@kensio/yulin 1.5.0 → 1.6.1

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.js

@@ -27,9 +27,9 @@ const simulatedPropertyNames = new Set([
  * Real AWS::DynamoDB::Table properties this simulation does not model.
  *
  * Each one changes what the table does. A table deployed without the Kinesis
- * stream its changes were meant to be published to would leave whatever reads
- * that stream waiting, so the Resource is skipped rather than deployed as
- * something else.
+ * stream its changes were meant to be published to leaves whatever reads that
+ * stream waiting, so the table is created without the property and the
+ * omission is recorded where a test can find it.
  */
 const unsimulatedPropertyNames = new Set([
     "ContributorInsightsSpecification",
@@ -42,45 +42,44 @@ const unsimulatedPropertyNames = new Set([
     "WarmThroughput",
 ]);
 /**
- * Which AWS::DynamoDB::Table properties simulated DynamoDB can act on.
+ * What simulated DynamoDB does with each AWS::DynamoDB::Table property.
  *
- * A real property that is not simulated skips the Resource, with a reason
- * naming it, so the rest of the stack still deploys and the report says what
- * was left out. Anything that is not an AWS::DynamoDB::Table property at all
- * fails the Resource instead, because that is a template real CloudFormation
- * would refuse too.
+ * A property this simulation cannot act on is recorded against the Resource
+ * and the table is created without it, rather than the table going missing
+ * from the stack over one setting. Anything that is not an
+ * AWS::DynamoDB::Table property at all is recorded the same way.
  *
  * The two index properties and the stream specification carry properties of
  * their own, which are held to the same rule a level down.
  */
 export class SimCfnDynamoDbTablePropertyRules {
-    logicalId;
+    scope;
     values;
     constructor(properties) {
-        this.logicalId = properties.logicalId;
+        this.scope = properties.scope;
         this.values = properties.values;
     }
     /**
-     * Refuse everything about this Resource that is not simulated.
+     * Record everything about this Resource the table is created without.
      */
-    assertSimulated() {
+    apply() {
         new SimCfnDynamoDbPropertyRules({
             resourceTypeName: dynamoDbTableResourceTypeName,
-            logicalId: this.logicalId,
+            scope: this.scope,
             simulated: simulatedPropertyNames,
             unsimulated: unsimulatedPropertyNames,
-        }).assertSimulated(this.values);
-        this.assertSimulatedMembers();
+        }).apply(this.values);
+        this.applyToMembers();
     }
     /**
-     * Refuse what the properties carrying properties of their own ask for and
-     * cannot get: the two index lists, and the stream specification.
+     * Apply the same rule to the properties carrying properties of their own:
+     * the two index lists, and the stream specification.
      */
-    assertSimulatedMembers() {
-        const logicalId = this.logicalId;
-        simCfnDynamoDbTableGlobalIndexRules(logicalId).assertEachSimulated(this.values.list("GlobalSecondaryIndexes"));
-        simCfnDynamoDbTableLocalIndexRules(logicalId).assertEachSimulated(this.values.list("LocalSecondaryIndexes"));
-        simCfnDynamoDbTableStreamRules(logicalId).assertSimulated(this.values.object("StreamSpecification"));
+    applyToMembers() {
+        const scope = this.scope;
+        simCfnDynamoDbTableGlobalIndexRules(scope).applyToEach(this.values.list("GlobalSecondaryIndexes"));
+        simCfnDynamoDbTableLocalIndexRules(scope).applyToEach(this.values.list("LocalSecondaryIndexes"));
+        simCfnDynamoDbTableStreamRules(scope).apply(this.values.object("StreamSpecification"));
     }
 }
 //# sourceMappingURL=sim-cfn-dynamodb-table-property-rules.js.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-dynamodb-table-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAE7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,sBAAsB;IACtB,aAAa;IACb,2BAA2B;IAC3B,wBAAwB;IACxB,WAAW;IACX,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;IACrB,YAAY;IACZ,WAAW;IACX,MAAM;IACN,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,kCAAkC;IAClC,2BAA2B;IAC3B,4BAA4B;IAC5B,oBAAoB;IACpB,kCAAkC;IAClC,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAOH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gCAAgC;IAC1B,SAAS,CAAS;IAClB,MAAM,CAA+B;IAEtD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,2BAA2B,CAAC;YAC9B,gBAAgB,EAAE,6BAA6B;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,sBAAsB;YACjC,WAAW,EAAE,wBAAwB;SACtC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED;;;OAGG;IACK,sBAAsB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,mCAAmC,CAAC,SAAS,CAAC,CAAC,mBAAmB,CAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC3C,CAAC;QACF,kCAAkC,CAAC,SAAS,CAAC,CAAC,mBAAmB,CAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAC1C,CAAC;QACF,8BAA8B,CAAC,SAAS,CAAC,CAAC,eAAe,CACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC1C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-dynamodb-table-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAG7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,sBAAsB;IACtB,aAAa;IACb,2BAA2B;IAC3B,wBAAwB;IACxB,WAAW;IACX,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;IACrB,YAAY;IACZ,WAAW;IACX,MAAM;IACN,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,kCAAkC;IAClC,2BAA2B;IAC3B,4BAA4B;IAC5B,oBAAoB;IACpB,kCAAkC;IAClC,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAOH;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gCAAgC;IAC1B,KAAK,CAA8B;IACnC,MAAM,CAA+B;IAEtD,YAAY,UAAsD;QAChE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,2BAA2B,CAAC;YAC9B,gBAAgB,EAAE,6BAA6B;YAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,sBAAsB;YACjC,WAAW,EAAE,wBAAwB;SACtC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtB,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzB,mCAAmC,CAAC,KAAK,CAAC,CAAC,WAAW,CACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC3C,CAAC;QACF,kCAAkC,CAAC,KAAK,CAAC,CAAC,WAAW,CACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAC1C,CAAC;QACF,8BAA8B,CAAC,KAAK,CAAC,CAAC,KAAK,CACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.d.ts

