@kensio/yulin 1.5.0 → 1.6.1

package/dist/service/cloudfront/command/delete-distribution/delete-distribution-authorizer.js

@@ -0,0 +1,40 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront DeleteDistribution request.
+ *
+ * DeleteDistribution authorizes against the specific Distribution ARN, so a
+ * policy can grant deleting one Distribution without granting deleting every
+ * Distribution in the Account.
+ *
+ * Authorization happens before the Distribution map is read, so an
+ * unauthorized caller gets AccessDenied whether the Distribution exists or
+ * not.
+ */
+export class DeleteDistributionAuthorizer {
+    static action = "cloudfront:DeleteDistribution";
+    accountId;
+    iam;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may delete the named CloudFront Distribution.
+     */
+    authorize(distributionId, caller) {
+        const resource = `arn:aws:cloudfront::${this.accountId}:distribution/${distributionId}`;
+        const decision = this.iam.authorize({
+            action: DeleteDistributionAuthorizer.action,
+            resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: DeleteDistributionAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=delete-distribution-authorizer.js.map

package/dist/service/cloudfront/command/delete-distribution/delete-distribution-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-distribution-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-distribution/delete-distribution-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQzE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,+BAA+B,CAAC;IAEhD,SAAS,CAAkB;IAC3B,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CACP,cAAoD,EACpD,MAAqB;QAErB,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,SAAS,iBAAiB,cAAc,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.command.d.ts

@@ -0,0 +1,27 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim CloudFront DeleteDistribution command.
+ */
+export interface SimDeleteDistributionCommand {
+    readonly input: SimDeleteDistributionCommandInput;
+}
+/**
+ * Minimal structural sim CloudFront DeleteDistribution input.
+ *
+ * `IfMatch` carries the ETag from the preceding GetDistribution. It is
+ * accepted and not checked here, so neither `PreconditionFailed` nor
+ * `InvalidIfMatchVersion` can come back. See the handler for why.
+ */
+export interface SimDeleteDistributionCommandInput {
+    readonly Id?: string | undefined;
+    readonly IfMatch?: string | undefined;
+}
+/**
+ * Minimal structural sim CloudFront DeleteDistribution output.
+ *
+ * CloudFront answers a deletion with nothing but the response metadata.
+ */
+export interface SimDeleteDistributionCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-distribution.command.d.ts.map

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-distribution/delete-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-distribution.command.js.map

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-distribution.command.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-distribution/delete-distribution.command.ts"],"names":[],"mappings":""}

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.handler.d.ts

@@ -0,0 +1,47 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "../../distribution/sim-cloudfront-distribution.js";
+import type { SimCloudFrontRegistry } from "../../registry/sim-cloud-front-registry.js";
+import type { SimDeleteDistributionCommand, SimDeleteDistributionCommandOutput } from "./delete-distribution.command.js";
+interface DeleteDistributionCommandHandlerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly distributions: Map<SimCloudFrontDistributionId, SimCloudFrontDistribution>;
+    readonly cloudFrontRegistry: SimCloudFrontRegistry;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeleteDistributionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * CloudFront DeleteDistributionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DeleteDistributionCommand/
+ */
+export declare class DeleteDistributionCommandHandler implements CommandHandler<SimDeleteDistributionCommand, SimDeleteDistributionCommandOutput> {
+    private readonly distributions;
+    private readonly cloudFrontRegistry;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeleteDistributionCommandHandlerProperties);
+    /**
+     * Handle deleting a CloudFront Distribution.
+     *
+     * The Distribution has to be disabled first, as it does in AWS, so a Stack
+     * teardown that forgets fails here the way it fails there.
+     *
+     * Real CloudFront also takes an `IfMatch` ETag from the preceding read and
+     * answers PreconditionFailed or InvalidIfMatchVersion when it is wrong or
+     * missing. That is not modelled: `IfMatch` is accepted and ignored. Nothing
+     * else in this simulator versions a resource, and a stale ETag is a retry
+     * rather than a design mistake, so the concept would cost every CloudFront
+     * command for very little. A test expecting the ETag refusal will not get
+     * it.
+     */
+    handle(command: SimDeleteDistributionCommand, options?: DeleteDistributionCommandHandlerOptions): Promise<SimDeleteDistributionCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-distribution.handler.d.ts.map

