTransform | undefined;
-/**
- * Refuse options keyed against a Stack that is not being deployed.
- *
- * A renamed Stack would otherwise take its bindings, its caller and its
- * transform with it without saying anything, and the deployment that lost them
- * looks like one that never had them.
- */
-export declare function assertCdkOutOptionsAreDeployed(optionsByName: SimCfnCdkOutStackOptionsByName | undefined, deploying: readonly SimCdkAssemblyStack[]): void;

package/dist/service/cloudformation/deploy/sim-cfn-cdk-out-stack-options.js

@@ -17,17 +17,3 @@ export function cdkOutBoundTransform(transform, deployed) {
     const deployedSoFar = new Map(deployed);
     return (template) => transform(template, deployedSoFar);
 }
-/**
- * Refuse options keyed against a Stack that is not being deployed.
- *
- * A renamed Stack would otherwise take its bindings, its caller and its
- * transform with it without saying anything, and the deployment that lost them
- * looks like one that never had them.
- */
-export function assertCdkOutOptionsAreDeployed(optionsByName, deploying) {
-    const names = new Set(deploying.flatMap((stack) => [stack.stackName, stack.artifactId]));
-    const unmatched = Object.keys(optionsByName ?? {}).filter((name) => !names.has(name));
-    if (unmatched.length > 0) {
-        throw new Error(`Options were given for ${unmatched.join(", ")}, which no Stack being deployed is named. The Stacks being deployed are ${deploying.map((stack) => stack.stackName).join(", ")}.`);
-    }
-}

package/dist/service/cloudformation/deploy/sim-cfn-template-deployer.d.ts

@@ -24,6 +24,15 @@ export interface SimCloudFormationCreateStackProperties {
      * policy denying an Account's root principal then denies.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The principal the CDK file assets staged beside the template are published
+     * as.
+     *
+     * A real `cdk deploy` publishes them as the file publishing Role and only
+     * then processes the template as the execution Role, which is why the two
+     * are named apart. Left out, assets are published as `caller`.
+     */
+    readonly assetsCaller?: SimAwsCaller | undefined;
     /**
      * The order Resources with no dependency between them are created in.
      *

package/dist/service/cloudformation/deploy/sim-cfn-template-deployer.js

@@ -59,6 +59,7 @@ export class SimCloudFormationTemplateDeployer {
             parameters: properties.parameters,
             bindings: properties.bindings,
             caller: properties.caller,
+            assetsCaller: properties.assetsCaller,
             resourceOrder: properties.resourceOrder,
             cdkOutContext: await cdkOutContextForTemplatePath(properties.templatePath),
         });
@@ -118,6 +119,7 @@ export class SimCloudFormationTemplateDeployer {
             cdkOutContext: deployment.cdkOutContext,
             bindings: deployment.bindings,
             caller: deployment.caller,
+            assetsCaller: deployment.assetsCaller,
             resourceOrder: deployment.resourceOrder,
             exports: this.exports,
         });

package/dist/service/cloudformation/deploy/sim-cfn-template-file-loader.d.ts

@@ -20,6 +20,15 @@ export interface SimCloudFormationDeployTemplateFileProperties {
      * policy denying an Account's root principal then denies.
      */
     readonly caller?: SimAwsCaller | undefined;
+    /**
+     * The principal the CDK file assets staged beside the template are published
+     * as.
+     *
+     * A real `cdk deploy` publishes them as the file publishing Role and only
+     * then processes the template as the execution Role, which is why the two
+     * are named apart. Left out, assets are published as `caller`.
+     */
+    readonly assetsCaller?: SimAwsCaller | undefined;
     /**
      * The order Resources with no dependency between them are created in.
      *
@@ -64,6 +73,7 @@ export interface SimCfnLoadedTemplateFile {
     readonly parameters?: Record<string, string> | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;
     readonly caller?: SimAwsCaller | undefined;
+    readonly assetsCaller?: SimAwsCaller | undefined;
     readonly resourceOrder?: SimCfnResourceOrder | undefined;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
 }