@@ -1,11 +1,13 @@
 import { SimCfnDynamoDbPropertyRules } from "../property/sim-cfn-dynamodb-property-rules.js";
+import type { SimCfnDynamoDbResourceScope } from "../property/sim-cfn-dynamodb-resource-scope.js";
 /**
  * The rules a table's `StreamSpecification` is read under.
  *
  * This is the table's own property rule applied a level down, as the index
- * rules are. A real property that is not simulated skips the table, since a
- * stream deployed without a policy the template asked for would be read by
- * whatever that policy was meant to keep out.
+ * rules are. A real property that is not simulated is recorded and the table is
+ * created without it, since a stream deployed without a policy the template
+ * asked for is read by whatever that policy was meant to keep out, and a test
+ * needs to be able to find that out.
  */
-export declare function simCfnDynamoDbTableStreamRules(logicalId: string): SimCfnDynamoDbPropertyRules;
+export declare function simCfnDynamoDbTableStreamRules(scope: SimCfnDynamoDbResourceScope): SimCfnDynamoDbPropertyRules;
 //# sourceMappingURL=sim-cfn-dynamodb-table-stream-rules.d.ts.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAyB7F;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,GAChB,2BAA2B,CAQ7B"}
+{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAyBlG;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,2BAA2B,GACjC,2BAA2B,CAQ7B"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.js

@@ -24,14 +24,15 @@ const unsimulatedStreamPropertyNames = new Set([
  * The rules a table's `StreamSpecification` is read under.
  *
  * This is the table's own property rule applied a level down, as the index
- * rules are. A real property that is not simulated skips the table, since a
- * stream deployed without a policy the template asked for would be read by
- * whatever that policy was meant to keep out.
+ * rules are. A real property that is not simulated is recorded and the table is
+ * created without it, since a stream deployed without a policy the template
+ * asked for is read by whatever that policy was meant to keep out, and a test
+ * needs to be able to find that out.
  */
-export function simCfnDynamoDbTableStreamRules(logicalId) {
+export function simCfnDynamoDbTableStreamRules(scope) {
     return new SimCfnDynamoDbPropertyRules({
         resourceTypeName: dynamoDbTableResourceTypeName,
-        logicalId,
+        scope,
         kind: "StreamSpecification",
         simulated: simulatedStreamPropertyNames,
         unsimulated: unsimulatedStreamPropertyNames,

