@kensio/yulin 1.9.0 → 1.10.0

package/dist/service/sns/signature/sim-sns-host.js

@@ -0,0 +1,33 @@
+/**
+ * The hostname the URLs in a delivered message name.
+ *
+ * Real SNS puts `sns.<region>.amazonaws.com` in the `SigningCertURL` and the
+ * `UnsubscribeURL` of every message it delivers. A simulated message names
+ * `sns.<region>.yulin.invalid` instead, because neither URL can be fetched:
+ * simulated SNS is not served over HTTP, and the certificate is handed out
+ * in process by `SimSns.signingCertificate`.
+ *
+ * `.invalid` is the reserved top level domain for exactly this. A consumer that
+ * does try to fetch one of these URLs fails to resolve it, rather than reaching
+ * real AWS and being answered by a certificate that signed nothing here.
+ *
+ * This is a divergence a real signature verifier notices. `sns-validator`
+ * hard-codes an `amazonaws.com` certificate host and fetches the URL itself, so
+ * it cannot verify a simulated message as it stands. Verifying one means
+ * checking the signature against the certificate `SimSns.signingCertificate`
+ * hands over, which is what the docs show.
+ */
+export function simSnsHost(regionName) {
+    return `sns.${regionName}.yulin.invalid`;
+}
+/**
+ * The URL a delivered message names to say how to stop receiving them.
+ *
+ * Real SNS carries this in every envelope, and it is the same shape here with
+ * the simulated host in front of it.
+ */
+export function simSnsUnsubscribeUrl(regionName, subscriptionArn) {
+    return (`https://${simSnsHost(regionName)}/?Action=Unsubscribe` +
+        `&SubscriptionArn=${encodeURIComponent(subscriptionArn)}`);
+}
+//# sourceMappingURL=sim-sns-host.js.map

package/dist/service/sns/signature/sim-sns-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-host.js","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO,OAAO,UAAU,gBAAgB,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,eAAuB;IAEvB,OAAO,CACL,WAAW,UAAU,CAAC,UAAU,CAAC,sBAAsB;QACvD,oBAAoB,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAC1D,CAAC;AACJ,CAAC"}

package/dist/service/sns/signature/sim-sns-message-signer.d.ts

@@ -0,0 +1,51 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+/**
+ * The signature version real SNS signs with unless a topic opts into version 2.
+ *
+ * Version 1 is SHA1withRSA. The `SignatureVersion` topic attribute, which is
+ * how a real topic asks for version 2, is refused here, so every message
+ * carries this.
+ */
+export declare const simSnsSignatureVersion = "1";
+/**
+ * What a signature adds to a delivered message.
+ */
+export interface SimSnsSignatureFields {
+    readonly SignatureVersion: string;
+    readonly Signature: string;
+    readonly SigningCertURL: string;
+}
+interface SimSnsMessageSignerProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Signs the messages one simulated SNS scope delivers.
+ *
+ * The key belongs to the scope rather than to a topic, which is how real SNS
+ * works: one certificate per Region signs every message that Region sends. It
+ * is generated on first use, because generating RSA takes long enough to
+ * notice and a scope that never delivers anything never needs one.
+ */
+export declare class SimSnsMessageSigner {
+    private readonly host;
+    private held;
+    constructor(properties: SimSnsMessageSignerProperties);
+    /**
+     * Sign the canonical form of one message.
+     */
+    sign(canonicalMessage: string): SimSnsSignatureFields;
+    /**
+     * The certificate a `SigningCertURL` names, or nothing when it names another.
+     *
+     * This is how a verifier gets at the certificate, because the URL cannot be
+     * fetched: simulated SNS is not served over HTTP. A URL this scope did not
+     * issue answers with nothing rather than with the certificate it has, so a
+     * message signed by another scope is not accidentally verified against the
+     * wrong key.
+     */
+    certificateFor(signingCertUrl: string): string | undefined;
+    private certificateUrl;
+    private key;
+}
+export {};
+//# sourceMappingURL=sim-sns-message-signer.d.ts.map

