@kensio/yulin 1.4.1 → 1.6.0

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.d.ts

@@ -14,11 +14,10 @@ export declare class SimCfnS3BucketCreator {
     /**
      * Create a simulated Bucket, with the configurations it declares.
      *
-     * Which properties the Resource carries is checked before anything is
-     * created, so a Resource asking for something this simulation does not model
-     * fails the Stack rather than leaving a Bucket behind that is configured
-     * differently from the template. What each of them says is then checked as it
-     * is applied.
+     * Which properties the Resource carries is settled before anything is
+     * created. A property this simulation does not model is recorded against the
+     * Resource and the Bucket is created without it. What each of the remaining
+     * ones says is then checked as it is applied.
      */
     create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimS3Bucket>;
     /**

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-bucket-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAMjE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAE9B,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;;;;;;OAQG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,WAAW,CAAC,CAyBtB;IAED;;;OAGG;IACH,OAAO,CAAC,qBAAqB;CAY9B"}
+{"version":3,"file":"sim-cfn-s3-bucket-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAMjE,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAE9B,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;;;;;OAOG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,WAAW,CAAC,CA0BtB;IAED;;;OAGG;IACH,OAAO,CAAC,qBAAqB;CAY9B"}

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.js

@@ -13,17 +13,17 @@ export class SimCfnS3BucketCreator {
     /**
      * Create a simulated Bucket, with the configurations it declares.
      *
-     * Which properties the Resource carries is checked before anything is
-     * created, so a Resource asking for something this simulation does not model
-     * fails the Stack rather than leaving a Bucket behind that is configured
-     * differently from the template. What each of them says is then checked as it
-     * is applied.
+     * Which properties the Resource carries is settled before anything is
+     * created. A property this simulation does not model is recorded against the
+     * Resource and the Bucket is created without it. What each of the remaining
+     * ones says is then checked as it is applied.
      */
     async create(resource, properties) {
         new SimCfnS3BucketPropertyRules({
             logicalId: resource.logicalId,
             properties,
-        }).assertSimulated();
+            ignorer: resource,
+        }).apply();
         const bucketName = this.bucketNameForResource(resource, properties);
         validateS3BucketName(bucketName);
         await this.simS3.createBucket({ input: { Bucket: bucketName } });

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-bucket-creator.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAMpF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAQ;IAE9B,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,IAAI,2BAA2B,CAAC;YAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU;SACX,CAAC,CAAC,eAAe,EAAE,CAAC;QAErB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,gCAAgC,CAC5D,CAAC;QAEF,MAAM,IAAI,0BAA0B,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ;YACR,UAAU;YACV,UAAU;SACX,CAAC,CAAC,SAAS,EAAE,CAAC;QAEf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-s3-bucket-creator.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-creator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAMpF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAQ;IAE9B,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,IAAI,2BAA2B,CAAC;YAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU;YACV,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEX,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CACX,MAAM,EACN,iBAAiB,UAAU,gCAAgC,CAC5D,CAAC;QAEF,MAAM,IAAI,0BAA0B,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ;YACR,UAAU;YACV,UAAU;SACX,CAAC,CAAC,SAAS,EAAE,CAAC;QAEf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,QAAwB,EACxB,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The AWS::S3::Bucket properties this simulation acts on.
+ */
+export declare const simulatedPropertyNames: ReadonlySet<string>;
+/**
+ * Real AWS::S3::Bucket properties this simulation reads and does nothing with.
+ *
+ * Nothing this simulator models can tell the difference. There is no simulated
+ * KMS and Object bytes are stored as they arrive, so an encrypted Bucket and an
+ * unencrypted one answer every simulated command identically, and no simulated
+ * service reads a Bucket tag. So these are not recorded as ignored either: a
+ * report of differences that make no difference is one nobody can read.
+ */
+export declare const inertPropertyNames: ReadonlySet<string>;
+/**
+ * Real AWS::S3::Bucket properties this simulation does not model, with what
+ * each of them would have changed.
+ *
+ * The Bucket is created without them and each one is recorded against the
+ * Resource. A versioned Bucket, for instance, answers a delete with a delete
+ * marker and an `ObjectRemoved:DeleteMarkerCreated` event, where this simulator
+ * removes the Object and raises `ObjectRemoved:Delete`, so a test written
+ * against versioning needs to find out that it was never configured.
+ */
+export declare const unsimulatedPropertyReasons: ReadonlyMap<string, string>;
+//# sourceMappingURL=sim-cfn-s3-bucket-property-names.d.ts.map