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-distribution/delete-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAE1C,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAajE;IAED;;;;;;;;;;;;;OAaG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.handler.js

@@ -0,0 +1,53 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimCloudFrontNoSuchDistribution } from "../../error/sim-cloudfront.error.js";
+import { DeleteDistributionAuthorizer } from "./delete-distribution-authorizer.js";
+/**
+ * CloudFront DeleteDistributionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DeleteDistributionCommand/
+ */
+export class DeleteDistributionCommandHandler {
+    distributions;
+    cloudFrontRegistry;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { accountId, distributions, cloudFrontRegistry, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.distributions = distributions;
+        this.cloudFrontRegistry = cloudFrontRegistry;
+        this.authorizer = new DeleteDistributionAuthorizer({ accountId, iam });
+        this.background = background;
+    }
+    /**
+     * Handle deleting a CloudFront Distribution.
+     *
+     * The Distribution has to be disabled first, as it does in AWS, so a Stack
+     * teardown that forgets fails here the way it fails there.
+     *
+     * Real CloudFront also takes an `IfMatch` ETag from the preceding read and
+     * answers PreconditionFailed or InvalidIfMatchVersion when it is wrong or
+     * missing. That is not modelled: `IfMatch` is accepted and ignored. Nothing
+     * else in this simulator versions a resource, and a stale ETag is a retry
+     * rather than a design mistake, so the concept would cost every CloudFront
+     * command for very little. A test expecting the ETag refusal will not get
+     * it.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Id, "DeleteDistributionCommand.input.Id");
+        const distributionId = command.input.Id;
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        this.authorizer.authorize(distributionId, options?.caller);
+        const distribution = this.distributions.get(distributionId);
+        if (distribution === undefined) {
+            throw new SimCloudFrontNoSuchDistribution(`No sim CloudFront Distribution with ID ${distributionId}`);
+        }
+        distribution.assertDeletable();
+        this.distributions.delete(distributionId);
+        this.cloudFrontRegistry.deregisterDistribution(distributionId);
+        return { $metadata: { httpStatusCode: 204 } };
+    }
+}
+//# sourceMappingURL=delete-distribution.handler.js.map

package/dist/service/cloudfront/command/delete-distribution/delete-distribution.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-distribution/delete-distribution.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAKhE,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAqBnF;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,aAAa,CAG5B;IACe,kBAAkB,CAAwB;IAC1C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,MAAM,EACJ,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,EAAiC,CAAC;QAEvE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,0CAA0C,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,eAAe,EAAE,CAAC;QAE/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAE/D,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/service/cloudfront/command/delete-function/delete-function-authorizer.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontFunctionName } from "../../cff/sim-cloudfront-function.js";
+interface DeleteFunctionAuthorizerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a CloudFront DeleteFunction request.
+ *
+ * Authorization is against the Function ARN, and happens before the Function
+ * map is read, so an unauthorized caller gets AccessDenied whether the
+ * Function exists or not.
+ */
+export declare class DeleteFunctionAuthorizer {
+    private static readonly action;
+    private readonly accountId;
+    private readonly iam;
+    constructor(properties: DeleteFunctionAuthorizerProperties);
+    /**
+     * Ensure the caller may delete the named CloudFront Function.
+     */
+    authorize(functionName: SimCloudFrontFunctionName | string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=delete-function-authorizer.d.ts.map

package/dist/service/cloudfront/command/delete-function/delete-function-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEtF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAE7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,GAAG,MAAM,EAChD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAeN;CACF"}

