@kensio/yulin 1.21.31 → 1.21.32
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/serve/message/sim-message-log-console.js +3 -3
- package/dist/service/apigateway/api/deployment/sim-rest-api-deployment.js +3 -3
- package/dist/service/apigateway/api/method/sim-rest-api-method.js +12 -12
- package/dist/service/apigateway/api/resource/sim-rest-api-resource.js +11 -9
- package/dist/service/apigateway/api/sim-rest-api-view.js +3 -3
- package/dist/service/apigateway/api/stage/sim-rest-api-stage.js +8 -10
- package/dist/service/apigatewayv2/api/integration/sim-http-api-integration.js +3 -3
- package/dist/service/apigatewayv2/api/route/sim-http-api-route-view.js +6 -6
- package/dist/service/apigatewayv2/api/sim-http-api-view.js +3 -3
- package/dist/service/apigatewayv2/api/stage/settings/sim-http-api-stage-route-settings.js +8 -7
- package/dist/service/apigatewayv2/api/stage/sim-http-api-stage.js +9 -9
- package/dist/service/athena/engine/sim-athena-partitioned-objects.js +7 -7
- package/dist/service/athena/sim-athena-engine.fixture.js +3 -0
- package/dist/service/athena/table/sim-athena-partition-filters.js +6 -5
- package/dist/service/backup/command/sim-backup-authorizer.js +5 -4
- package/dist/service/bedrock/response/sim-bedrock-declared-content.js +5 -10
- package/dist/service/cloudformation/stack/update/sim-cfn-stack-resource-changes.js +19 -10
- package/dist/service/cloudfront/cfn/response-headers-policy/sim-cfn-cf-rh-policy-security-values.js +2 -6
- package/dist/service/cognito/user-pool/trigger/sim-cognito-pre-sign-up-response.js +4 -7
- package/dist/service/dynamodb/command/transact/sim-dynamodb-transact-write.js +34 -25
- package/dist/service/dynamodb/secondary-index/sim-dynamodb-index-limits.js +5 -4
- package/dist/service/dynamodb/stream/sim-dynamodb-stream-shard-iterator.js +1 -3
- package/dist/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.js +4 -3
- package/dist/service/iam/authorize/context/sim-iam-auth-z-allow-requirement.js +6 -6
- package/dist/service/kinesis/stream/sim-kinesis-shard-iterator.js +1 -3
- package/dist/service/lambda/destination/sim-lambda-destination-record.js +7 -7
- package/dist/service/lambda/function/policy/sim-lambda-permission.js +15 -14
- package/dist/service/lambda/metric/sim-lambda-function-metrics.js +11 -9
- package/dist/service/logs/metric/sim-logs-metric-filter.js +1 -8
- package/dist/service/route53/dns/answer/sim-route53-dns-zone-finder.js +5 -4
- package/dist/service/route53/resolve/sim-r53-zone-record-finder.js +8 -6
- package/dist/service/s3/bucket/notification/sim-s3-notification-filter.js +4 -7
- package/dist/service/s3/bucket/sim-s3-bucket.d.ts +8 -0
- package/dist/service/s3/bucket/sim-s3-bucket.js +11 -0
- package/dist/service/s3/bucket/sim-s3-key-writes.d.ts +16 -0
- package/dist/service/s3/bucket/sim-s3-key-writes.js +43 -0
- package/dist/service/s3/bucket/versioning/sim-s3-bucket-versioning.js +1 -3
- package/dist/service/s3/command/complete-multipart-upload/complete-multipart-upload.command.d.ts +2 -1
- package/dist/service/s3/command/complete-multipart-upload/complete-multipart-upload.handler.js +5 -1
- package/dist/service/s3/command/copy-object/copy-object-precondition.d.ts +23 -0
- package/dist/service/s3/command/copy-object/copy-object-precondition.js +34 -0
- package/dist/service/s3/command/copy-object/copy-object.command.d.ts +3 -1
- package/dist/service/s3/command/copy-object/copy-object.handler.d.ts +4 -0
- package/dist/service/s3/command/copy-object/copy-object.handler.js +11 -1
- package/dist/service/s3/command/object/sim-s3-write-precondition.d.ts +34 -0
- package/dist/service/s3/command/object/sim-s3-write-precondition.js +47 -0