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAiB;IAEjB,OAAO,IAAI,2BAA2B,CAAC;QACrC,gBAAgB,EAAE,6BAA6B;QAC/C,SAAS;QACT,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,4BAA4B;QACvC,WAAW,EAAE,8BAA8B;KAC5C,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAE7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAkC;IAElC,OAAO,IAAI,2BAA2B,CAAC;QACrC,gBAAgB,EAAE,6BAA6B;QAC/C,KAAK;QACL,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,4BAA4B;QACvC,WAAW,EAAE,8BAA8B;KAC5C,CAAC,CAAC;AACL,CAAC"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-deleter.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimIam } from "../../sim-iam.js";
+interface SimCfnIamRoleDeleterProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Deletes simulated Roles created from AWS::IAM::Role Resources.
+ *
+ * DeleteRole refuses a Role that still has policies on it, so the Role's
+ * policies come off first. Real CloudFormation does the same for the policies
+ * it put there itself: a `ManagedPolicyArns` entry is detached and a `Policies`
+ * entry removed as part of deleting the Role, rather than being left for the
+ * caller to clear up.
+ *
+ * An AWS::IAM::Policy Resource naming this Role is a separate Resource, and the
+ * teardown order takes it off before reaching the Role. Removing whatever is
+ * left here covers the policies the Role Resource declared inline.
+ */
+export declare class SimCfnIamRoleDeleter {
+    private readonly iam;
+    constructor(properties: SimCfnIamRoleDeleterProperties);
+    /**
+     * Delete the Role a CloudFormation Resource created.
+     */
+    delete(resource: SimCfnResource): Promise<void>;
+    private detachPolicies;
+    private deleteInlinePolicies;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-role-deleter.d.ts.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-deleter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-deleter.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-deleter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C,UAAU,8BAA8B;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,8BAA8B,EAErD;IAED;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAWpD;YAEa,cAAc;YAUd,oBAAoB;CASnC"}

package/dist/service/iam/cfn/role/sim-cfn-iam-role-deleter.js

@@ -0,0 +1,41 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+/**
+ * Deletes simulated Roles created from AWS::IAM::Role Resources.
+ *
+ * DeleteRole refuses a Role that still has policies on it, so the Role's
+ * policies come off first. Real CloudFormation does the same for the policies
+ * it put there itself: a `ManagedPolicyArns` entry is detached and a `Policies`
+ * entry removed as part of deleting the Role, rather than being left for the
+ * caller to clear up.
+ *
+ * An AWS::IAM::Policy Resource naming this Role is a separate Resource, and the
+ * teardown order takes it off before reaching the Role. Removing whatever is
+ * left here covers the policies the Role Resource declared inline.
+ */
+export class SimCfnIamRoleDeleter {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Delete the Role a CloudFormation Resource created.
+     */
+    async delete(resource) {
+        const role = resource.simResource;
+        assertDefined(role, `sim IAM Role for CloudFormation Resource ${resource.logicalId}`);
+        await this.detachPolicies(role);
+        await this.deleteInlinePolicies(role);
+        await this.iam.deleteRole({ input: { RoleName: role.roleName } });
+    }
+    async detachPolicies(role) {
+        await Promise.all([...role.attachedPolicyArns].map(async (policyArn) => this.iam.detachRolePolicy({
+            input: { RoleName: role.roleName, PolicyArn: policyArn },
+        })));
+    }
+    async deleteInlinePolicies(role) {
+        await Promise.all(role.inlinePolicies.keys().map(async (policyName) => this.iam.deleteRolePolicy({
+            input: { RoleName: role.roleName, PolicyName: policyName },
+        })));
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-role-deleter.js.map