package/dist/service/sns/signature/sim-sns-message-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-message-signer.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-message-signer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAI1F;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,IAAI,CAA+B;IAE3C,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;OAEG;IACH,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,qBAAqB,CAQpD;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQzD;IAED,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,GAAG;CAKZ"}

package/dist/service/sns/signature/sim-sns-message-signer.js

@@ -0,0 +1,60 @@
+import { simSnsHost } from "./sim-sns-host.js";
+import { SimSnsSigningKey } from "./sim-sns-signing-key.js";
+/**
+ * The signature version real SNS signs with unless a topic opts into version 2.
+ *
+ * Version 1 is SHA1withRSA. The `SignatureVersion` topic attribute, which is
+ * how a real topic asks for version 2, is refused here, so every message
+ * carries this.
+ */
+export const simSnsSignatureVersion = "1";
+/**
+ * Signs the messages one simulated SNS scope delivers.
+ *
+ * The key belongs to the scope rather than to a topic, which is how real SNS
+ * works: one certificate per Region signs every message that Region sends. It
+ * is generated on first use, because generating RSA takes long enough to
+ * notice and a scope that never delivers anything never needs one.
+ */
+export class SimSnsMessageSigner {
+    host;
+    held;
+    constructor(properties) {
+        this.host = simSnsHost(properties.accountRegionScope.regionName);
+    }
+    /**
+     * Sign the canonical form of one message.
+     */
+    sign(canonicalMessage) {
+        const key = this.key();
+        return {
+            SignatureVersion: simSnsSignatureVersion,
+            Signature: key.sign(canonicalMessage),
+            SigningCertURL: this.certificateUrl(key),
+        };
+    }
+    /**
+     * The certificate a `SigningCertURL` names, or nothing when it names another.
+     *
+     * This is how a verifier gets at the certificate, because the URL cannot be
+     * fetched: simulated SNS is not served over HTTP. A URL this scope did not
+     * issue answers with nothing rather than with the certificate it has, so a
+     * message signed by another scope is not accidentally verified against the
+     * wrong key.
+     */
+    certificateFor(signingCertUrl) {
+        const key = this.held;
+        if (key === undefined || this.certificateUrl(key) !== signingCertUrl) {
+            return undefined;
+        }
+        return key.certificatePem;
+    }
+    certificateUrl(key) {
+        return `https://${this.host}/SimulatedNotificationService-${key.fingerprint}.pem`;
+    }
+    key() {
+        this.held ??= SimSnsSigningKey.generate(this.host);
+        return this.held;
+    }
+}
+//# sourceMappingURL=sim-sns-message-signer.js.map

package/dist/service/sns/signature/sim-sns-message-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-message-signer.js","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-message-signer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAe1C;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACb,IAAI,CAAS;IACtB,IAAI,CAA+B;IAE3C,YAAY,UAAyC;QACnD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,gBAAwB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,OAAO;YACL,gBAAgB,EAAE,sBAAsB;YACxC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,cAAsB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QAEtB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,GAAG,CAAC,cAAc,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,GAAqB;QAC1C,OAAO,WAAW,IAAI,CAAC,IAAI,iCAAiC,GAAG,CAAC,WAAW,MAAM,CAAC;IACpF,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/service/sns/signature/sim-sns-signing-key.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The key one simulated SNS scope signs its messages with.
+ *
+ * The key material is real, generated with `node:crypto`, and the signature is
+ * a real SHA1withRSA signature over the string real SNS signs. A verifier can
+ * therefore check a delivered message against the certificate, rather than
+ * being handed a `Signature` field it has no way to use.
+ */
+export declare class SimSnsSigningKey {
+    readonly fingerprint: string;
+    readonly certificatePem: string;
+    private readonly privateKey;
+    private constructor();
+    /**
+     * Generate a key pair for a simulated SNS scope.
+     *
+     * A scope generates its own on first use rather than at construction,
+     * because generating 2048-bit RSA takes long enough to notice and most
+     * simulated SNS scopes in a test suite never deliver anything. Nothing is
+     * written to disk, and no key material is committed: a private key in the
+     * repository would set off secret scanners for no gain.
+     */
+    static generate(subjectName: string): SimSnsSigningKey;
+    /**
+     * Sign the canonical form of a message, as real SNS signs it.
+     *
+     * Signature version 1 is SHA1withRSA, and the signature travels base64
+     * encoded in the envelope. SHA-1 is weak, and it is what real SNS uses for
+     * version 1: a simulation signing with something else would produce a
+     * signature a real verifier could not check.
+     */
+    sign(canonicalMessage: string): string;
+}
+//# sourceMappingURL=sim-sns-signing-key.d.ts.map