- package/dist/service/s3/command/put-object/put-object.command.d.ts +2 -1
- package/dist/service/s3/command/put-object/put-object.handler.js +5 -1
- package/dist/service/s3/error/sim-s3.error.d.ts +10 -0
- package/dist/service/s3/error/sim-s3.error.js +12 -0
- package/dist/service/s3/object/s3-object-listing.js +4 -3
- package/dist/service/s3/serve/api/sim-s3-api-input.d.ts +4 -0
- package/dist/service/s3/serve/api/sim-s3-api-input.js +10 -0
- package/dist/service/s3/serve/api/sim-s3-api-multipart-input.js +2 -0
- package/dist/service/s3/serve/api/sim-s3-api-object-input.d.ts +6 -0
- package/dist/service/s3/serve/api/sim-s3-api-object-input.js +34 -2
- package/dist/service/s3/storage/filesystem/s3-filesystem-object-keys.js +9 -8
- package/dist/service/secretsmanager/cfn/secret/sim-cfn-secrets-manager-secret-template.test-support.js +15 -23
- package/dist/service/sqs/message/sim-sqs-message.js +3 -3
- package/dist/service/stepfunctions/machine/sim-state-machine.js +4 -3
- package/dist/util/schedule/cron/sim-cron-field-bounds.js +1 -1
- package/docs/services/s3/README.md +68 -3
- package/package.json +2 -2
|
@@ -53,10 +53,10 @@ export class SimMessageLogConsole {
|
|
|
53
53
|
const medium = message.medium === "EMAIL" ? "email" : "SMS";
|
|
54
54
|
const lines = [
|
|
55
55
|
`sim Cognito ${message.userPoolId}: ${medium} to ${message.recipient} (${message.occasion})`,
|
|
56
|
+
...(message.subject === undefined
|
|
57
|
+
? []
|
|
58
|
+
: [`${bodyIndent}Subject: ${message.subject}`]),
|
|
56
59
|
];
|
|
57
|
-
if (message.subject !== undefined) {
|
|
58
|
-
lines.push(`${bodyIndent}Subject: ${message.subject}`);
|
|
59
|
-
}
|
|
60
60
|
return [...lines, ...indented(message.body)];
|
|
61
61
|
}
|
|
62
62
|
/**
|
|
@@ -31,10 +31,10 @@ export class SimRestApiDeployment {
|
|
|
31
31
|
const view = {
|
|
32
32
|
id: this.deploymentId,
|
|
33
33
|
createdDate: new Date(this.createdDate),
|
|
34
|
+
...(this.description !== undefined && {
|
|
35
|
+
description: this.description,
|
|
36
|
+
}),
|
|
34
37
|
};
|
|
35
|
-
if (this.description !== undefined) {
|
|
36
|
-
view.description = this.description;
|
|
37
|
-
}
|
|
38
38
|
return view;
|
|
39
39
|
}
|
|
40
40
|
}
|
|
@@ -50,19 +50,19 @@ export class SimRestApiMethod {
|
|
|
50
50
|
httpMethod: this.httpMethod,
|
|
51
51
|
authorizationType: this.authorizationType,
|
|
52
52
|
apiKeyRequired: this.apiKeyRequired,
|
|
53
|
+
...(this.operationName !== undefined && {
|
|
54
|
+
operationName: this.operationName,
|
|
55
|
+
}),
|
|
56
|
+
...(this.authorizerId !== undefined && {
|
|
57
|
+
authorizerId: this.authorizerId,
|
|
58
|
+
}),
|
|
59
|
+
...(!this.authorizationScopes.isEmpty && {
|
|
60
|
+
authorizationScopes: [...this.authorizationScopes.values],
|
|
61
|
+
}),
|
|
62
|
+
...(this.integration !== undefined && {
|
|
63
|
+
methodIntegration: this.integration.view(),
|
|
64
|
+
}),
|
|
53
65
|
};
|
|
54
|
-
if (this.operationName !== undefined) {
|
|
55
|
-
view.operationName = this.operationName;
|
|
56
|
-
}
|
|
57
|
-
if (this.authorizerId !== undefined) {
|
|
58
|
-
view.authorizerId = this.authorizerId;
|
|
59
|
-
}
|
|
60
|
-
if (!this.authorizationScopes.isEmpty) {
|
|
61
|
-
view.authorizationScopes = [...this.authorizationScopes.values];
|
|
62
|
-
}
|
|
63
|
-
if (this.integration !== undefined) {
|
|
64
|
-
view.methodIntegration = this.integration.view();
|
|
65
|
-
}
|
|
66
66
|
return view;
|
|
67
67
|
}
|
|
68
68
|
}
|
|
@@ -71,16 +71,18 @@ export class SimRestApiResource {
|
|
|
71
71
|
const view = {
|
|
72
72
|
id: this.resourceId,
|
|
73
73
|
path: this.path,
|
|
74
|
+
...(this.parentId !== undefined && { parentId: this.parentId }),
|
|
75