package/dist/service/cloudfront/command/delete-function/delete-function-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront DeleteFunction request.
+ *
+ * Authorization is against the Function ARN, and happens before the Function
+ * map is read, so an unauthorized caller gets AccessDenied whether the
+ * Function exists or not.
+ */
+export class DeleteFunctionAuthorizer {
+    static action = "cloudfront:DeleteFunction";
+    accountId;
+    iam;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may delete the named CloudFront Function.
+     */
+    authorize(functionName, caller) {
+        const resource = `arn:aws:cloudfront::${this.accountId}:function/${functionName}`;
+        const decision = this.iam.authorize({
+            action: DeleteFunctionAuthorizer.action,
+            resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: DeleteFunctionAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=delete-function-authorizer.js.map

package/dist/service/cloudfront/command/delete-function/delete-function-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQzE;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAC3B,MAAM,CAAU,MAAM,GAAG,2BAA2B,CAAC;IAE5C,SAAS,CAAkB;IAC3B,GAAG,CAA0B;IAE9C,YAAY,UAA8C;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAgD,EAChD,MAAqB;QAErB,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,SAAS,aAAa,YAAY,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,wBAAwB,CAAC,MAAM;gBACvC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/delete-function/delete-function.command.d.ts

@@ -0,0 +1,27 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim CloudFront DeleteFunction command.
+ */
+export interface SimDeleteFunctionCommand {
+    readonly input: SimDeleteFunctionCommandInput;
+}
+/**
+ * Minimal structural sim CloudFront DeleteFunction input.
+ *
+ * `IfMatch` carries the ETag from the preceding DescribeFunction. It is
+ * accepted and not checked here, so neither `PreconditionFailed` nor
+ * `InvalidIfMatchVersion` can come back. See the handler for why.
+ */
+export interface SimDeleteFunctionCommandInput {
+    readonly Name?: string | undefined;
+    readonly IfMatch?: string | undefined;
+}
+/**
+ * Minimal structural sim CloudFront DeleteFunction output.
+ *
+ * CloudFront answers a deletion with nothing but the response metadata.
+ */
+export interface SimDeleteFunctionCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=delete-function.command.d.ts.map

package/dist/service/cloudfront/command/delete-function/delete-function.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cloudfront/command/delete-function/delete-function.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-function.command.js.map

package/dist/service/cloudfront/command/delete-function/delete-function.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function.command.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function.command.ts"],"names":[],"mappings":""}

package/dist/service/cloudfront/command/delete-function/delete-function.handler.d.ts

@@ -0,0 +1,43 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontFunctionMap } from "../create-function/create-function.handler.js";
+import type { SimDeleteFunctionCommand, SimDeleteFunctionCommandOutput } from "./delete-function.command.js";
+interface DeleteFunctionCommandHandlerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly cloudFrontFunctions: SimCloudFrontFunctionMap;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+interface DeleteFunctionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * CloudFront DeleteFunctionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DeleteFunctionCommand/
+ */
+export declare class DeleteFunctionCommandHandler implements CommandHandler<SimDeleteFunctionCommand, SimDeleteFunctionCommandOutput> {
+    private readonly cloudFrontFunctions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: DeleteFunctionCommandHandlerProperties);
+    /**
+     * Handle deleting a CloudFront Function.
+     *
+     * Real CloudFront refuses with FunctionInUse while the Function is
+     * associated with a Distribution, and only deletes an unassociated one. This
+     * simulation does not track association: a cache Behavior holds the Function
+     * ARN it runs, and nothing tells the Function it has been taken up, so every
+     * Function here is deletable. A Behavior still pointing at a deleted
+     * Function finds nothing and runs no Function code.
+     *
+     * The `IfMatch` ETag is accepted and not checked, for the same reason as
+     * DeleteDistribution: nothing else here versions a resource.
+     */
+    handle(command: SimDeleteFunctionCommand, options?: DeleteFunctionCommandHandlerOptions): Promise<SimDeleteFunctionCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-function.handler.d.ts.map

package/dist/service/cloudfront/command/delete-function/delete-function.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAE9F,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,8BAA8B,CAAC;AAEtC,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,cAAc,CACjE,wBAAwB,EACxB,8BAA8B,CAC/B;IACC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,sCAAsC,EAW7D;IAED;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,mCAAmC,GAC5C,OAAO,CAAC,8BAA8B,CAAC,CAgBzC;CACF"}

package/dist/service/cloudfront/command/delete-function/delete-function.handler.js