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-s3-bucket-property-names.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAKrD,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAGjD,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CA2CjE,CAAC"}

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.js

@@ -0,0 +1,77 @@
+/**
+ * The AWS::S3::Bucket properties this simulation acts on.
+ */
+export const simulatedPropertyNames = new Set([
+    "BucketName",
+    "NotificationConfiguration",
+    "PublicAccessBlockConfiguration",
+    "WebsiteConfiguration",
+]);
+/**
+ * Real AWS::S3::Bucket properties this simulation reads and does nothing with.
+ *
+ * Nothing this simulator models can tell the difference. There is no simulated
+ * KMS and Object bytes are stored as they arrive, so an encrypted Bucket and an
+ * unencrypted one answer every simulated command identically, and no simulated
+ * service reads a Bucket tag. So these are not recorded as ignored either: a
+ * report of differences that make no difference is one nobody can read.
+ */
+export const inertPropertyNames = new Set([
+    "BucketEncryption",
+    "Tags",
+]);
+/**
+ * Real AWS::S3::Bucket properties this simulation does not model, with what
+ * each of them would have changed.
+ *
+ * The Bucket is created without them and each one is recorded against the
+ * Resource. A versioned Bucket, for instance, answers a delete with a delete
+ * marker and an `ObjectRemoved:DeleteMarkerCreated` event, where this simulator
+ * removes the Object and raises `ObjectRemoved:Delete`, so a test written
+ * against versioning needs to find out that it was never configured.
+ */
+export const unsimulatedPropertyReasons = new Map([
+    ["AbacStatus", "attribute-based access control is not simulated"],
+    ["AccelerateConfiguration", "transfer acceleration is not simulated"],
+    [
+        "AccessControl",
+        "canned Bucket ACLs are not simulated, and simulated S3 authorizes " +
+            "through IAM and the Bucket policy instead",
+    ],
+    ["AnalyticsConfigurations", "storage class analytics is not simulated"],
+    ["BucketNamePrefix", "generated Bucket names are not simulated"],
+    ["BucketNamespace", "Bucket namespaces are not simulated"],
+    [
+        "CorsConfiguration",
+        "simulated S3 does not answer preflight requests or return CORS headers",
+    ],
+    [
+        "IntelligentTieringConfigurations",
+        "storage classes are not simulated, so nothing transitions between them",
+    ],
+    ["InventoryConfigurations", "Bucket inventory reports are not simulated"],
+    [
+        "LifecycleConfiguration",
+        "simulated S3 does not expire or transition Objects on a schedule",
+    ],
+    ["LoggingConfiguration", "server access logging is not simulated"],
+    ["MetadataConfiguration", "Bucket metadata tables are not simulated"],
+    ["MetadataTableConfiguration", "Bucket metadata tables are not simulated"],
+    ["MetricsConfigurations", "CloudWatch request metrics are not simulated"],
+    [
+        "ObjectLockConfiguration",
+        "Object Lock is not simulated, so a retained Object can still be deleted",
+    ],
+    [
+        "ObjectLockEnabled",
+        "Object Lock is not simulated, so a retained Object can still be deleted",
+    ],
+    ["OwnershipControls", "Object ownership and ACLs are not simulated"],
+    ["ReplicationConfiguration", "Bucket replication is not simulated"],
+    [
+        "VersioningConfiguration",
+        "Object versions are not simulated, so a delete removes the Object and " +
+            "raises ObjectRemoved:Delete rather than creating a delete marker",
+    ],
+]);
+//# sourceMappingURL=sim-cfn-s3-bucket-property-names.js.map

