aws-sdk-core 2.4.0 → 3.53.0

data/lib/aws-sdk-core/plugins/ec2_copy_encrypted_snapshot.rb

@@ -1,87 +0,0 @@
-module Aws
-  module Plugins
-
-    # This plugin auto populates the following request params for the
-    # CopySnapshot API:
-    #
-    # * `:destination_region`
-    # * `:presigned_url`
-    #
-    # These params are required by EC2 when copying an encrypted snapshot.
-    class EC2CopyEncryptedSnapshot < Seahorse::Client::Plugin
-
-      # @api private
-      class Handler < Seahorse::Client::Handler
-
-        def call(context)
-          params = context.params
-          params[:destination_region] = context.config.region
-          params[:presigned_url] = presigned_url(context.client, params)
-          @handler.call(context)
-        end
-
-        private
-
-        def presigned_url(client, params)
-          client = source_region_client(client, params)
-          client.handle(PresignHandler, step: :build, priority: 0)
-          client.handlers.remove(Handler)
-          client.copy_snapshot(params).data # presigned url
-        end
-
-        def source_region_client(client, params)
-          EC2::Client.new({
-            region: params[:source_region] || 'region',
-            credentials: client.config.credentials,
-          })
-        end
-
-      end
-
-      # This handler intentionally does NOT call the next handler in
-      # the stack.  It generates a presigned url from the request
-      # and returns it as the response data.
-      #
-      # Before signing:
-      #
-      # * The HTTP method is changed from POST to GET
-      # * The url-encoded body is moved to the querystring
-      #
-      # @api private
-      class PresignHandler < Seahorse::Client::Handler
-
-        def call(context)
-          convert_post_2_get(context)
-          Seahorse::Client::Response.new(
-            context: context,
-            data: presigned_url(context.http_request, context.config))
-        end
-
-        private
-
-        def convert_post_2_get(context)
-          context.http_request.http_method = 'GET'
-          context.http_request.endpoint = new_endpoint(context)
-          context.http_request.body = ''
-          context.http_request.headers.delete('Content-Type')
-        end
-
-        def new_endpoint(context)
-          body = context.http_request.body_contents
-          endpoint = context.http_request.endpoint
-          endpoint.query = body
-          endpoint
-        end
-
-        def presigned_url(http_request, config)
-          signer = Signers::V4.new(config.credentials, 'ec2', config.region)
-          signer.presigned_url(http_request, expires_in: 3600)
-        end
-
-      end
-
-      handler(Handler, step: :initialize, operations: [:copy_snapshot])
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/ec2_region_validation.rb

@@ -1,17 +0,0 @@
-module Aws
-  module Plugins
-    # @api private
-    class EC2RegionValidation < Seahorse::Client::Plugin
-
-      def after_initialize(client)
-        if region = client.config.region
-          if matches = region.match(/^(\w+-\w+-\d+)[a-z]$/)
-            msg = ":region option must a region name, not an availability "
-            msg << "zone name; try `#{matches[1]}' instead of `#{matches[0]}'"
-            raise ArgumentError, msg
-          end
-        end
-      end
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/glacier_account_id.rb

@@ -1,19 +0,0 @@
-module Aws
-  module Plugins
-
-    # @seahorse.client.option [String] :account_id ('-')
-    #   The default Glacier AWS account ID to use for all glacier
-    #   operations. The default value of `-` uses the account
-    #   your `:credentials` belong to.
-    #
-    class GlacierAccountId < Seahorse::Client::Plugin
-
-      option :account_id, '-'
-
-      handle_request(step: :initialize) do |context|
-        context.params[:account_id] ||= context.config.account_id
-      end
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/glacier_api_version.rb

@@ -1,19 +0,0 @@
-module Aws
-  module Plugins
-    class GlacierApiVersion < Seahorse::Client::Plugin
-
-      class Handler < Seahorse::Client::Handler
-
-        def call(context)
-          version = context.config.api.version
-          context.http_request.headers['x-amz-glacier-version'] = version
-          @handler.call(context)
-        end
-
-      end
-
-      handler(Handler)
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/glacier_checksums.rb