|
+
...(this.pathPart !== undefined && {
|
|
76
|
+
pathPart: this.pathPart.pathPart,
|
|
77
|
+
}),
|
|
78
|
+
...(options.methods === true &&
|
|
79
|
+
this.methods.size > 0 && {
|
|
80
|
+
resourceMethods: Object.fromEntries(this.listMethods().map((method) => [
|
|
81
|
+
method.httpMethod,
|
|
82
|
+
method.view(),
|
|
83
|
+
])),
|
|
84
|
+
}),
|
|
74
85
|
};
|
|
75
|
-
if (this.parentId !== undefined) {
|
|
76
|
-
view.parentId = this.parentId;
|
|
77
|
-
}
|
|
78
|
-
if (this.pathPart !== undefined) {
|
|
79
|
-
view.pathPart = this.pathPart.pathPart;
|
|
80
|
-
}
|
|
81
|
-
if (options.methods === true && this.methods.size > 0) {
|
|
82
|
-
view.resourceMethods = Object.fromEntries(this.listMethods().map((method) => [method.httpMethod, method.view()]));
|
|
83
|
-
}
|
|
84
86
|
return view;
|
|
85
87
|
}
|
|
86
88
|
}
|
|
@@ -11,9 +11,9 @@ export function simRestApiView(restApi) {
|
|
|
11
11
|
createdDate: new Date(restApi.createdDate),
|
|
12
12
|
rootResourceId: restApi.rootResource.resourceId,
|
|
13
13
|
disableExecuteApiEndpoint: restApi.disableExecuteApiEndpoint,
|
|
14
|
+
...(restApi.description !== undefined && {
|
|
15
|
+
description: restApi.description,
|
|
16
|
+
}),
|
|
14
17
|
};
|
|
15
|
-
if (restApi.description !== undefined) {
|
|
16
|
-
view.description = restApi.description;
|
|
17
|
-
}
|
|
18
18
|
return view;
|
|
19
19
|
}
|
|
@@ -59,22 +59,20 @@ export class SimRestApiStage {
|
|
|
59
59
|
* the stored one could change when the stage says it was created.
|
|
60
60
|
*/
|
|
61
61
|
view() {
|
|
62
|
+
const methodSettings = this.methodSettings?.view();
|
|
62
63
|
const view = {
|
|
63
64
|
stageName: this.stageName,
|
|
64
65
|
deploymentId: this.deploymentId,
|
|
65
66
|
createdDate: new Date(this.createdDate),
|
|
66
67
|
lastUpdatedDate: new Date(this.lastUpdatedDate),
|
|
68
|
+
...(Object.keys(this.variables).length > 0 && {
|
|
69
|
+
variables: { ...this.variables },
|
|
70
|
+
}),
|
|
71
|
+
...(this.description !== undefined && {
|
|
72
|
+
description: this.description,
|
|
73
|
+
}),
|
|
74
|
+
...(methodSettings !== undefined && { methodSettings }),
|
|
67
75
|
};
|
|
68
|
-
if (Object.keys(this.variables).length > 0) {
|
|
69
|
-
view.variables = { ...this.variables };
|
|
70
|
-
}
|
|
71
|
-
if (this.description !== undefined) {
|
|
72
|
-
view.description = this.description;
|
|
73
|
-
}
|
|
74
|
-
const methodSettings = this.methodSettings?.view();
|
|
75
|
-
if (methodSettings !== undefined) {
|
|
76
|
-
view.methodSettings = methodSettings;
|
|
77
|
-
}
|
|
78
76
|
return view;
|
|
79
77
|
}
|
|
80
78
|
}
|
|
@@ -44,10 +44,10 @@ export class SimHttpApiIntegration {
|
|
|
44
44
|
IntegrationType: this.integrationType,
|
|
45
45
|
IntegrationUri: this.integrationUri,
|
|
46
46
|
PayloadFormatVersion: this.payloadFormatVersion,
|
|
47
|
+
...(this.description !== undefined && {
|
|
48
|
+
Description: this.description,
|
|
49
|
+
}),
|
|
47
50
|
};
|
|
48
|
-
if (this.description !== undefined) {
|
|
49
|
-
view.Description = this.description;
|
|
50
|
-
}
|
|
51
51
|
return view;
|
|
52
52
|
}
|
|
53
53
|
}
|
|
@@ -7,12 +7,12 @@ export function simHttpApiRouteView(route) {
|
|
|
7
7
|
RouteKey: route.routeKey,
|
|
8
8
|
Target: route.target,
|
|
9
9
|
AuthorizationType: route.authorizationType,
|
|
10
|
+
...(route.authorizerId !== undefined && {
|
|
11
|
+
AuthorizerId: route.authorizerId,
|
|
12
|
+
}),
|
|
13
|
+
...(!route.authorizationScopes.isEmpty && {
|
|
14
|
+
AuthorizationScopes: [...route.authorizationScopes.values],
|
|
15
|
+
}),
|
|
10
16
|
};
|
|
11
|
-
if (route.authorizerId !== undefined) {
|
|
12
|
-
view.AuthorizerId = route.authorizerId;
|