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-s3-bucket-property-names.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-names.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,YAAY;IACZ,2BAA2B;IAC3B,gCAAgC;IAChC,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAgC,IAAI,GAAG,CAAC;IAC7E,CAAC,YAAY,EAAE,iDAAiD,CAAC;IACjE,CAAC,yBAAyB,EAAE,wCAAwC,CAAC;IACrE;QACE,eAAe;QACf,oEAAoE;YAClE,2CAA2C;KAC9C;IACD,CAAC,yBAAyB,EAAE,0CAA0C,CAAC;IACvE,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;IAChE,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;IAC1D;QACE,mBAAmB;QACnB,wEAAwE;KACzE;IACD;QACE,kCAAkC;QAClC,wEAAwE;KACzE;IACD,CAAC,yBAAyB,EAAE,4CAA4C,CAAC;IACzE;QACE,wBAAwB;QACxB,kEAAkE;KACnE;IACD,CAAC,sBAAsB,EAAE,wCAAwC,CAAC;IAClE,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IACrE,CAAC,4BAA4B,EAAE,0CAA0C,CAAC;IAC1E,CAAC,uBAAuB,EAAE,8CAA8C,CAAC;IACzE;QACE,yBAAyB;QACzB,yEAAyE;KAC1E;IACD;QACE,mBAAmB;QACnB,yEAAyE;KAC1E;IACD,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;IACpE,CAAC,0BAA0B,EAAE,qCAAqC,CAAC;IACnE;QACE,yBAAyB;QACzB,wEAAwE;YACtE,kEAAkE;KACrE;CACF,CAAC,CAAC"}

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.d.ts

@@ -1,23 +1,34 @@
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCfnPropertyIgnorer } from "../../../cloudformation/resource/ignore/sim-cfn-ignored-property.type.js";
 interface SimCfnS3BucketPropertyRulesProperties {
     readonly logicalId: string;
     readonly properties: SimCfnTemplateValueRecord;
+    readonly ignorer: SimCfnPropertyIgnorer;
 }
 /**
- * Which AWS::S3::Bucket properties simulated S3 can act on.
+ * What simulated S3 does with each AWS::S3::Bucket property it is handed.
  *
- * Anything else fails the Resource. Being stricter than CloudFormation shows up
- * as a puzzling deployment failure here; being looser shows up as a Bucket
- * behaving one way in a test and another way on AWS.
+ * Simulated CloudFormation deploys what it can, so a property this simulation
+ * cannot act on does not stop the Bucket being created. It is left out and
+ * recorded against the Resource, where a test can find it. Refusing is kept for
+ * the one case where there is nothing coherent to create: a BucketName that is
+ * not a name.
+ *
+ * A property this simulation has never heard of is treated the same way. It may
+ * be a typo, or a property AWS added since this list was written, and a Bucket
+ * that deploys with the unknown name recorded is more useful than a stack that
+ * fails over either.
  */
 export declare class SimCfnS3BucketPropertyRules {
     private readonly logicalId;
     private readonly properties;
+    private readonly ignorer;
     constructor(properties: SimCfnS3BucketPropertyRulesProperties);
     /**
-     * Refuse everything about this Resource that is not simulated.
+     * Record everything about this Resource that is not simulated, refusing only
+     * what leaves nothing to create.
      */
-    assertSimulated(): void;
+    apply(): void;
     /**
      * Refuse a BucketName that is not a name.
      *
@@ -27,7 +38,7 @@ export declare class SimCfnS3BucketPropertyRules {
      * template refers to.
      */
     private refuseUnusableBucketName;
-    private assertSimulatedProperty;
+    private applyToProperty;
 }
 export {};
 //# sourceMappingURL=sim-cfn-s3-bucket-property-rules.d.ts.map

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-bucket-property-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AA4DlH,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IAEvD,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;OAEG;IACH,eAAe,IAAI,IAAI,CAMtB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,uBAAuB;CAkBhC"}
+{"version":3,"file":"sim-cfn-s3-bucket-property-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0EAA0E,CAAC;AAQtH,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAEhD,YAAY,UAAU,EAAE,qCAAqC,EAI5D;IAED;;;OAGG;IACH,KAAK,IAAI,IAAI,CAMZ;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,eAAe;CAuBxB"}