package/dist/service/cloudformation/deploy/sim-cfn-template-file-loader.js

@@ -16,7 +16,7 @@ export class SimCfnTemplateFileLoader {
      */
     async load(properties) {
         const deployment = simCfnTemplateFileDeployment(properties);
-        const { templatePath, parameters, bindings, caller, resourceOrder } = deployment;
+        const { templatePath, parameters, bindings, caller, assetsCaller, resourceOrder, } = deployment;
         const stackName = deployment.stackName ?? stackNameFromTemplatePath(templatePath);
         // The template is named to a `yulin watch` supervisor, so re-synthing a
         // stack restarts the process that deployed it. Nothing happens outside
@@ -32,6 +32,7 @@ export class SimCfnTemplateFileLoader {
             parameters,
             bindings,
             caller,
+            assetsCaller,
             resourceOrder,
             cdkOutContext,
         };

package/dist/service/cloudformation/deploy/sim-cfn-template-file-updater.js

@@ -43,6 +43,7 @@ export class SimCfnTemplateFileUpdater {
             background: this.background,
             cdkOutContext: loaded.cdkOutContext,
             caller: loaded.caller,
+            assetsCaller: loaded.assetsCaller,
         });
         await handler.handle({
             input: {

package/dist/service/cloudformation/error/sim-cloudformation.error.d.ts

@@ -29,3 +29,24 @@ export declare class SimCloudFormationValidationError extends SimCloudFormationE
     readonly name = "ValidationError";
     constructor(message: string);
 }
+/**
+ * Simulated CloudFormation InvalidChangeSetStatusException error.
+ *
+ * CloudFormation returns this for an ExecuteChangeSet naming a change set that
+ * cannot be executed, such as one that has already been executed or one another
+ * execution has made obsolete.
+ */
+export declare class SimCloudFormationInvalidChangeSetStatusException extends SimCloudFormationError {
+    readonly name = "InvalidChangeSetStatusException";
+    constructor(message: string);
+}
+/**
+ * Simulated CloudFormation ChangeSetNotFoundException error.
+ *
+ * CloudFormation returns this for a command naming a change set it cannot
+ * find, which includes one DeleteChangeSet has taken away.
+ */
+export declare class SimCloudFormationChangeSetNotFoundException extends SimCloudFormationError {
+    readonly name = "ChangeSetNotFoundException";
+    constructor(message: string);
+}

package/dist/service/cloudformation/error/sim-cloudformation.error.js

@@ -30,3 +30,28 @@ export class SimCloudFormationValidationError extends SimCloudFormationError {
         super(message, { httpStatusCode: 400 });
     }
 }
+/**
+ * Simulated CloudFormation InvalidChangeSetStatusException error.
+ *
+ * CloudFormation returns this for an ExecuteChangeSet naming a change set that
+ * cannot be executed, such as one that has already been executed or one another
+ * execution has made obsolete.
+ */
+export class SimCloudFormationInvalidChangeSetStatusException extends SimCloudFormationError {
+    name = "InvalidChangeSetStatusException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated CloudFormation ChangeSetNotFoundException error.
+ *
+ * CloudFormation returns this for a command naming a change set it cannot
+ * find, which includes one DeleteChangeSet has taken away.
+ */
+export class SimCloudFormationChangeSetNotFoundException extends SimCloudFormationError {
+    name = "ChangeSetNotFoundException";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}

package/dist/service/cloudformation/parameters/pseudo/sim-cfn-pseudo-parameters.d.ts