|
13
|
-
}
|
|
14
|
-
if (!route.authorizationScopes.isEmpty) {
|
|
15
|
-
view.AuthorizationScopes = [...route.authorizationScopes.values];
|
|
16
|
-
}
|
|
17
17
|
return view;
|
|
18
18
|
}
|
|
@@ -14,9 +14,9 @@ export function simHttpApiView(parts) {
|
|
|
14
14
|
ProtocolType: parts.protocolType,
|
|
15
15
|
CreatedDate: new Date(parts.createdDate),
|
|
16
16
|
DisableExecuteApiEndpoint: parts.disableExecuteApiEndpoint,
|
|
17
|
+
...(parts.description !== undefined && {
|
|
18
|
+
Description: parts.description,
|
|
19
|
+
}),
|
|
17
20
|
};
|
|
18
|
-
if (parts.description !== undefined) {
|
|
19
|
-
view.Description = parts.description;
|
|
20
|
-
}
|
|
21
21
|
return view;
|
|
22
22
|
}
|
|
@@ -38,13 +38,14 @@ export class SimHttpApiStageRouteSettings {
|
|
|
38
38
|
* What CreateStage and GetStages report of these settings.
|
|
39
39
|
*/
|
|
40
40
|
view() {
|
|
41
|
-
const view = {
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
41
|
+
const view = {
|
|
42
|
+
...(this.#defaultRouteSettings !== undefined && {
|
|
43
|
+
DefaultRouteSettings: { ...this.#defaultRouteSettings },
|
|
44
|
+
}),
|
|
45
|
+
...(this.#routeSettings.size > 0 && {
|
|
46
|
+
RouteSettings: Object.fromEntries(this.#routeSettings),
|
|
47
|
+
}),
|
|
48
|
+
};
|
|
48
49
|
return view;
|
|
49
50
|
}
|
|
50
51
|
/**
|
|
@@ -56,16 +56,16 @@ export class SimHttpApiStage {
|
|
|
56
56
|
AutoDeploy: this.autoDeploy,
|
|
57
57
|
CreatedDate: new Date(this.createdDate),
|
|
58
58
|
...this.routeSettings?.view(),
|
|
59
|
+
...(Object.keys(this.stageVariables).length > 0 && {
|
|
60
|
+
StageVariables: { ...this.stageVariables },
|
|
61
|
+
}),
|
|
62
|
+
...(this.description !== undefined && {
|
|
63
|
+
Description: this.description,
|
|
64
|
+
}),
|
|
65
|
+
...(this.accessLogSettings !== undefined && {
|
|
66
|
+
AccessLogSettings: this.accessLogSettings.view(),
|
|
67
|
+
}),
|
|
59
68
|
};
|
|
60
|
-
if (Object.keys(this.stageVariables).length > 0) {
|
|
61
|
-
view.StageVariables = { ...this.stageVariables };
|
|
62
|
-
}
|
|
63
|
-
if (this.description !== undefined) {
|
|
64
|
-
view.Description = this.description;
|
|
65
|
-
}
|
|
66
|
-
if (this.accessLogSettings !== undefined) {
|
|
67
|
-
view.AccessLogSettings = this.accessLogSettings.view();
|
|
68
|
-
}
|
|
69
69
|
return view;
|
|
70
70
|
}
|
|
71
71
|
}
|
|
@@ -10,16 +10,16 @@ export async function simAthenaPartitionedObjects(listing, partitions) {
|
|
|
10
10
|
values: partition.values,
|
|
11
11
|
objects: await simAthenaObjectsUnder(listing, partition.prefix),
|
|
12
12
|
})));
|
|
13
|
+
const reached = listed.flatMap((partition) => partition.objects.map((object) => ({ object, values: partition.values })));
|
|
13
14
|
const seen = new Set();
|
|
14
15
|
const objects = [];
|
|
15
|
-
for (const
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
seen.add(identity);
|
|
20
|
-
objects.push({ object, values: partition.values });
|
|
21
|
-
}
|
|
16
|
+
for (const entry of reached) {
|
|
17
|
+
const identity = `${entry.object.bucket}/${entry.object.key}`;
|
|
18
|
+
if (seen.has(identity)) {
|
|
19
|
+
continue;
|
|
22
20
|
}
|
|
21
|
+
seen.add(identity);
|
|
22
|
+
objects.push(entry);
|
|
23
23
|
}
|
|
24
24
|
return objects;
|
|
25
25
|
}
|
|
@@ -87,6 +87,9 @@ const writeCompressors = {
|
|
|
87
87
|
ZSTD: (bytes) => new Uint8Array(zstdCompressSync(bytes)),
|
|
88
88
|
BROTLI: (bytes) => new Uint8Array(brotliCompressSync(bytes)),
|
|
89
89
|
DEFLATE: (bytes) => new Uint8Array(deflateSync(bytes)),
|
|
90
|
+
// A label without the compression. The reader has no LZ4 decompressor, and
|
|
91
|
+
// a file it has to turn down needs only to claim the codec.