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.js

@@ -1,79 +1,36 @@
 import { s3BucketResourceError } from "./error/sim-cfn-s3-bucket-error.js";
+import { inertPropertyNames, simulatedPropertyNames, unsimulatedPropertyReasons, } from "./sim-cfn-s3-bucket-property-names.js";
 /**
- * The AWS::S3::Bucket properties this simulation acts on.
- */
-const simulatedPropertyNames = new Set([
-    "BucketName",
-    "NotificationConfiguration",
-    "PublicAccessBlockConfiguration",
-    "WebsiteConfiguration",
-]);
-/**
- * Real AWS::S3::Bucket properties this simulation reads and does nothing with.
- *
- * Nothing this simulator models can tell the difference. There is no simulated
- * KMS and Object bytes are stored as they arrive, so an encrypted Bucket and an
- * unencrypted one answer every simulated command identically, and no simulated
- * service reads a Bucket tag. Both are on almost every Bucket CDK synthesizes,
- * so refusing them would leave a CDK app unable to deploy over a difference no
- * test could observe.
- */
-const inertPropertyNames = new Set([
-    "BucketEncryption",
-    "Tags",
-]);
-/**
- * Real AWS::S3::Bucket properties this simulation does not model.
+ * What simulated S3 does with each AWS::S3::Bucket property it is handed.
  *
- * Each of these changes what a simulated command answers on real AWS. A
- * versioned Bucket answers a delete with a delete marker and an
- * `ObjectRemoved:DeleteMarkerCreated` event, where this simulator removes the
- * Object and raises `ObjectRemoved:Delete`. So they fail the Resource rather
- * than being dropped on the way through, which would leave a Bucket that looks
- * configured to the template and behaves as though it were not.
- */
-const unsimulatedPropertyNames = new Set([
-    "AbacStatus",
-    "AccelerateConfiguration",
-    "AccessControl",
-    "AnalyticsConfigurations",
-    "BucketNamePrefix",
-    "BucketNamespace",
-    "CorsConfiguration",
-    "IntelligentTieringConfigurations",
-    "InventoryConfigurations",
-    "LifecycleConfiguration",
-    "LoggingConfiguration",
-    "MetadataConfiguration",
-    "MetadataTableConfiguration",
-    "MetricsConfigurations",
-    "ObjectLockConfiguration",
-    "ObjectLockEnabled",
-    "OwnershipControls",
-    "ReplicationConfiguration",
-    "VersioningConfiguration",
-]);
-/**
- * Which AWS::S3::Bucket properties simulated S3 can act on.
+ * Simulated CloudFormation deploys what it can, so a property this simulation
+ * cannot act on does not stop the Bucket being created. It is left out and
+ * recorded against the Resource, where a test can find it. Refusing is kept for
+ * the one case where there is nothing coherent to create: a BucketName that is
+ * not a name.
  *
- * Anything else fails the Resource. Being stricter than CloudFormation shows up
- * as a puzzling deployment failure here; being looser shows up as a Bucket
- * behaving one way in a test and another way on AWS.
+ * A property this simulation has never heard of is treated the same way. It may
+ * be a typo, or a property AWS added since this list was written, and a Bucket
+ * that deploys with the unknown name recorded is more useful than a stack that
+ * fails over either.
  */
 export class SimCfnS3BucketPropertyRules {
     logicalId;
     properties;
+    ignorer;
     constructor(properties) {
         this.logicalId = properties.logicalId;
         this.properties = properties.properties;
+        this.ignorer = properties.ignorer;
     }
     /**
-     * Refuse everything about this Resource that is not simulated.
+     * Record everything about this Resource that is not simulated, refusing only
+     * what leaves nothing to create.
      */
-    assertSimulated() {
+    apply() {
         this.refuseUnusableBucketName();
         for (const name of Object.keys(this.properties)) {
-            this.assertSimulatedProperty(name);
+            this.applyToProperty(name);
         }
     }
     /**
@@ -91,15 +48,18 @@ export class SimCfnS3BucketPropertyRules {
         }
         throw s3BucketResourceError(this.logicalId, "BucketName must be a Bucket name string");
     }
-    assertSimulatedProperty(name) {
+    applyToProperty(name) {
         if (simulatedPropertyNames.has(name) || inertPropertyNames.has(name)) {
             return;
         }
-        if (unsimulatedPropertyNames.has(name)) {
-            throw s3BucketResourceError(this.logicalId, `${name} is a real AWS::S3::Bucket property that simulated S3 does ` +
-                `not simulate, so it is refused rather than ignored`);
+        const unsimulatedReason = unsimulatedPropertyReasons.get(name);
+        if (unsimulatedReason !== undefined) {
+            this.ignorer.ignoreProperty(name, `${name} is a real AWS::S3::Bucket property simulated S3 does not ` +
+                `act on: ${unsimulatedReason}`);
+            return;
         }
-        throw s3BucketResourceError(this.logicalId, `${name} is not an AWS::S3::Bucket property`);
+        this.ignorer.ignoreProperty(name, `${name} is not a property simulated S3 knows about, so the Bucket is ` +
+            `created without it`);
     }
 }
 //# sourceMappingURL=sim-cfn-s3-bucket-property-rules.js.map