package/dist/service/iam/cfn/role/sim-cfn-iam-role-deleter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-role-deleter.js","sourceRoot":"","sources":["../../../../../src/service/iam/cfn/role/sim-cfn-iam-role-deleter.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IACd,GAAG,CAAS;IAE7B,YAAY,UAA0C;QACpD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAqC,CAAC;QAC5D,aAAa,CACX,IAAI,EACJ,4CAA4C,QAAQ,CAAC,SAAS,EAAE,CACjE,CAAC;QAEF,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAgB;QAC3C,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACnD,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;SACzD,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAgB;QACjD,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;SAC3D,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-deleter.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimIam } from "../sim-iam.js";
+interface SimCfnIamResourceDeleterProperties {
+    readonly iam: SimIam;
+}
+/**
+ * Deletes the simulated IAM resources a CloudFormation Stack created.
+ */
+export declare class SimCfnIamResourceDeleter {
+    private readonly iam;
+    private readonly roleDeleter;
+    constructor(properties: SimCfnIamResourceDeleterProperties);
+    /**
+     * Delete a simulated IAM resource created from a CloudFormation Resource.
+     */
+    delete(resourceTypeName: string, resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<void>;
+    private deleteManagedPolicy;
+    /**
+     * Take an AWS::IAM::Policy back off the Roles it was put on.
+     *
+     * The Resource has no stored object of its own, so the Roles are read from
+     * the template the same way creation read them. Their Refs still resolve,
+     * because a Role is deleted after the policies naming it.
+     */
+    private deleteInlinePolicy;
+}
+export {};
+//# sourceMappingURL=sim-cfn-iam-resource-deleter.d.ts.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-deleter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-resource-deleter.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-deleter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAC/G,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IAEnD,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAoBf;YAEa,mBAAmB;IAUjC;;;;;;OAMG;YACW,kBAAkB;CAqBjC"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-deleter.js

@@ -0,0 +1,61 @@
+import { SimCfnIamRoleDeleter } from "./role/sim-cfn-iam-role-deleter.js";
+import { assertDefined } from "../../../util/type-guard/defined.js";
+/**
+ * Deletes the simulated IAM resources a CloudFormation Stack created.
+ */
+export class SimCfnIamResourceDeleter {
+    iam;
+    roleDeleter;
+    constructor(properties) {
+        this.iam = properties.iam;
+        this.roleDeleter = new SimCfnIamRoleDeleter({ iam: properties.iam });
+    }
+    /**
+     * Delete a simulated IAM resource created from a CloudFormation Resource.
+     */
+    async delete(resourceTypeName, resource, properties) {
+        switch (resourceTypeName) {
+            case "ManagedPolicy": {
+                await this.deleteManagedPolicy(resource);
+                return;
+            }
+            case "Policy": {
+                await this.deleteInlinePolicy(properties);
+                return;
+            }
+            case "Role": {
+                await this.roleDeleter.delete(resource);
+                return;
+            }
+            default: {
+                throw new Error(`Unsupported sim IAM CloudFormation Resource ${resourceTypeName} deletion`);
+            }
+        }
+    }
+    async deleteManagedPolicy(resource) {
+        const policy = resource.simResource;
+        assertDefined(policy, `sim IAM Managed Policy for CloudFormation Resource ${resource.logicalId}`);
+        await this.iam.deletePolicy({ input: { PolicyArn: policy.arn } });
+    }
+    /**
+     * Take an AWS::IAM::Policy back off the Roles it was put on.
+     *
+     * The Resource has no stored object of its own, so the Roles are read from
+     * the template the same way creation read them. Their Refs still resolve,
+     * because a Role is deleted after the policies naming it.
+     */
+    async deleteInlinePolicy(properties) {
+        const policyName = properties["PolicyName"];
+        const roles = properties["Roles"];
+        /* v8 ignore if -- creation refused the Resource if either was missing */
+        if (typeof policyName !== "string" || !Array.isArray(roles)) {
+            return;
+        }
+        await Promise.all(roles
+            .filter((roleName) => typeof roleName === "string")
+            .map(async (roleName) => this.iam.deleteRolePolicy({
+            input: { RoleName: roleName, PolicyName: policyName },
+        })));
+    }
+}
+//# sourceMappingURL=sim-cfn-iam-resource-deleter.js.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-deleter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-iam-resource-deleter.js","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-deleter.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMpE;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAClB,GAAG,CAAS;IACZ,WAAW,CAAuB;IAEnD,YAAY,UAA8C;QACxD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,UAAqC;QAErC,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,WAAW,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAAwB;QACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAA8C,CAAC;QACvE,aAAa,CACX,MAAM,EACN,sDAAsD,QAAQ,CAAC,SAAS,EAAE,CAC3E,CAAC;QAEF,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,kBAAkB,CAC9B,UAAqC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAElC,yEAAyE;QACzE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CACf,KAAK;aACF,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;aACtE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CACtB,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACxB,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;SACtD,CAAC,CACH,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.d.ts