@@ -3,6 +3,12 @@ import type { SimCfnTemplateValue } from "../../template/value/sim-cfn-template-
 interface SimCfnPseudoParametersProperties {
     readonly accountRegionScope?: SimAwsAccountRegionScope | undefined;
     readonly stackName?: string | undefined;
+    /**
+     * The Stack's unique ID, for a template being resolved for a Stack that has
+     * one. A template resolved outside a Stack has none, and reads `AWS::StackId`
+     * as the Stack name, which is the closest thing to an identity it has.
+     */
+    readonly stackId?: string | undefined;
 }
 /**
  * Resolves CloudFormation pseudo parameters for one simulated Stack scope.
@@ -10,6 +16,7 @@ interface SimCfnPseudoParametersProperties {
 export declare class SimCfnPseudoParameters {
     private readonly accountRegionScope;
     private readonly stackName;
+    private readonly stackId;
     constructor(properties: SimCfnPseudoParametersProperties);
     /**
      * Resolve a supported CloudFormation pseudo parameter.

package/dist/service/cloudformation/parameters/pseudo/sim-cfn-pseudo-parameters.js

@@ -7,9 +7,11 @@ import { DEFAULT_SIM_AWS_REGION_NAME } from "../../../aws/sim-aws-region.js";
 export class SimCfnPseudoParameters {
     accountRegionScope;
     stackName;
+    stackId;
     constructor(properties) {
         this.accountRegionScope = properties.accountRegionScope;
         this.stackName = properties.stackName;
+        this.stackId = properties.stackId;
     }
     /**
      * Resolve a supported CloudFormation pseudo parameter.
@@ -29,7 +31,7 @@ export class SimCfnPseudoParameters {
                 return this.stackName;
             }
             case "AWS::StackId": {
-                return this.stackName;
+                return this.stackId ?? this.stackName;
             }
             case "AWS::NotificationARNs": {
                 return [];

package/dist/service/cloudformation/parameters/sim-cfn-parameters.d.ts

@@ -14,6 +14,7 @@ import type { SimCfnParameterDefinition, SimCfnParametersContext, SimCfnParamete
 export declare class SimCfnParameters {
     private readonly definitions;
     private readonly values;
+    private readonly supplied;
     private readonly properties;
     constructor(properties?: SimCfnParametersProperties);
     /**
@@ -44,6 +45,14 @@ export declare class SimCfnParameters {
      * runtime value has been supplied or defaulted.
      */
     has(parameterName: string): boolean;
+    /**
+     * The value a command supplied for this Parameter, if it supplied one.
+     *
+     * What `UsePreviousValue` on an UpdateStack Parameter reads off the Stack.
+     * A Parameter the Stack was deployed without has nothing here, and takes the
+     * template Default again as it did the first time.
+     */
+    suppliedValue(parameterName: string): string | undefined;
     /**
      * Resolve the runtime value for a declared or referenced Parameter.
      *

package/dist/service/cloudformation/parameters/sim-cfn-parameters.js

@@ -16,10 +16,12 @@ import { assertDefined } from "../../../util/type-guard/defined.js";
 export class SimCfnParameters {
     definitions;
     values;
+    supplied;
     properties;
     constructor(properties = {}) {
         this.properties = properties;
         this.definitions = simCfnParameterDefinitions(properties);
+        this.supplied = new Map(Object.entries(properties.values ?? {}));
         this.values = new SimCfnParameterValues({
             definitions: this.definitions,
             supplied: properties.values ?? {},
@@ -68,6 +70,16 @@ export class SimCfnParameters {
     has(parameterName) {
         return this.definitions.has(parameterName);
     }
+    /**
+     * The value a command supplied for this Parameter, if it supplied one.
+     *
+     * What `UsePreviousValue` on an UpdateStack Parameter reads off the Stack.
+     * A Parameter the Stack was deployed without has nothing here, and takes the
+     * template Default again as it did the first time.
+     */
+    suppliedValue(parameterName) {
+        return this.supplied.get(parameterName);
+    }
     /**
      * Resolve the runtime value for a declared or referenced Parameter.
      *

package/dist/service/cloudformation/resource/delete/sim-cfn-resource-delete-operation.d.ts