@@ -0,0 +1,46 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimCloudFrontNoSuchFunctionExists } from "../../error/sim-cloudfront.error.js";
+import { DeleteFunctionAuthorizer } from "./delete-function-authorizer.js";
+/**
+ * CloudFront DeleteFunctionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/DeleteFunctionCommand/
+ */
+export class DeleteFunctionCommandHandler {
+    cloudFrontFunctions;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { accountId, cloudFrontFunctions, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.cloudFrontFunctions = cloudFrontFunctions;
+        this.authorizer = new DeleteFunctionAuthorizer({ accountId, iam });
+        this.background = background;
+    }
+    /**
+     * Handle deleting a CloudFront Function.
+     *
+     * Real CloudFront refuses with FunctionInUse while the Function is
+     * associated with a Distribution, and only deletes an unassociated one. This
+     * simulation does not track association: a cache Behavior holds the Function
+     * ARN it runs, and nothing tells the Function it has been taken up, so every
+     * Function here is deletable. A Behavior still pointing at a deleted
+     * Function finds nothing and runs no Function code.
+     *
+     * The `IfMatch` ETag is accepted and not checked, for the same reason as
+     * DeleteDistribution: nothing else here versions a resource.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Name, "DeleteFunctionCommand.input.Name");
+        const functionName = command.input.Name;
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        this.authorizer.authorize(functionName, options?.caller);
+        if (!this.cloudFrontFunctions.delete(functionName)) {
+            throw new SimCloudFrontNoSuchFunctionExists(`No sim CloudFront Function named ${functionName}`);
+        }
+        return { $metadata: { httpStatusCode: 204 } };
+    }
+}
+//# sourceMappingURL=delete-function.handler.js.map

package/dist/service/cloudfront/command/delete-function/delete-function.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-function.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/delete-function/delete-function.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAiB3E;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IAItB,mBAAmB,CAA2B;IAC9C,UAAU,CAA2B;IACrC,UAAU,CAAsB;IAEjD,YAAY,UAAkD;QAC5D,MAAM,EACJ,SAAS,EACT,mBAAmB,EACnB,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,OAAiC,EACjC,OAA6C;QAE7C,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAiC,CAAC;QAErE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,iCAAiC,CACzC,oCAAoC,YAAY,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/service/cloudfront/command/get-distribution/get-distribution.command.d.ts

@@ -1,5 +1,5 @@
-import type { SimCloudFrontDistributionConfig } from "../create-distribution/create-distribution.command.js";
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimCloudFrontDistributionView } from "../../distribution/sim-cf-distribution-view.js";
 /**
  * Minimal structural sim CloudFront GetDistribution command.
  */
@@ -16,15 +16,7 @@ export interface SimGetDistributionCommandInput {
  * Minimal structural sim CloudFront GetDistribution output.
  */
 export interface SimGetDistributionCommandOutput {
-    readonly Distribution?: undefined | {
-        readonly Id?: string | undefined;
-        readonly ARN?: string | undefined;
-        readonly Status?: string | undefined;
-        readonly LastModifiedTime?: Date | undefined;
-        readonly InProgressInvalidationBatches?: number | undefined;
-        readonly DomainName?: string | undefined;
-        readonly DistributionConfig?: SimCloudFrontDistributionConfig | undefined;
-    };
+    readonly Distribution?: SimCloudFrontDistributionView | undefined;
     readonly $metadata: SimResponseMetadata;
 }
 //# sourceMappingURL=get-distribution.command.d.ts.map