@@ -1,6 +1,7 @@
 import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimIam } from "../sim-iam.js";
+import type { SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.type.js";
 /**
  * CloudFormation Resource factory for simulated IAM resources.
  */
@@ -8,10 +9,15 @@ export declare class SimIamCloudFormationResourceFactory implements SimCfnServic
     private readonly managedPolicyCreator;
     private readonly policyCreator;
     private readonly roleCreator;
+    private readonly deleter;
     constructor(iam: SimIam);
     /**
      * Create a simulated IAM resource from a CloudFormation Resource.
      */
     create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
+    /**
+     * Delete a simulated IAM resource created from a CloudFormation Resource.
+     */
+    delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
 }
 //# sourceMappingURL=sim-cfn-iam-resource-factory.d.ts.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-iam-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C;;GAEG;AACH,qBAAa,mCAAoC,YAAW,4BAA4B;IACtF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IAEnD,YAAY,GAAG,EAAE,MAAM,EAItB;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2B7B;CACF"}
+{"version":3,"file":"sim-cfn-iam-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,wDAAwD,CAAC;AAErH;;GAEG;AACH,qBAAa,mCAAoC,YAAW,4BAA4B;IACtF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,GAAG,EAAE,MAAM,EAKtB;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2B7B;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAMf;CACF"}

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.js

@@ -1,6 +1,7 @@
 import { SimCfnIamManagedPolicyCreator } from "./managed-policy/sim-cfn-iam-managed-policy-creator.js";
 import { SimCfnIamPolicyCreator } from "./policy/sim-cfn-iam-policy-creator.js";
 import { SimCfnIamRoleCreator } from "./role/sim-cfn-iam-role-creator.js";
+import { SimCfnIamResourceDeleter } from "./sim-cfn-iam-resource-deleter.js";
 /**
  * CloudFormation Resource factory for simulated IAM resources.
  */
@@ -8,10 +9,12 @@ export class SimIamCloudFormationResourceFactory {
     managedPolicyCreator;
     policyCreator;
     roleCreator;
+    deleter;
     constructor(iam) {
         this.managedPolicyCreator = new SimCfnIamManagedPolicyCreator({ iam });
         this.policyCreator = new SimCfnIamPolicyCreator({ iam });
         this.roleCreator = new SimCfnIamRoleCreator({ iam });
+        this.deleter = new SimCfnIamResourceDeleter({ iam });
     }
     /**
      * Create a simulated IAM resource from a CloudFormation Resource.
@@ -33,5 +36,11 @@ export class SimIamCloudFormationResourceFactory {
             }
         }
     }
+    /**
+     * Delete a simulated IAM resource created from a CloudFormation Resource.
+     */
+    async delete(resourceTypeName, resource, context) {
+        await this.deleter.delete(resourceTypeName, resource, context.resolvedProperties ?? resource.properties);
+    }
 }
 //# sourceMappingURL=sim-cfn-iam-resource-factory.js.map