package/dist/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-s3-bucket-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E;;GAEG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,YAAY;IACZ,2BAA2B;IAC3B,gCAAgC;IAChC,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,YAAY;IACZ,yBAAyB;IACzB,eAAe;IACf,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,kCAAkC;IAClC,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,uBAAuB;IACvB,4BAA4B;IAC5B,uBAAuB;IACvB,yBAAyB;IACzB,mBAAmB;IACnB,mBAAmB;IACnB,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC,CAAC;AAOH;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACrB,SAAS,CAAS;IAClB,UAAU,CAA4B;IAEvD,YAAY,UAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,qBAAqB,CACzB,IAAI,CAAC,SAAS,EACd,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,qBAAqB,CACzB,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,6DAA6D;gBAClE,oDAAoD,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,qBAAqB,CACzB,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,qCAAqC,CAC7C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-s3-bucket-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/s3/cfn/bucket/sim-cfn-s3-bucket-property-rules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAQ/C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,2BAA2B;IACrB,SAAS,CAAS;IAClB,UAAU,CAA4B;IACtC,OAAO,CAAwB;IAEhD,YAAY,UAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,qBAAqB,CACzB,IAAI,CAAC,SAAS,EACd,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,IAAI,4DAA4D;gBACjE,WAAW,iBAAiB,EAAE,CACjC,CAAC;YAEF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,IAAI,gEAAgE;YACrE,oBAAoB,CACvB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/bucket/sim-s3-bucket-commands.d.ts

@@ -21,6 +21,10 @@ export declare class SimS3BucketCommands {
      * Create a Bucket in this scope and register it globally.
      */
     create(command: simS3Commands.SimCreateBucketCommand, options?: SimS3RequestOptions): Promise<simS3Commands.SimCreateBucketCommandOutput>;
+    /**
+     * Delete a Bucket from this scope and release its name globally.
+     */
+    delete(command: simS3Commands.SimDeleteBucketCommand, options?: SimS3RequestOptions): Promise<simS3Commands.SimDeleteBucketCommandOutput>;
     /**
      * List the Buckets this scope owns.
      */

package/dist/service/s3/command/bucket/sim-s3-bucket-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-bucket-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/bucket/sim-s3-bucket-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAI3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,KAAK,KAAK,aAAa,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,6BAA8B,SAAQ,uBAAuB;IACrE,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAE3D,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAKrD;IAED;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAKpD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,aAAa,CAAC,0BAA0B,EACjD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAKzD;CACF"}
+{"version":3,"file":"sim-s3-bucket-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/bucket/sim-s3-bucket-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAK3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,KAAK,KAAK,aAAa,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,UAAU,6BAA8B,SAAQ,uBAAuB;IACrE,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAE3D,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAKrD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,aAAa,CAAC,sBAAsB,EAC7C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAKrD;IAED;;OAEG;IACG,IAAI,CACR,OAAO,EAAE,aAAa,CAAC,qBAAqB,EAC5C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAKpD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,aAAa,CAAC,0BAA0B,EACjD,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAKzD;CACF"}