@@ -1,87 +0,0 @@
-require 'openssl'
-
-module Aws
-  module Plugins
-
-    # Computes the `:checksum` of the HTTP request body for operations
-    # that require the `X-Amz-Sha256-Tree-Hash` header.  This includes:
-    #
-    # * `:complete_multipart_upload`
-    # * `:upload_archive`
-    # * `:upload_multipart_part`
-    #
-    # The `:upload_archive` and `:upload_multipart_part` operations
-    # accept a `:checksum` request parameter.  If this param
-    # is present, then the checksum is assumed to be the proper
-    # tree hash of the file to be uploaded.  If this param is
-    # not present, then the required tree hash checksum will
-    # be generated.
-    #
-    # The `:complete_multipart_upload` operation does not accept
-    # a checksum and this plugin will always compute this of the
-    # HTTP request body on your behalf.
-    class GlacierChecksums < Seahorse::Client::Plugin
-
-      CHECKSUM_OPERATIONS = [
-        :upload_archive,
-        :upload_multipart_part,
-      ]
-
-      class Handler < Seahorse::Client::Handler
-
-        HASH = 'X-Amz-Content-Sha256'
-
-        TREE_HASH = 'X-Amz-Sha256-Tree-Hash'
-
-        def call(context)
-          unless context.http_request.headers[TREE_HASH]
-            populate_checksum_headers(context)
-          end
-          @handler.call(context)
-        end
-
-        private
-
-        def populate_checksum_headers(context)
-          compute_checksums(context.http_request.body) do |hash, tree_hash|
-            context.http_request.headers[HASH] = hash
-            context.http_request.headers[TREE_HASH] = tree_hash.digest
-            context[:tree_hash] = tree_hash
-          end
-        end
-
-        # Computes two checksums of the body.  The tree hash is required
-        # by Glacier for operations where you upload a file.  The other
-        # checksum is required by signature version 4.  We compute both
-        # here so the sigv4 signer does not need to re-read the body.
-        def compute_checksums(body, &block)
-
-          tree_hash = TreeHash.new
-          digest = OpenSSL::Digest.new('sha256')
-
-          # if the body is empty/EOF, then we should compute the
-          # digests of the empty string
-          if body.size == 0
-            tree_hash.update('')
-            digest.update('')
-          end
-
-          # Rewind body before performing checksum computation.
-          body.rewind
-
-          while chunk = body.read(1024 * 1024) # read 1MB
-            tree_hash.update(chunk)
-            digest.update(chunk)
-          end
-          body.rewind
-
-          yield(digest.to_s, tree_hash)
-
-        end
-      end
-
-      handler(Handler, operations: CHECKSUM_OPERATIONS)
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/machine_learning_predict_endpoint.rb

@@ -1,20 +0,0 @@
-module Aws
-  module Plugins
-    # @api private
-    class MachineLearningPredictEndpoint < Seahorse::Client::Plugin
-
-      class Handler < Seahorse::Client::Handler
-
-        def call(context)
-          endpoint = context.params.delete(:predict_endpoint)
-          context.http_request.endpoint = URI.parse(endpoint.to_s)
-          @handler.call(context)
-        end
-
-      end
-
-      handle(Handler, operations: [:predict])
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/request_signer.rb