|
|
92
|
+
LZ4_RAW: (bytes) => bytes,
|
|
90
93
|
};
|
|
91
94
|
/**
|
|
92
95
|
* Put one Parquet object under the logs Bucket.
|
|
@@ -49,11 +49,12 @@ export function simAthenaPartitionFilters(sql) {
|
|
|
49
49
|
}
|
|
50
50
|
continue;
|
|
51
51
|
}
|
|
52
|
-
if (operator?.kind
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
52
|
+
if (operator?.kind !== "word" || operator.text !== "in") {
|
|
53
|
+
continue;
|
|
54
|
+
}
|
|
55
|
+
const values = literalList(tokens, position + 2);
|
|
56
|
+
if (values !== undefined) {
|
|
57
|
+
narrow(byColumn, token.text, values);
|
|
57
58
|
}
|
|
58
59
|
}
|
|
59
60
|
for (const name of simAthenaNegatedColumns(tokens)) {
|
|
@@ -15,10 +15,11 @@ export class SimBackupAuthorizer {
|
|
|
15
15
|
resource,
|
|
16
16
|
caller: options?.caller,
|
|
17
17
|
});
|
|
18
|
-
if (decision.isDenied) {
|
|
19
|
-
|
|
20
|
-
throw new SimBackupAccessDeniedException(`User: ${caller} is not authorized to perform: ${action} on ` +
|
|
21
|
-
`resource: ${resource}`);
|
|
18
|
+
if (!decision.isDenied) {
|
|
19
|
+
return;
|
|
22
20
|
}
|
|
21
|
+
const caller = this.callerIdentifier.format(decision.caller.principal);
|
|
22
|
+
throw new SimBackupAccessDeniedException(`User: ${caller} is not authorized to perform: ${action} on ` +
|
|
23
|
+
`resource: ${resource}`);
|
|
23
24
|
}
|
|
24
25
|
}
|
|
@@ -19,16 +19,11 @@ function checkedBlock(subject, block) {
|
|
|
19
19
|
* themselves.
|
|
20
20
|
*/
|
|
21
21
|
function namedMessageMembers(declared) {
|
|
22
|
-
const named = [
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
named.push("chunks");
|
|
28
|
-
}
|
|
29
|
-
if (declared.content !== undefined) {
|
|
30
|
-
named.push("content");
|
|
31
|
-
}
|
|
22
|
+
const named = [
|
|
23
|
+
...(declared.text === undefined ? [] : ["text"]),
|
|
24
|
+
...(declared.chunks === undefined ? [] : ["chunks"]),
|
|
25
|
+
...(declared.content === undefined ? [] : ["content"]),
|
|
26
|
+
];
|
|
32
27
|
return named;
|
|
33
28
|
}
|
|
34
29
|
function requireOneMessageMember(subject, declared) {
|
|
@@ -51,22 +51,31 @@ export function simCfnStackReplacedLogicalIds(properties) {
|
|
|
51
51
|
* those.
|
|
52
52
|
*/
|
|
53
53
|
function spreadToDependents(properties) {
|
|
54
|
-
const { current, updated, replaced } = properties;
|
|
55
54
|
// Each pass replaces the Resources naming one already being replaced, until a
|
|
56
55
|
// pass finds none, which is the end of the dependency chain.