package/dist/service/cloudfront/command/get-distribution/get-distribution.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AAC7G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAClB,SAAS,GACT;QACE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;QAC7C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzC,QAAQ,CAAC,kBAAkB,CAAC,EAC1B,+BAA+B,GAAG,SAAS,CAAC;KAC/C,CAAC;IACN,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"get-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cloudfront/command/get-distribution/get-distribution.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAa9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oCAAoC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CA4B1C;CACF"}
+{"version":3,"file":"get-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAG3D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAa9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oCAAoC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CAoB1C;CACF"}

package/dist/service/cloudfront/command/get-distribution/get-distribution.handler.js

@@ -1,4 +1,5 @@
-import { SimCloudFrontResourceNotFoundException } from "../../error/sim-cloudfront.error.js";
+import { simCloudFrontDistributionView } from "../../distribution/sim-cf-distribution-view.js";
+import { SimCloudFrontNoSuchDistribution } from "../../error/sim-cloudfront.error.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
@@ -32,18 +33,10 @@ export class GetDistributionCommandHandler {
         this.authorizer.authorize(distributionId, options?.caller);
         const distribution = this.distributions.get(distributionId);
         if (distribution === undefined) {
-            throw new SimCloudFrontResourceNotFoundException(`No sim CloudFront Distribution with ID ${distributionId}`);
+            throw new SimCloudFrontNoSuchDistribution(`No sim CloudFront Distribution with ID ${distributionId}`);
         }
         return {
-            Distribution: {
-                Id: distribution.distributionId,
-                ARN: `arn:aws:cloudfront::${distribution.accountId}:distribution/${distribution.distributionId}`,
-                Status: distribution.status,
-                LastModifiedTime: distribution.lastModifiedTime,
-                InProgressInvalidationBatches: 0,
-                DomainName: `${distribution.distributionId.toLowerCase()}.cloudfront.net`,
-                DistributionConfig: distribution.distributionConfig,
-            },
+            Distribution: simCloudFrontDistributionView(distribution),
             $metadata: {},
         };
     }

package/dist/service/cloudfront/command/get-distribution/get-distribution.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sCAAsC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAgB7E;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IAIvB,aAAa,CAG5B;IACe,UAAU,CAA4B;IACtC,UAAU,CAAsB;IAEjD,YAAY,UAAmD;QAC7D,MAAM,EACJ,SAAS,EACT,aAAa,EACb,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC;YAC9C,SAAS;YACT,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAkC,EAClC,OAA8C;QAE9C,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,EAAiC,CAAC;QAEvE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,sCAAsC,CAC9C,0CAA0C,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY,EAAE;gBACZ,EAAE,EAAE,YAAY,CAAC,cAAc;gBAC/B,GAAG,EAAE,uBAAuB,YAAY,CAAC,SAAS,iBAAiB,YAAY,CAAC,cAAc,EAAE;gBAChG,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;gBAC/C,6BAA6B,EAAE,CAAC;gBAChC,UAAU,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,iBAAiB;gBACzE,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;aACpD;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"get-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAgB7E;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IAIvB,aAAa,CAG5B;IACe,UAAU,CAA4B;IACtC,UAAU,CAAsB;IAEjD,YAAY,UAAmD;QAC7D,MAAM,EACJ,SAAS,EACT,aAAa,EACb,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC;YAC9C,SAAS;YACT,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAkC,EAClC,OAA8C;QAE9C,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,EAAiC,CAAC;QAEvE,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,0CAA0C,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY,EAAE,6BAA6B,CAAC,YAAY,CAAC;YACzD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/command/update-distribution/update-distribution-authorizer.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontDistributionId } from "../../distribution/sim-cloudfront-distribution.js";
+interface UpdateDistributionAuthorizerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a CloudFront UpdateDistribution request.
+ *
+ * Authorization is against the specific Distribution ARN, and happens before
+ * the Distribution map is read, so an unauthorized caller gets AccessDenied
+ * whether the Distribution exists or not.
+ */
+export declare class UpdateDistributionAuthorizer {
+    private static readonly action;
+    private readonly accountId;
+    private readonly iam;
+    constructor(properties: UpdateDistributionAuthorizerProperties);
+    /**
+     * Ensure the caller may update the named CloudFront Distribution.
+     */
+    authorize(distributionId: SimCloudFrontDistributionId | string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=update-distribution-authorizer.d.ts.map