package/dist/service/sns/signature/sim-sns-signing-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-signing-key.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-signing-key.ts"],"names":[],"mappings":"AAwBA;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,cAAc,EAAE,MAAM,CAAC;IAEvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;IAEvC,OAAO,eAgBN;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAErD;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAKrC;CACF"}

package/dist/service/sns/signature/sim-sns-signing-key.js

@@ -0,0 +1,69 @@
+import { createHash, createSign, generateKeyPairSync, } from "node:crypto";
+import { simSnsSelfSignedCertificatePem, simSnsSerialNumber, } from "./sim-sns-certificate.js";
+/**
+ * The RSA modulus size real SNS signs with.
+ */
+const modulusLength = 2048;
+/**
+ * How many characters of the key's digest name the certificate.
+ *
+ * Real SNS puts an opaque hash in the certificate's file name. This is the
+ * same idea, and it means the URL names the key it actually belongs to.
+ */
+const fingerprintLength = 32;
+/**
+ * The key one simulated SNS scope signs its messages with.
+ *
+ * The key material is real, generated with `node:crypto`, and the signature is
+ * a real SHA1withRSA signature over the string real SNS signs. A verifier can
+ * therefore check a delivered message against the certificate, rather than
+ * being handed a `Signature` field it has no way to use.
+ */
+export class SimSnsSigningKey {
+    fingerprint;
+    certificatePem;
+    privateKey;
+    constructor(subjectName) {
+        const { privateKey, publicKey } = generateKeyPairSync("rsa", {
+            modulusLength,
+        });
+        const digest = createHash("sha256")
+            .update(publicKey.export({ type: "spki", format: "der" }))
+            .digest();
+        this.privateKey = privateKey;
+        this.fingerprint = digest.toString("hex").slice(0, fingerprintLength);
+        this.certificatePem = simSnsSelfSignedCertificatePem({
+            privateKey,
+            publicKey,
+            subjectName,
+            serialNumber: simSnsSerialNumber(digest),
+        });
+    }
+    /**
+     * Generate a key pair for a simulated SNS scope.
+     *
+     * A scope generates its own on first use rather than at construction,
+     * because generating 2048-bit RSA takes long enough to notice and most
+     * simulated SNS scopes in a test suite never deliver anything. Nothing is
+     * written to disk, and no key material is committed: a private key in the
+     * repository would set off secret scanners for no gain.
+     */
+    static generate(subjectName) {
+        return new SimSnsSigningKey(subjectName);
+    }
+    /**
+     * Sign the canonical form of a message, as real SNS signs it.
+     *
+     * Signature version 1 is SHA1withRSA, and the signature travels base64
+     * encoded in the envelope. SHA-1 is weak, and it is what real SNS uses for
+     * version 1: a simulation signing with something else would produce a
+     * signature a real verifier could not check.
+     */
+    sign(canonicalMessage) {
+        return createSign("RSA-SHA1")
+            .update(canonicalMessage, "utf8")
+            .sign(this.privateKey)
+            .toString("base64");
+    }
+}
+//# sourceMappingURL=sim-sns-signing-key.js.map

package/dist/service/sns/signature/sim-sns-signing-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-signing-key.js","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-signing-key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACX,WAAW,CAAS;IACpB,cAAc,CAAS;IAEtB,UAAU,CAAY;IAEvC,YAAoB,WAAmB;QACrC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;YAC3D,aAAa;SACd,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;aAChC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aACzD,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtE,IAAI,CAAC,cAAc,GAAG,8BAA8B,CAAC;YACnD,UAAU;YACV,SAAS;YACT,WAAW;YACX,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,CAAC,WAAmB;QACjC,OAAO,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,gBAAwB;QAC3B,OAAO,UAAU,CAAC,UAAU,CAAC;aAC1B,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;aAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;CACF"}