|
|
57
56
|
let spreading = true;
|
|
58
57
|
while (spreading) {
|
|
59
|
-
spreading =
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
58
|
+
spreading = spreadOnePass(properties);
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
/**
|
|
62
|
+
* Replace the Resources naming one already being replaced, saying whether there
|
|
63
|
+
* were any.
|
|
64
|
+
*/
|
|
65
|
+
function spreadOnePass(properties) {
|
|
66
|
+
const { current, updated, replaced } = properties;
|
|
67
|
+
let spreading = false;
|
|
68
|
+
for (const [logicalId, resource] of updated) {
|
|
69
|
+
const spreads = current.has(logicalId) &&
|
|
70
|
+
!replaced.has(logicalId) &&
|
|
71
|
+
resource.dependencies().some((dependency) => replaced.has(dependency));
|
|
72
|
+
if (!spreads) {
|
|
73
|
+
continue;
|
|
68
74
|
}
|
|
75
|
+
replaced.add(logicalId);
|
|
76
|
+
spreading = true;
|
|
69
77
|
}
|
|
78
|
+
return spreading;
|
|
70
79
|
}
|
|
71
80
|
/**
|
|
72
81
|
* The logical IDs whose resolved template entry differs from the deployed one.
|
package/dist/service/cloudfront/cfn/response-headers-policy/sim-cfn-cf-rh-policy-security-values.js
CHANGED
|
@@ -19,13 +19,9 @@ const referrerPolicyValue = (item, context, refuse) => requiredEnum(item, "Refer
|
|
|
19
19
|
const strictTransportSecurityValue = (item, context, refuse) => {
|
|
20
20
|
const directives = [
|
|
21
21
|
`max-age=${requiredInteger(item, "AccessControlMaxAgeSec", context, refuse)}`,
|
|
22
|
+
...(item["IncludeSubdomains"] === true ? ["includeSubDomains"] : []),
|
|
23
|
+
...(item["Preload"] === true ? ["preload"] : []),
|
|
22
24
|
];
|
|
23
|
-
if (item["IncludeSubdomains"] === true) {
|
|
24
|
-
directives.push("includeSubDomains");
|
|
25
|
-
}
|
|
26
|
-
if (item["Preload"] === true) {
|
|
27
|
-
directives.push("preload");
|
|
28
|
-
}
|
|
29
25
|
return directives.join("; ");
|
|
30
26
|
};
|
|
31
27
|
/**
|
|
@@ -37,13 +37,10 @@ export class SimCognitoPreSignUpResponse {
|
|
|
37
37
|
* The attributes the handler asked to have marked verified.
|
|
38
38
|
*/
|
|
39
39
|
get verifiedAttributeNames() {
|
|
40
|
-
const names = [
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
if (this.autoVerifyPhone) {
|
|
45
|
-
names.push("phone_number");
|
|
46
|
-
}
|
|
40
|
+
const names = [
|
|
41
|
+
...(this.autoVerifyEmail ? ["email"] : []),
|
|
42
|
+
...(this.autoVerifyPhone ? ["phone_number"] : []),
|
|
43
|
+
];
|
|
47
44
|
return names;
|
|
48
45
|
}
|
|
49
46
|
/**
|
|
@@ -32,30 +32,39 @@ export function readSimDynamoDbTransactWrite(item) {
|
|
|
32
32
|
*/
|
|
33
33
|
function readersOf(item) {
|
|
34
34
|
const { Put: put, Update: update, Delete: remove, ConditionCheck: check, } = item;
|
|
35
|
-
const readers = [
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
35
|
+
const readers = [
|
|
36
|
+
...(put === undefined
|
|
37
|
+
? []
|
|
38
|
+
: [
|
|
39
|
+
{
|
|
40
|
+
name: "Put",
|
|
41
|
+
read: () => readSimDynamoDbTransactPut(put),
|
|
42
|
+
},
|
|
43
|
+
]),
|
|
44
|
+
...(update === undefined
|
|
45
|
+
? []
|
|
46
|
+
: [
|
|
47
|
+
{
|
|
48
|
+
name: "Update",
|
|
49
|
+
read: () => readSimDynamoDbTransactUpdate(update),
|
|
50
|
+
},
|
|
51
|
+
]),
|
|
52
|
+
...(remove === undefined
|
|
53
|
+
? []
|
|
54
|
+
: [
|
|
55
|
+
{
|
|
56
|
+
name: "Delete",
|
|
57
|
+
read: () => readSimDynamoDbTransactDelete(remove),
|
|
58
|
+
},
|
|
59
|
+