@@ -1,138 +0,0 @@
-module Aws
-  module Plugins
-
-    # @seahorse.client.option [required, Credentials] :credentials Your
-    #   AWS credentials.  The following locations will be searched in order
-    #   for credentials:
-    #
-    #   * `:access_key_id`, `:secret_access_key`, and `:session_token` options
-    #   * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
-    #   * `HOME/.aws/credentials` shared credentials file
-    #   * EC2 instance profile credentials
-    #
-    # @seahorse.client.option [String] :profile Used when loading credentials
-    #   from the shared credentials file at HOME/.aws/credentials.  When not
-    #   specified, 'default' is used.
-    #
-    # @seahorse.client.option [String] :access_key_id Used to set credentials
-    #   statically.
-    #
-    # @seahorse.client.option [String] :secret_access_key Used to set
-    #   credentials statically.
-    #
-    # @seahorse.client.option [String] :session_token Used to set credentials
-    #   statically.
-    #
-    class RequestSigner < Seahorse::Client::Plugin
-
-      option(:access_key_id)
-
-      option(:secret_access_key)
-
-      option(:session_token)
-
-      option(:profile)
-
-      option(:credentials) do |config|
-        CredentialProviderChain.new(config).resolve
-      end
-
-      # Intentionally not documented - this should go away when all
-      # services support signature version 4 in every region.
-      option(:signature_version) do |cfg|
-        cfg.api.metadata['signatureVersion']
-      end
-
-      option(:sigv4_name) do |cfg|
-        cfg.api.metadata['signingName'] || cfg.api.metadata['endpointPrefix']
-      end
-
-      option(:sigv4_region) do |cfg|
-        prefix = cfg.api.metadata['endpointPrefix']
-        if prefix.nil?
-          cfg.region
-        elsif cfg.endpoint.to_s.match(/#{prefix}\.amazonaws\.com/)
-          'us-east-1'
-        else
-          cfg.region
-        end
-      end
-
-      class Handler < Seahorse::Client::Handler
-
-        SIGNERS = {
-          'v4'      => Signers::V4,
-          'v3https' => Signers::V3,
-          'v2'      => Signers::V2,
-          's3'      => Signers::S3,
-        }
-
-        STS_UNSIGNED_REQUESTS = Set.new(%w(
-          AssumeRoleWithSAML
-          AssumeRoleWithWebIdentity
-        ))
-
-        COGNITO_IDENTITY_UNSIGNED_REQUESTS = Set.new(%w(
-          GetCredentialsForIdentity
-          GetId
-          GetOpenIdToken
-          UnlinkIdentity
-        ))
-
-        def call(context)
-          sign_authenticated_requests(context) unless unsigned_request?(context)
-          @handler.call(context)
-        end
-
-        private
-
-        def sign_authenticated_requests(context)
-          require_credentials(context)
-          if signer = SIGNERS[context.config.signature_version]
-            require_credentials(context)
-            signer.sign(context)
-          end
-        end
-
-        def require_credentials(context)
-          if missing_credentials?(context)
-            msg = 'unable to sign request without credentials set'
-            raise Errors::MissingCredentialsError, msg
-          end
-        end
-
-        def missing_credentials?(context)
-          context.config.credentials.nil? or
-          !context.config.credentials.set?
-        end
-
-        def unsigned_request?(context)
-          if context.config.api.metadata['endpointPrefix'] == 'sts'
-            STS_UNSIGNED_REQUESTS.include?(context.operation.name)
-          elsif context.config.api.metadata['endpointPrefix'] == 'cloudsearchdomain'
-            context.config.credentials.nil? || !context.config.credentials.set?
-          elsif context.config.api.metadata['endpointPrefix'] == 'cognito-identity'
-            COGNITO_IDENTITY_UNSIGNED_REQUESTS.include?(context.operation.name)
-          else
-            false
-          end
-        end
-
-      end
-
-      def add_handlers(handlers, config)
-        # See the S3RequestSignerPlugin for Amazon S3 signature logic
-        unless config.sigv4_name == 's3'
-          operations = []
-          config.api.operation_names.each do |operation_name|
-            if config.api.operation(operation_name)['authtype'] != 'none'
-              operations << operation_name
-            end
-          end
-          handlers.add(Handler, step: :sign, operations: operations)
-        end
-      end
-
-    end
-  end
-end

data/lib/aws-sdk-core/plugins/route_53_id_fix.rb

@@ -1,55 +0,0 @@
-module Aws
-  module Plugins
-
-    # The Amazon Route 53 API returns hosted zones and request Ids as strings
-    # formatted like:
-    #
-    #     '/hostedzone/ID'
-    #     '/change/ID'
-    #
-    # However, their API does not accept Ids with the '/hostedzone/' or
-    # '/change/' prefixes. This plugin removes those prefixes before
-    # serializing their Ids onto the request. This allows a user to
-    # use the prefixed Ids returned in {Aws::Route53::Client} responses.
-    class Route53IdFix < Seahorse::Client::Plugin
-
-      class Handler < Seahorse::Client::Handler
-
-        def call(context)
-          remove_id_prefixes(context.params)
-          @handler.call(context)
-        end
-
-        private
-
-        def remove_id_prefixes(params)
-          # Many operations accept of :id or :hosted_zone_id as a root-level
-          # param, pruning prefixes from those.
-          [:id, :hosted_zone_id, :delegation_set_id].each do |key|
-            params[key] = remove_prefix(params[key]) if params[key]
-          end
-
-          # The `#change_resource_record_sets operation` has a deeply nested
-          # target with a :hosted_zone_id that needs to be pruned.
-          if params[:change_batch]
-            params[:change_batch][:changes].each do |batch|
-              if target = batch[:resource_record_set][:alias_target]
-                target[:hosted_zone_id] = remove_prefix(target[:hosted_zone_id])
-              end
-            end
-          end
-        end
-
-        def remove_prefix(str)
-          str.sub(/^\/(hostedzone|change|delegationset)\//, '')
-        end
-
-      end
-
-      # Run this handler after params have been validated, but before
-      # they are serialized onto the request
-      handler(Handler, priority: 99, step: :build)
-
-    end
-  end
-end