package/dist/service/s3/command/bucket/sim-s3-bucket-commands.js

@@ -1,4 +1,5 @@
 import { CreateBucketCommandHandler } from "../create-bucket/create-bucket.handler.js";
+import { DeleteBucketCommandHandler } from "../delete-bucket/delete-bucket.handler.js";
 import { ListBucketsCommandHandler } from "../list-buckets/list-buckets.handler.js";
 import { PutBucketWebsiteCommandHandler } from "../put-bucket-website/put-bucket-website.handler.js";
 /**
@@ -19,6 +20,12 @@ export class SimS3BucketCommands {
     async create(command, options) {
         return await new CreateBucketCommandHandler(this.properties).handle(command, options);
     }
+    /**
+     * Delete a Bucket from this scope and release its name globally.
+     */
+    async delete(command, options) {
+        return await new DeleteBucketCommandHandler(this.properties).handle(command, options);
+    }
     /**
      * List the Buckets this scope owns.
      */

package/dist/service/s3/command/bucket/sim-s3-bucket-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-bucket-commands.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/bucket/sim-s3-bucket-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qDAAqD,CAAC;AAUrG;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAgC;IAE3D,YAAY,UAAyC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACjE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,OAA4C,EAC5C,OAA6B;QAE7B,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAiD,EACjD,OAA6B;QAE7B,OAAO,MAAM,IAAI,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-s3-bucket-commands.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/bucket/sim-s3-bucket-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qDAAqD,CAAC;AAUrG;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAgC;IAE3D,YAAY,UAAyC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACjE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACjE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,OAA4C,EAC5C,OAA6B;QAE7B,OAAO,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAiD,EACjD,OAA6B;QAE7B,OAAO,MAAM,IAAI,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/delete-bucket/delete-bucket-authorizer.d.ts

@@ -0,0 +1,24 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+interface DeleteBucketAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to an S3 DeleteBucket request.
+ *
+ * Real S3 governs removing a Bucket with s3:DeleteBucket, which is a distinct
+ * action from the s3:CreateBucket that made it. The Bucket policy is consulted
+ * as well, because a Bucket policy can grant Bucket administration actions.
+ */
+export declare class DeleteBucketAuthorizer {
+    private static readonly action;
+    private readonly iam;
+    constructor(properties: DeleteBucketAuthorizerProperties);
+    /**
+     * Ensure the caller may delete the Bucket.
+     */
+    authorize(bucket: SimS3Bucket, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=delete-bucket-authorizer.d.ts.map

package/dist/service/s3/command/delete-bucket/delete-bucket-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket/delete-bucket-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAEnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAgB1D;CACF"}

package/dist/service/s3/command/delete-bucket/delete-bucket-authorizer.js

@@ -0,0 +1,37 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+/**
+ * Applies IAM authorization to an S3 DeleteBucket request.
+ *
+ * Real S3 governs removing a Bucket with s3:DeleteBucket, which is a distinct
+ * action from the s3:CreateBucket that made it. The Bucket policy is consulted
+ * as well, because a Bucket policy can grant Bucket administration actions.
+ */
+export class DeleteBucketAuthorizer {
+    static action = "s3:DeleteBucket";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may delete the Bucket.
+     */
+    authorize(bucket, caller) {
+        const resource = simS3BucketArn(bucket.bucketName);
+        const decision = this.iam.authorize({
+            action: DeleteBucketAuthorizer.action,
+            resource,
+            caller,
+            resourcePolicies: simS3BucketResourcePolicies(bucket),
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: DeleteBucketAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=delete-bucket-authorizer.js.map

package/dist/service/s3/command/delete-bucket/delete-bucket-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket/delete-bucket-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAU,MAAM,GAAG,iBAAiB,CAAC;IAElC,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,sBAAsB,CAAC,MAAM;YACrC,QAAQ;YACR,MAAM;YACN,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,sBAAsB,CAAC,MAAM;gBACrC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/command/delete-bucket/delete-bucket.command.d.ts