package/dist/service/iam/cfn/sim-cfn-iam-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-iam-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC7B,oBAAoB,CAAgC;IACpD,aAAa,CAAyB;IACtC,WAAW,CAAuB;IAEnD,YAAY,GAAW;QACrB,IAAI,CAAC,oBAAoB,GAAG,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAC7B,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAClC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-iam-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/iam/cfn/sim-cfn-iam-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAG7E;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC7B,oBAAoB,CAAgC;IACpD,aAAa,CAAyB;IACtC,WAAW,CAAuB;IAClC,OAAO,CAA2B;IAEnD,YAAY,GAAW;QACrB,IAAI,CAAC,oBAAoB,GAAG,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAC7B,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAClC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,gBAAgB,EAChB,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/policy/delete-policy/delete-policy.command.d.ts

@@ -0,0 +1,8 @@
+export interface SimDeletePolicyCommandInput {
+    readonly PolicyArn?: string | undefined;
+}
+export interface SimDeletePolicyCommand {
+    readonly input: SimDeletePolicyCommandInput;
+}
+export type SimDeletePolicyCommandOutput = Record<string, never>;
+//# sourceMappingURL=delete-policy.command.d.ts.map

package/dist/service/iam/command/policy/delete-policy/delete-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-policy.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-policy/delete-policy.command.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC"}

package/dist/service/iam/command/policy/delete-policy/delete-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-policy.command.js.map

package/dist/service/iam/command/policy/delete-policy/delete-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-policy.command.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-policy/delete-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/policy/delete-policy/delete-policy.handler.d.ts

@@ -0,0 +1,38 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimIamManagedPolicy } from "../../../policy/sim-iam-policy.js";
+import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimDeletePolicyCommand, SimDeletePolicyCommandOutput } from "./delete-policy.command.js";
+interface DeletePolicyCommandHandlerProperties {
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly roles: Map<SimIamRoleName, SimIamRole>;
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM DeletePolicyCommand handler.
+ *
+ * Real IAM refuses to delete a managed policy while anything is attached to
+ * it, so this counts the Roles and Users carrying the ARN rather than reading
+ * the policy record's own attachment count: attachment is recorded on the
+ * identity, which is where AttachRolePolicy puts it.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/DeletePolicyCommand/
+ */
+export declare class DeletePolicyCommandHandler implements CommandHandler<SimDeletePolicyCommand, SimDeletePolicyCommandOutput> {
+    private readonly policies;
+    private readonly roles;
+    private readonly users;
+    private readonly background;
+    constructor(properties: DeletePolicyCommandHandlerProperties);
+    /**
+     * Handle a DeletePolicyCommand from the SDK.
+     */
+    handle(command: SimDeletePolicyCommand): Promise<SimDeletePolicyCommandOutput>;
+    private assertNotAttached;
+    private attachmentCount;
+}
+export {};
+//# sourceMappingURL=delete-policy.handler.d.ts.map

package/dist/service/iam/command/policy/delete-policy/delete-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-policy/delete-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAKrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;;GASG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,oCAAoC,EAY3D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,4BAA4B,CAAC,CAkBvC;IAED,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,eAAe;CAOxB"}