package/dist/service/cloudfront/command/update-distribution/update-distribution-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-distribution-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAErG,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAEjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,sCAAsC,EAG7D;IAED;;OAEG;IACH,SAAS,CACP,cAAc,EAAE,2BAA2B,GAAG,MAAM,EACpD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAeN;CACF"}

package/dist/service/cloudfront/command/update-distribution/update-distribution-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront UpdateDistribution request.
+ *
+ * Authorization is against the specific Distribution ARN, and happens before
+ * the Distribution map is read, so an unauthorized caller gets AccessDenied
+ * whether the Distribution exists or not.
+ */
+export class UpdateDistributionAuthorizer {
+    static action = "cloudfront:UpdateDistribution";
+    accountId;
+    iam;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may update the named CloudFront Distribution.
+     */
+    authorize(distributionId, caller) {
+        const resource = `arn:aws:cloudfront::${this.accountId}:distribution/${distributionId}`;
+        const decision = this.iam.authorize({
+            action: UpdateDistributionAuthorizer.action,
+            resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: UpdateDistributionAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=update-distribution-authorizer.js.map

package/dist/service/cloudfront/command/update-distribution/update-distribution-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-distribution-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQzE;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,+BAA+B,CAAC;IAEhD,SAAS,CAAkB;IAC3B,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CACP,cAAoD,EACpD,MAAqB;QAErB,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,SAAS,iBAAiB,cAAc,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/update-distribution/update-distribution.command.d.ts

@@ -0,0 +1,32 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimCloudFrontDistributionView } from "../../distribution/sim-cf-distribution-view.js";
+import type { SimCloudFrontDistributionConfig } from "../create-distribution/create-distribution.command.js";
+/**
+ * Minimal structural sim CloudFront UpdateDistribution command.
+ */
+export interface SimUpdateDistributionCommand {
+    readonly input: SimUpdateDistributionCommandInput;
+}
+/**
+ * Minimal structural sim CloudFront UpdateDistribution input.
+ *
+ * CloudFront takes the whole DistributionConfig rather than a patch, so the
+ * usual sequence is GetDistribution, change a field, then UpdateDistribution.
+ *
+ * `IfMatch` carries the ETag from that read. It is accepted and not checked
+ * here, so neither `PreconditionFailed` nor `InvalidIfMatchVersion` can come
+ * back. See the handler for why.
+ */
+export interface SimUpdateDistributionCommandInput {
+    readonly Id?: string | undefined;
+    readonly IfMatch?: string | undefined;
+    readonly DistributionConfig?: SimCloudFrontDistributionConfig | undefined;
+}
+/**
+ * Minimal structural sim CloudFront UpdateDistribution output.
+ */
+export interface SimUpdateDistributionCommandOutput {
+    readonly Distribution?: SimCloudFrontDistributionView | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=update-distribution.command.d.ts.map

package/dist/service/cloudfront/command/update-distribution/update-distribution.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-distribution.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AACpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AAE7G;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC3E;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cloudfront/command/update-distribution/update-distribution.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=update-distribution.command.js.map

package/dist/service/cloudfront/command/update-distribution/update-distribution.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-distribution.command.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/update-distribution/update-distribution.command.ts"],"names":[],"mappings":""}