package/dist/service/sns/sim-sns.d.ts

@@ -0,0 +1,139 @@
+import { type BackgroundScheduler } from "../../util/background/background.js";
+import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
+import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
+import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimSnsDeliveryEndpoints } from "./delivery/sim-sns-delivery.js";
+import type { SimSnsDeliveryFailure } from "./delivery/sim-sns-delivery-failures.js";
+import type * as simSnsCommands from "./command/sim-sns-command.types.js";
+import type { SimSnsRequestOptions } from "./command/sim-sns-request-options.js";
+import { SimSnsCfnResourceFactory } from "./cfn/sim-sns-cfn-resource-factory.js";
+import type { SimSnsSubscription } from "./subscription/sim-sns-subscription.js";
+import type { SimSnsTopic } from "./topic/sim-sns-topic.js";
+interface SimSnsProperties {
+    readonly accountRegionScope?: SimAwsAccountRegionScope;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+    /**
+     * Where this scope's subscriptions deliver to.
+     *
+     * A SimSns built on its own has none, since a queue or a function in another
+     * simulated service is only reachable through SimAws.
+     */
+    readonly deliveryEndpoints?: SimSnsDeliveryEndpoints;
+}
+/**
+ * Simulated SNS. Handles SDK commands. Emulates AWS behaviour and state.
+ *
+ * Topics are scoped to an account and region, as they are on real AWS: a topic
+ * name is unique within one of those scopes, and the ARN a request reaches a
+ * topic by names the region.
+ *
+ * Only standard topics are simulated. FIFO topics are not.
+ */
+export declare class SimSns {
+    private readonly topics;
+    private readonly subscriptions;
+    private readonly commands;
+    private readonly background;
+    private readonly sdkRouter;
+    private readonly cfnFactory;
+    constructor(properties?: SimSnsProperties);
+    /**
+     * Every message this simulated SNS could not deliver.
+     *
+     * Real SNS tells the publisher nothing about a failed delivery, and neither
+     * does this. A queue that is unexpectedly empty is explained here.
+     */
+    get deliveryFailures(): readonly SimSnsDeliveryFailure[];
+    /**
+     * The certificate a delivered message's `SigningCertURL` names.
+     *
+     * The URL cannot be fetched, because simulated SNS is not served over HTTP,
+     * so this is how a verifier gets at the certificate to check a signature
+     * with. A URL this scope did not issue answers with nothing.
+     */
+    signingCertificate(signingCertUrl: string): string | undefined;
+    /**
+     * Find a topic by name.
+     *
+     * This is the simulator's own accessor, for tests seeding or inspecting topic
+     * state without going through a Command and its authorization.
+     */
+    findTopic(name: string): SimSnsTopic | undefined;
+    /**
+     * The subscriptions of a topic, by topic name.
+     *
+     * This is the simulator's own accessor, for a test inspecting what a topic
+     * would deliver to without going through a Command and its authorization.
+     */
+    topicSubscriptions(topicName: string): readonly SimSnsSubscription[];
+    /**
+     * Find a subscription by ARN.
+     *
+     * This is the simulator's own accessor, for a test or a CloudFormation
+     * Resource holding the ARN a Subscribe answered with.
+     */
+    findSubscription(arn: string): SimSnsSubscription | undefined;
+    /**
+     * Handle a CreateTopic Command from the SDK.
+     */
+    createTopic(command: simSnsCommands.SimCreateTopicCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimCreateTopicCommandOutput>;
+    /**
+     * Handle a ListTopics Command from the SDK.
+     */
+    listTopics(command: simSnsCommands.SimListTopicsCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimListTopicsCommandOutput>;
+    /**
+     * Handle a DeleteTopic Command from the SDK.
+     */
+    deleteTopic(command: simSnsCommands.SimDeleteTopicCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimDeleteTopicCommandOutput>;
+    /**
+     * Handle a GetTopicAttributes Command from the SDK.
+     */
+    getTopicAttributes(command: simSnsCommands.SimGetTopicAttributesCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimGetTopicAttributesCommandOutput>;
+    /**
+     * Handle a SetTopicAttributes Command from the SDK.
+     */
+    setTopicAttributes(command: simSnsCommands.SimSetTopicAttributesCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimSetTopicAttributesCommandOutput>;
+    /**
+     * Handle a Subscribe Command from the SDK.
+     */
+    subscribe(command: simSnsCommands.SimSubscribeCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimSubscribeCommandOutput>;
+    /**
+     * Handle an Unsubscribe Command from the SDK.
+     */
+    unsubscribe(command: simSnsCommands.SimUnsubscribeCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimUnsubscribeCommandOutput>;
+    /**
+     * Handle a ListSubscriptions Command from the SDK.
+     */
+    listSubscriptions(command: simSnsCommands.SimListSubscriptionsCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimListSubscriptionsCommandOutput>;
+    /**
+     * Handle a ListSubscriptionsByTopic Command from the SDK.
+     */
+    listSubscriptionsByTopic(command: simSnsCommands.SimListSubscriptionsByTopicCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimListSubscriptionsByTopicCommandOutput>;
+    /**
+     * Handle a GetSubscriptionAttributes Command from the SDK.
+     */
+    getSubscriptionAttributes(command: simSnsCommands.SimGetSubscriptionAttributesCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimGetSubscriptionAttributesCommandOutput>;
+    /**
+     * Handle a SetSubscriptionAttributes Command from the SDK.
+     */
+    setSubscriptionAttributes(command: simSnsCommands.SimSetSubscriptionAttributesCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimSetSubscriptionAttributesCommandOutput>;
+    /**
+     * Handle a Publish Command from the SDK.
+     */
+    publish(command: simSnsCommands.SimPublishCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimPublishCommandOutput>;
+    /**
+     * Handle a PublishBatch Command from the SDK.
+     */
+    publishBatch(command: simSnsCommands.SimPublishBatchCommand, options?: SimSnsRequestOptions): Promise<simSnsCommands.SimPublishBatchCommandOutput>;
+    /**
+     * Get this service's CloudFormation Resource factory.
+     */
+    cfnResourceFactory(): SimSnsCfnResourceFactory;
+    /**
+     * Get this service's SDK Command router for SDK client interception.
+     */
+    sdkCommandRouter(): SimSdkCommandRouter;
+}
+export {};
+//# sourceMappingURL=sim-sns.d.ts.map