package/dist/service/iam/command/policy/delete-policy/delete-policy.handler.js

@@ -0,0 +1,52 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamDeleteConflict, SimIamNoSuchEntity, } from "../../../error/sim-iam.error.js";
+/**
+ * IAM DeletePolicyCommand handler.
+ *
+ * Real IAM refuses to delete a managed policy while anything is attached to
+ * it, so this counts the Roles and Users carrying the ARN rather than reading
+ * the policy record's own attachment count: attachment is recorded on the
+ * identity, which is where AttachRolePolicy puts it.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/DeletePolicyCommand/
+ */
+export class DeletePolicyCommandHandler {
+    policies;
+    roles;
+    users;
+    background;
+    constructor(properties) {
+        const { policies, roles, users, background = new BackgroundTasks(), } = properties;
+        this.policies = policies;
+        this.roles = roles;
+        this.users = users;
+        this.background = background;
+    }
+    /**
+     * Handle a DeletePolicyCommand from the SDK.
+     */
+    async handle(command) {
+        const policyArn = command.input.PolicyArn;
+        if (policyArn === undefined || policyArn.length === 0) {
+            throw new Error("PolicyArn is required");
+        }
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        if (!this.policies.has(policyArn)) {
+            throw new SimIamNoSuchEntity(`No IAM Policy with ARN ${policyArn}`);
+        }
+        this.assertNotAttached(policyArn);
+        this.policies.delete(policyArn);
+        return {};
+    }
+    assertNotAttached(policyArn) {
+        if (this.attachmentCount(policyArn) > 0) {
+            throw new SimIamDeleteConflict(`Cannot delete a policy attached to entities: IAM Policy ${policyArn}`);
+        }
+    }
+    attachmentCount(policyArn) {
+        const identities = [...this.roles.values(), ...this.users.values()];
+        return identities.filter((identity) => identity.attachedPolicyArns.has(policyArn)).length;
+    }
+}
+//# sourceMappingURL=delete-policy.handler.js.map

package/dist/service/iam/command/policy/delete-policy/delete-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-policy/delete-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAgBzC;;;;;;;;;GASG;AACH,MAAM,OAAO,0BAA0B;IAIpB,QAAQ,CAAmC;IAC3C,KAAK,CAAkC;IACvC,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAAgD;QAC1D,MAAM,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA+B;QAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAA+B,CAAC;QAEhE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhC,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,iBAAiB,CAAC,SAAiB;QACzC,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,oBAAoB,CAC5B,2DAA2D,SAAS,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,SAAiB;QACvC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAEpE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAC3C,CAAC,MAAM,CAAC;IACX,CAAC;CACF"}

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.command.d.ts

@@ -0,0 +1,9 @@
+export interface SimDeleteRolePolicyCommandInput {
+    readonly RoleName?: string | undefined;
+    readonly PolicyName?: string | undefined;
+}
+export interface SimDeleteRolePolicyCommand {
+    readonly input: SimDeleteRolePolicyCommandInput;
+}
+export type SimDeleteRolePolicyCommandOutput = Record<string, never>;
+//# sourceMappingURL=delete-role-policy.command.d.ts.map

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-role-policy.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-role-policy/delete-role-policy.command.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC"}

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delete-role-policy.command.js.map

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-role-policy.command.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-role-policy/delete-role-policy.command.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.handler.d.ts

@@ -0,0 +1,28 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
+import type { SimDeleteRolePolicyCommand, SimDeleteRolePolicyCommandOutput } from "./delete-role-policy.command.js";
+interface DeleteRolePolicyCommandHandlerProperties {
+    readonly roles: Map<SimIamRoleName, SimIamRole>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM DeleteRolePolicyCommand handler.
+ *
+ * This removes an inline policy stored on the Role, which is what
+ * PutRolePolicy put there. A policy name the Role does not carry is refused,
+ * as real IAM has nothing to remove.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/DeleteRolePolicyCommand/
+ */
+export declare class DeleteRolePolicyCommandHandler implements CommandHandler<SimDeleteRolePolicyCommand, SimDeleteRolePolicyCommandOutput> {
+    private readonly roles;
+    private readonly background;
+    constructor(properties: DeleteRolePolicyCommandHandlerProperties);
+    /**
+     * Handle a DeleteRolePolicyCommand from the SDK.
+     */
+    handle(command: SimDeleteRolePolicyCommand): Promise<SimDeleteRolePolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=delete-role-policy.handler.d.ts.map

package/dist/service/iam/command/policy/delete-role-policy/delete-role-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-role-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/delete-role-policy/delete-role-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,iCAAiC,CAAC;AAEzC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAK/D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,gCAAgC,CAAC,CA6B3C;CACF"}