]),
|
|
60
|
+
...(check === undefined
|
|
61
|
+
? []
|
|
62
|
+
: [
|
|
63
|
+
{
|
|
64
|
+
name: "ConditionCheck",
|
|
65
|
+
read: () => readSimDynamoDbTransactConditionCheck(check),
|
|
66
|
+
},
|
|
67
|
+
]),
|
|
68
|
+
];
|
|
60
69
|
return readers;
|
|
61
70
|
}
|
|
@@ -73,9 +73,10 @@ export function assertSimDynamoDbIndexAddable(elements, added) {
|
|
|
73
73
|
*/
|
|
74
74
|
export function assertSimDynamoDbProjectedAttributeCount(elements) {
|
|
75
75
|
const projected = elements.reduce((total, index) => total + index.projection.nonKeyAttributeCount, 0);
|
|
76
|
-
if (projected
|
|
77
|
-
|
|
78
|
-
throw new SimDynamoDbValidationException(`${projected.toString()} NonKeyAttributes are projected across the ` +
|
|
79
|
-
`table's indexes, and a table projects at most ${most}`);
|
|
76
|
+
if (projected <= maxProjectedAttributes) {
|
|
77
|
+
return;
|
|
80
78
|
}
|
|
79
|
+
const most = maxProjectedAttributes.toString();
|
|
80
|
+
throw new SimDynamoDbValidationException(`${projected.toString()} NonKeyAttributes are projected across the ` +
|
|
81
|
+
`table's indexes, and a table projects at most ${most}`);
|
|
81
82
|
}
|
|
@@ -29,9 +29,7 @@ function readPosition(value) {
|
|
|
29
29
|
if (typeof sequenceNumber !== "string") {
|
|
30
30
|
refuse();
|
|
31
31
|
}
|
|
32
|
-
return kind === "at"
|
|
33
|
-
? { kind: "at", sequenceNumber }
|
|
34
|
-
: { kind: "after", sequenceNumber };
|
|
32
|
+
return { kind: kind === "at" ? "at" : "after", sequenceNumber };
|
|
35
33
|
}
|
|
36
34
|
/**
|
|
37
35
|
* The opaque token a caller is handed to read on from a place.
|
|
@@ -61,10 +61,11 @@ export class SimDynamoDbTimeToLive {
|
|
|
61
61
|
this.#status = "ENABLED";
|
|
62
62
|
return;
|
|
63
63
|
}
|
|
64
|
-
if (this.#status
|
|
65
|
-
|
|
66
|
-
this.#attributeName = undefined;
|
|
64
|
+
if (this.#status !== "DISABLING") {
|
|
65
|
+
return;
|
|
67
66
|
}
|
|
67
|
+
this.#status = "DISABLED";
|
|
68
|
+
this.#attributeName = undefined;
|
|
68
69
|
}
|
|
69
70
|
/**
|
|
70
71
|
* Describe this time to live the way DynamoDB reports it.
|
|
@@ -15,13 +15,13 @@ export class SimIamAuthZAllowRequirement {
|
|
|
15
15
|
resolve(callerAccount, input) {
|
|
16
16
|
const requirements = [
|
|
17
17
|
callerAccount.allowRequirement,
|
|
18
|
+
...(input.requiresResourcePolicyAllow === true
|
|
19
|
+
? [new SimIamMandatoryResourcePolicyRequirement()]
|
|
20
|
+
: []),
|
|
21
|
+
...(input.withCallerPermissions === true
|
|
22
|
+
? [new SimIamCallerPermissionRequirement()]
|
|
23
|
+
: []),
|
|
18
24
|
];
|
|
19
|
-
if (input.requiresResourcePolicyAllow === true) {
|
|
20
|
-
requirements.push(new SimIamMandatoryResourcePolicyRequirement());
|
|
21
|
-
}
|
|
22
|
-
if (input.withCallerPermissions === true) {
|
|
23
|
-
requirements.push(new SimIamCallerPermissionRequirement());
|
|
24
|
-
}
|
|
25
25
|
return new SimIamEveryAllowRequirement(requirements);
|
|
26
26
|
}
|
|
27
27
|
}
|
|
@@ -39,9 +39,7 @@ function readPosition(value) {
|
|
|
39
39
|
if (typeof sequenceNumber !== "string") {
|
|
40
40
|
refuse();
|
|
41
41
|
}
|
|
42
|
-
return kind === "at"
|
|
43
|
-
? { kind: "at", sequenceNumber }
|
|
44
|
-
: { kind: "after", sequenceNumber };
|
|
42
|
+
return { kind: kind === "at" ? "at" : "after", sequenceNumber };
|
|
45
43
|
}
|
|
46
44
|
/**
|
|
47
45
|
* The opaque token a caller is handed to read on from a place.