package/dist/service/sns/sim-sns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns.d.ts","sourceRoot":"","sources":["../../../src/service/sns/sim-sns.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,KAAK,KAAK,cAAc,MAAM,oCAAoC,CAAC;AAE1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAE1E,YAAY,UAAU,GAAE,gBAAqB,EAiB5C;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,SAAS,qBAAqB,EAAE,CAEvD;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;IAED;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE/C;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,kBAAkB,EAAE,CAEnE;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE5D;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,cAAc,CAAC,oBAAoB,EAC5C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAGpD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAG5D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,cAAc,CAAC,2BAA2B,EACnD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,iCAAiC,CAAC,CAM3D;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,cAAc,CAAC,kCAAkC,EAC1D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,wCAAwC,CAAC,CAMlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,cAAc,CAAC,mCAAmC,EAC3D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yCAAyC,CAAC,CAMnE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,cAAc,CAAC,mCAAmC,EAC3D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yCAAyC,CAAC,CAMnE;IAED;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,cAAc,CAAC,iBAAiB,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAGjD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/sns/sim-sns.js

@@ -0,0 +1,188 @@
+import { BackgroundTasks, } from "../../util/background/background.js";
+import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
+import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimSnsNoDeliveryEndpoints } from "./delivery/sim-sns-no-delivery-endpoints.js";
+import { SimSnsCommands } from "./command/sim-sns-commands.js";
+import { SimSnsCfnResourceFactory } from "./cfn/sim-sns-cfn-resource-factory.js";
+import { SimSnsSdkCommandRouter } from "./sdk/sim-sns-sdk-command-router.js";
+import { SimSnsSubscriptionStore } from "./subscription/sim-sns-subscription-store.js";
+import { SimSnsTopicStore } from "./topic/sim-sns-topic-store.js";
+/**
+ * Simulated SNS. Handles SDK commands. Emulates AWS behaviour and state.
+ *
+ * Topics are scoped to an account and region, as they are on real AWS: a topic
+ * name is unique within one of those scopes, and the ARN a request reaches a
+ * topic by names the region.
+ *
+ * Only standard topics are simulated. FIFO topics are not.
+ */
+export class SimSns {
+    topics = new SimSnsTopicStore();
+    subscriptions = new SimSnsSubscriptionStore();
+    commands;
+    background;
+    sdkRouter = new SimSnsSdkCommandRouter(this);
+    cfnFactory = new SimSnsCfnResourceFactory({ sns: this });
+    constructor(properties = {}) {
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), deliveryEndpoints = new SimSnsNoDeliveryEndpoints(), } = properties;
+        this.background = background;
+        this.commands = new SimSnsCommands({
+            topics: this.topics,
+            subscriptions: this.subscriptions,
+            iam,
+            background,
+            deliveryEndpoints,
+            accountRegionScope,
+        });
+    }
+    /**
+     * Every message this simulated SNS could not deliver.
+     *
+     * Real SNS tells the publisher nothing about a failed delivery, and neither
+     * does this. A queue that is unexpectedly empty is explained here.
+     */
+    get deliveryFailures() {
+        return this.commands.fanOut.deliveryFailures;
+    }
+    /**
+     * The certificate a delivered message's `SigningCertURL` names.
+     *
+     * The URL cannot be fetched, because simulated SNS is not served over HTTP,
+     * so this is how a verifier gets at the certificate to check a signature
+     * with. A URL this scope did not issue answers with nothing.
+     */
+    signingCertificate(signingCertUrl) {
+        return this.commands.signer.certificateFor(signingCertUrl);
+    }
+    /**
+     * Find a topic by name.
+     *