@@ -0,0 +1,23 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim S3 DeleteBucket command.
+ */
+export interface SimDeleteBucketCommand {
+    readonly input: SimDeleteBucketCommandInput;
+}
+/**
+ * Minimal structural sim S3 DeleteBucket input.
+ */
+export interface SimDeleteBucketCommandInput {
+    readonly Bucket?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 DeleteBucket output.
+ *
+ * Real S3 answers a successful DeleteBucket with 204 No Content, so there is
+ * nothing in the body to model.
+ */
+export interface SimDeleteBucketCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-bucket.command.d.ts.map

package/dist/service/s3/command/delete-bucket/delete-bucket.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket/delete-bucket.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/s3/command/delete-bucket/delete-bucket.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-bucket.command.js.map

package/dist/service/s3/command/delete-bucket/delete-bucket.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket.command.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket/delete-bucket.command.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/delete-bucket/delete-bucket.handler.d.ts

@@ -0,0 +1,43 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3GlobalRegistry } from "../../sim-s3-global-registry.js";
+import type { SimDeleteBucketCommand, SimDeleteBucketCommandOutput } from "./delete-bucket.command.js";
+interface DeleteBucketCommandHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly s3GlobalRegistry: SimS3GlobalRegistry;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeleteBucketCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated S3 DeleteBucketCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/DeleteBucketCommand/
+ */
+export declare class DeleteBucketCommandHandler implements CommandHandler<SimDeleteBucketCommand, SimDeleteBucketCommandOutput> {
+    private readonly buckets;
+    private readonly s3GlobalRegistry;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeleteBucketCommandHandlerProperties);
+    /**
+     * Authorize and delete a Bucket.
+     *
+     * Real S3 only deletes an empty Bucket, and answers BucketNotEmpty otherwise
+     * rather than removing the Objects for the caller. That refusal is the reason
+     * a CloudFormation Stack holding a Bucket with Objects in it fails to delete,
+     * so it is worth keeping here.
+     *
+     * The Bucket name is released globally as well as in this scope, because S3
+     * Bucket names are globally unique and a deleted name can be claimed again.
+     */
+    handle(command: SimDeleteBucketCommand, options?: DeleteBucketCommandHandlerOptions): Promise<SimDeleteBucketCommandOutput>;
+    private assertEmpty;
+}
+export {};
+//# sourceMappingURL=delete-bucket.handler.d.ts.map

package/dist/service/s3/command/delete-bucket/delete-bucket.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-bucket.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/delete-bucket/delete-bucket.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAG3E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,oCAAoC,EAY3D;IAED;;;;;;;;;;OAUG;IACG,MAAM,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,CAiBvC;YAEa,WAAW;CAS1B"}

package/dist/service/s3/command/delete-bucket/delete-bucket.handler.js

@@ -0,0 +1,55 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3BucketNotEmpty } from "../../error/sim-s3.error.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+import { DeleteBucketAuthorizer } from "./delete-bucket-authorizer.js";
+/**
+ * Simulated S3 DeleteBucketCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/DeleteBucketCommand/
+ */
+export class DeleteBucketCommandHandler {
+    buckets;
+    s3GlobalRegistry;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, s3GlobalRegistry, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.s3GlobalRegistry = s3GlobalRegistry;
+        this.authorizer = new DeleteBucketAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and delete a Bucket.
+     *
+     * Real S3 only deletes an empty Bucket, and answers BucketNotEmpty otherwise
+     * rather than removing the Objects for the caller. That refusal is the reason
+     * a CloudFormation Stack holding a Bucket with Objects in it fails to delete,
+     * so it is worth keeping here.
+     *
+     * The Bucket name is released globally as well as in this scope, because S3
+     * Bucket names are globally unique and a deleted name can be claimed again.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "DeleteBucketCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorize(bucket, options?.caller);
+        await this.assertEmpty(bucket);
+        this.buckets.delete(bucketName);
+        this.s3GlobalRegistry.deregisterBucket(bucketName);
+        return {
+            $metadata: {},
+        };
+    }
+    async assertEmpty(bucket) {
+        const objects = await bucket.listObjects();
+        if (objects.length > 0) {
+            throw new SimS3BucketNotEmpty(`S3 Bucket ${bucket.bucketName} holds ${String(objects.length)} Objects`);
+        }
+    }
+}
+//# sourceMappingURL=delete-bucket.handler.js.map