|
|
@@ -13,13 +13,13 @@ export function makeSimLambdaDestinationRecord(properties) {
|
|
|
13
13
|
},
|
|
14
14
|
requestPayload: properties.requestPayload,
|
|
15
15
|
responsePayload: properties.responsePayload,
|
|
16
|
+
...(properties.ran && {
|
|
17
|
+
responseContext: {
|
|
18
|
+
statusCode: 200,
|
|
19
|
+
executedVersion: properties.executedVersion,
|
|
20
|
+
functionError: properties.functionError,
|
|
21
|
+
},
|
|
22
|
+
}),
|
|
16
23
|
};
|
|
17
|
-
if (properties.ran) {
|
|
18
|
-
record.responseContext = {
|
|
19
|
-
statusCode: 200,
|
|
20
|
-
executedVersion: properties.executedVersion,
|
|
21
|
-
functionError: properties.functionError,
|
|
22
|
-
};
|
|
23
|
-
}
|
|
24
24
|
return record;
|
|
25
25
|
}
|
|
@@ -82,20 +82,21 @@ export class SimLambdaPermission {
|
|
|
82
82
|
*/
|
|
83
83
|
condition() {
|
|
84
84
|
const stringEquals = this.stringEqualsConditions();
|
|
85
|
-
const condition = {
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
85
|
+
const condition = {
|
|
86
|
+
...(Object.keys(stringEquals).length > 0 && {
|
|
87
|
+
StringEquals: stringEquals,
|
|
88
|
+
}),
|
|
89
|
+
...(this.sourceArn !== undefined && {
|
|
90
|
+
ArnLike: {
|
|
91
|
+
[simLambdaSourceArnConditionKey]: this.sourceArn,
|
|
92
|
+
},
|
|
93
|
+
}),
|
|
94
|
+
...(this.invokedViaFunctionUrl !== undefined && {
|
|
95
|
+
Bool: {
|
|
96
|
+
[simLambdaInvokedViaFunctionUrlConditionKey]: this.invokedViaFunctionUrl,
|
|
97
|
+
},
|
|
98
|
+
}),
|
|
99
|
+
};
|
|
99
100
|
return Object.keys(condition).length === 0 ? undefined : condition;
|
|
100
101
|
}
|
|
101
102
|
stringEqualsConditions() {
|
|
@@ -69,15 +69,17 @@ function invocationData(outcome) {
|
|
|
69
69
|
value: outcome.durationMilliseconds,
|
|
70
70
|
unit: "Milliseconds",
|
|
71
71
|
},
|
|
72
|
+
...(outcome.failed
|
|
73
|
+
? [
|
|
74
|
+
{
|
|
75
|
+
namespace: simLambdaMetricNamespace,
|
|
76
|
+
metricName: "Errors",
|
|
77
|
+
dimensions,
|
|
78
|
+
value: 1,
|
|
79
|
+
unit: "Count",
|
|
80
|
+
},
|
|
81
|
+
]
|
|
82
|
+
: []),
|
|
72
83
|
];
|
|
73
|
-
if (outcome.failed) {
|
|
74
|
-
data.push({
|
|
75
|
-
namespace: simLambdaMetricNamespace,
|
|
76
|
-
metricName: "Errors",
|
|
77
|
-
dimensions,
|
|
78
|
-
value: 1,
|
|
79
|
-
unit: "Count",
|
|
80
|
-
});
|
|
81
|
-
}
|
|
82
84
|
return data;
|
|
83
85
|
}
|
|
@@ -84,12 +84,5 @@ export class SimLogsMetricFilter {
|
|
|
84
84
|
* A batch's events grouped into the aggregation periods they were taken in.
|
|
85
85
|
*/
|
|
86
86
|
function byPeriod(events) {
|
|
87
|
-
|
|
88
|
-
for (const event of events) {
|
|
89
|
-
const period = Math.floor(event.ingestionTime / periodMilliseconds) * periodMilliseconds;
|
|
90
|
-
const inPeriod = grouped.get(period) ?? [];
|
|
91
|
-
inPeriod.push(event);
|
|
92
|
-
grouped.set(period, inPeriod);
|
|
93
|
-
}
|
|
94
|
-
return grouped;
|
|
87
|
+
return Map.groupBy(events, (event) => Math.floor(event.ingestionTime / periodMilliseconds) * periodMilliseconds);
|
|
95
88
|
}
|