+     * This is the simulator's own accessor, for tests seeding or inspecting topic
+     * state without going through a Command and its authorization.
+     */
+    findTopic(name) {
+        return this.topics.find(name);
+    }
+    /**
+     * The subscriptions of a topic, by topic name.
+     *
+     * This is the simulator's own accessor, for a test inspecting what a topic
+     * would deliver to without going through a Command and its authorization.
+     */
+    topicSubscriptions(topicName) {
+        return this.subscriptions.forTopic(topicName);
+    }
+    /**
+     * Find a subscription by ARN.
+     *
+     * This is the simulator's own accessor, for a test or a CloudFormation
+     * Resource holding the ARN a Subscribe answered with.
+     */
+    findSubscription(arn) {
+        return this.subscriptions.find(arn);
+    }
+    /**
+     * Handle a CreateTopic Command from the SDK.
+     */
+    async createTopic(command, options) {
+        await this.background.sequence();
+        return this.commands.topicCreation.handle(command, options);
+    }
+    /**
+     * Handle a ListTopics Command from the SDK.
+     */
+    async listTopics(command, options) {
+        await this.background.sequence();
+        return this.commands.topics.listTopics(command, options);
+    }
+    /**
+     * Handle a DeleteTopic Command from the SDK.
+     */
+    async deleteTopic(command, options) {
+        await this.background.sequence();
+        return this.commands.topics.deleteTopic(command, options);
+    }
+    /**
+     * Handle a GetTopicAttributes Command from the SDK.
+     */
+    async getTopicAttributes(command, options) {
+        await this.background.sequence();
+        return this.commands.topicAttributes.getTopicAttributes(command, options);
+    }
+    /**
+     * Handle a SetTopicAttributes Command from the SDK.
+     */
+    async setTopicAttributes(command, options) {
+        await this.background.sequence();
+        return this.commands.topicAttributes.setTopicAttributes(command, options);
+    }
+    /**
+     * Handle a Subscribe Command from the SDK.
+     */
+    async subscribe(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptions.subscribe(command, options);
+    }
+    /**
+     * Handle an Unsubscribe Command from the SDK.
+     */
+    async unsubscribe(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptions.unsubscribe(command, options);
+    }
+    /**
+     * Handle a ListSubscriptions Command from the SDK.
+     */
+    async listSubscriptions(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptionListings.listSubscriptions(command, options);
+    }
+    /**
+     * Handle a ListSubscriptionsByTopic Command from the SDK.
+     */
+    async listSubscriptionsByTopic(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptionListings.listSubscriptionsByTopic(command, options);
+    }
+    /**
+     * Handle a GetSubscriptionAttributes Command from the SDK.
+     */
+    async getSubscriptionAttributes(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptionAttributes.getSubscriptionAttributes(command, options);
+    }
+    /**
+     * Handle a SetSubscriptionAttributes Command from the SDK.
+     */
+    async setSubscriptionAttributes(command, options) {
+        await this.background.sequence();
+        return this.commands.subscriptionAttributes.setSubscriptionAttributes(command, options);
+    }
+    /**
+     * Handle a Publish Command from the SDK.
+     */
+    async publish(command, options) {
+        await this.background.sequence();
+        return this.commands.publish.publish(command, options);
+    }
+    /**
+     * Handle a PublishBatch Command from the SDK.
+     */
+    async publishBatch(command, options) {
+        await this.background.sequence();
+        return this.commands.publish.publishBatch(command, options);
+    }
+    /**
+     * Get this service's CloudFormation Resource factory.
+     */
+    cfnResourceFactory() {
+        return this.cfnFactory;
+    }
+    /**
+     * Get this service's SDK Command router for SDK client interception.
+     */
+    sdkCommandRouter() {
+        return this.sdkRouter;
+    }
+}
+//# sourceMappingURL=sim-sns.js.map