@@ -29,6 +29,10 @@ export declare class SimCfnResourceDeleteOperation<T extends object = object> {
      * while the Resource itself is updated through CloudFormation delete states:
      * in progress before scheduling, complete after the deleter returns, skipped
      * if nothing can delete the Resource type, or failed if the deleter throws.
+     *
+     * A Resource the operation's retention keeps never reaches the deleter at
+     * all. CloudFormation leaves it where it is and reports it as DELETE_SKIPPED,
+     * so the Stack can finish deleting around it.
      */
     run(context: SimCloudFormationResourceDeleteContext): Promise<void>;
     private resourceDeletionError;

package/dist/service/cloudformation/resource/delete/sim-cfn-resource-delete-operation.js

@@ -1,4 +1,5 @@
 import { SimCfnResourceDeleter } from "./sim-cfn-resource-deleter.js";
+import { SimCfnResourceRetention } from "./sim-cfn-resource-retention.js";
 import { isSimCfnUnsupportedResourceError } from "../unsupported/sim-cfn-unsupported-resource.js";
 /**
  * Runs the asynchronous CloudFormation Resource deletion lifecycle.
@@ -29,8 +30,17 @@ export class SimCfnResourceDeleteOperation {
      * while the Resource itself is updated through CloudFormation delete states:
      * in progress before scheduling, complete after the deleter returns, skipped
      * if nothing can delete the Resource type, or failed if the deleter throws.
+     *
+     * A Resource the operation's retention keeps never reaches the deleter at
+     * all. CloudFormation leaves it where it is and reports it as DELETE_SKIPPED,
+     * so the Stack can finish deleting around it.
      */
     run(context) {
+        const retention = context.retention ?? new SimCfnResourceRetention();
+        if (retention.retains(this.resource)) {
+            this.resource.markDeleteRetained();
+            return Promise.resolve();
+        }
         this.resource.markDeleteInProgress();
         return new Promise((resolve, reject) => {
             this.background.schedule(async () => {

package/dist/service/cloudformation/resource/delete/sim-cfn-resource-retention.d.ts

@@ -0,0 +1,44 @@
+import type { SimCfnResourceRecord } from "../sim-cfn-resource-record.js";
+interface SimCfnResourceRetentionProperties {
+    /**
+     * For each logical ID this operation is replacing, whether the definition
+     * taking its place says to keep the deployed Resource.
+     *
+     * The answer comes from the new definition because that is the template
+     * CloudFormation is applying. An update that adds `UpdateReplacePolicy:
+     * Retain` keeps the Resource it replaces, and one that drops the attribute
+     * deletes it.
+     */
+    readonly replaced?: ReadonlyMap<string, boolean> | undefined;
+    /**
+     * The logical IDs the caller asked for by name, kept whatever their policy
+     * attributes say. DeleteStack RetainResources is what names them.
+     */
+    readonly named?: ReadonlySet<string> | undefined;
+}
+/**
+ * Which of the Resources an operation is deleting it has to leave behind.
+ *
+ * Three things can keep a Resource in simulated AWS. The DeleteStack call can
+ * name it, UpdateReplacePolicy can keep one a Stack update is replacing, and
+ * DeletionPolicy can keep one being removed. They are gathered here so that one
+ * delete has one answer.
+ *
+ * Which of the two attributes applies is the part worth stating. CloudFormation
+ * reads UpdateReplacePolicy for a replacement and DeletionPolicy for a removal,
+ * and neither stands in for the other. A Resource marked to survive a teardown
+ * still goes when an update replaces it.
+ *
+ * A retention with nothing in it reads DeletionPolicy, the way a plain teardown
+ * does.
+ */
+export declare class SimCfnResourceRetention {
+    private readonly replaced;
+    private readonly named;
+    constructor(properties?: SimCfnResourceRetentionProperties);
+    /**
+     * Whether this Resource is to be left in simulated AWS rather than deleted.
+     */
+    retains(resource: SimCfnResourceRecord): boolean;
+}
+export {};