package/dist/service/sns/sim-sns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns.js","sourceRoot":"","sources":["../../../src/service/sns/sim-sns.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAG1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAgBlE;;;;;;;;GAQG;AACH,MAAM,OAAO,MAAM;IACA,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAChC,aAAa,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC9C,QAAQ,CAAiB;IACzB,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,UAAU,GAAG,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,iBAAiB,GAAG,IAAI,yBAAyB,EAAE,GACpD,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG;YACH,UAAU;YACV,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,cAAsB;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,SAAiB;QAClC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,GAAW;QAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAA6C,EAC7C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA4C,EAC5C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAA6C,EAC7C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA2C,EAC3C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAA6C,EAC7C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAmD,EACnD,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,iBAAiB,CACzD,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA0D,EAC1D,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,wBAAwB,CAChE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA2D,EAC3D,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,yBAAyB,CACnE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA2D,EAC3D,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,yBAAyB,CACnE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,OAAyC,EACzC,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account-id.js";
+import type { AwsRegionName } from "../../aws/sim-aws-region.js";
+/**
+ * The Lambda function ARN a subscription's endpoint names.
+ *
+ * The Region and the Account are read out alongside the name, because a
+ * delivery resolves the function in the scope the ARN gives rather than in the
+ * topic's. Real SNS invokes a function in another Account or Region, so this
+ * does too.
+ */
+export declare class SimSnsFunctionEndpointArn {
+    readonly value: string;
+    readonly regionName: AwsRegionName;
+    readonly accountId: SimAwsAccountId;
+    readonly functionName: string;
+    private constructor();
+    /**
+     * Read a function ARN, refusing anything a function could not be reached by.
+     *
+     * Reading the ARN is Lambda's own business, so the parts come from there.
+     * What SNS adds is what an unreadable one means to a `Subscribe` request,
+     * which is the same `InvalidParameterException` a queue ARN that is not one
+     * gets.
+     *
+     * A qualified ARN naming a version or an alias is refused rather than read as
+     * the unqualified function, because simulated Lambda has neither and
+     * delivering to `$LATEST` instead would be the wrong function.
+     */
+    static parse(endpoint: string): SimSnsFunctionEndpointArn;
+}
+//# sourceMappingURL=sim-sns-function-endpoint-arn.d.ts.map

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-function-endpoint-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/subscription/sim-sns-function-endpoint-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAcjE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,YAAY,EAAE,MAAM,CAAC;IAErC,OAAO,eAKN;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAyBxD;CACF"}