aws-sdk-core 3.201.3 → 3.209.1

data/lib/aws-sdk-core/telemetry.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+require_relative 'telemetry/base'
+require_relative 'telemetry/no_op'
+require_relative 'telemetry/otel'
+require_relative 'telemetry/span_kind'
+require_relative 'telemetry/span_status'
+
+module Aws
+  # Observability is the extent to which a system's current state can be
+  # inferred from the data it emits. The data emitted is commonly referred
+  # as Telemetry. The AWS SDK for Ruby currently supports traces as
+  # a telemetry signal.
+  #
+  # A telemetry provider is used to emit telemetry data. By default, the
+  # {NoOpTelemetryProvider} will not record or emit any telemetry data.
+  # The SDK currently supports OpenTelemetry (OTel) as a provider. See
+  # {OTelProvider} for more information.
+  #
+  # If a provider isn't supported, you can implement your own provider by
+  # inheriting the following base classes and implementing the interfaces
+  # defined:
+  # * {TelemetryProviderBase}
+  # * {ContextManagerBase}
+  # * {TracerProviderBase}
+  # * {TracerBase}
+  # * {SpanBase}
+  module Telemetry
+    class << self
+      # @api private
+      def module_to_tracer_name(module_name)
+        "#{module_name.gsub('::', '.')}.client".downcase
+      end
+
+      # @api private
+      def http_request_attrs(context)
+        {
+          'http.method' => context.http_request.http_method,
+          'net.protocol.name' => 'http'
+        }.tap do |h|
+          h['net.protocol.version'] =
+            if context.client.is_a? Seahorse::Client::AsyncBase
+              '2'
+            else
+              Net::HTTP::HTTPVersion
+            end
+
+          unless context.config.stub_responses
+            h['net.peer.name'] = context.http_request.endpoint.host
+            h['net.peer.port'] = context.http_request.endpoint.port.to_s
+          end
+
+          if context.http_request.headers.key?('Content-Length')
+            h['http.request_content_length'] =
+              context.http_request.headers['Content-Length']
+          end
+        end
+      end
+
+      # @api private
+      def http_response_attrs(context)
+        {
+          'http.status_code' => context.http_response.status_code.to_s
+        }.tap do |h|
+          if context.http_response.headers.key?('Content-Length')
+            h['http.response_content_length'] =
+              context.http_response.headers['Content-Length']
+          end
+
+          if context.http_response.headers.key?('x-amz-request-id')
+            h['aws.request_id'] =
+              context.http_response.headers['x-amz-request-id']
+          end
+        end
+      end
+    end
+  end
+end

data/lib/aws-sdk-core/waiters/poller.rb

@@ -29,7 +29,7 @@ module Aws
       # * `:retry`   - The waiter may be retried.
       # * `:error`   - The waiter encountered an un-expected error.
       #
-      # @example A trival (bad) example of a waiter that polls indefinetly.
+      # @example A trivial (bad) example of a waiter that polls indefinetly.
       #
       #   loop do
       #
@@ -96,8 +96,13 @@ module Aws
       end
 
       def matches_error?(acceptor, response)
-        Aws::Errors::ServiceError === response.error &&
-        response.error.code == acceptor['expected'].delete('.')
+        case acceptor['expected']
+        when 'false' then response.error.nil?
+        when 'true' then !response.error.nil?
+        else
+          response.error.is_a?(Aws::Errors::ServiceError) &&
+            response.error.code == acceptor['expected'].delete('.')
+        end
       end
 
       def path(acceptor)
@@ -107,7 +112,7 @@ module Aws
       def non_empty_array(acceptor, response, &block)
         if response.data
           values = JMESPath.search(path(acceptor), response.data)
-          Array === values && values.count > 0 ? yield(values) : false
+          values.is_a?(Array) && values.count > 0 ? yield(values) : false
         else
           false
         end

data/lib/aws-sdk-core.rb

@@ -3,125 +3,80 @@
 require 'aws-partitions'
 require 'seahorse'
 require 'jmespath'
+require 'aws-sigv4'
 
 require_relative 'aws-sdk-core/deprecations'
-
-# credential providers
-
-require_relative 'aws-sdk-core/credential_provider'
-require_relative 'aws-sdk-core/refreshing_credentials'
-require_relative 'aws-sdk-core/assume_role_credentials'
-require_relative 'aws-sdk-core/assume_role_web_identity_credentials'
-require_relative 'aws-sdk-core/credentials'
-require_relative 'aws-sdk-core/credential_provider_chain'
-require_relative 'aws-sdk-core/ecs_credentials'
-require_relative 'aws-sdk-core/instance_profile_credentials'
-require_relative 'aws-sdk-core/shared_credentials'
-require_relative 'aws-sdk-core/process_credentials'
-require_relative 'aws-sdk-core/sso_credentials'
-
-# tokens and token providers
-require_relative 'aws-sdk-core/token'
-require_relative 'aws-sdk-core/token_provider'
-require_relative 'aws-sdk-core/static_token_provider'
-require_relative 'aws-sdk-core/refreshing_token'
-require_relative 'aws-sdk-core/sso_token_provider'
-require_relative 'aws-sdk-core/token_provider_chain'
-require_relative 'aws-sdk-core/plugins/bearer_authorization'
-
-# client modules
-
-require_relative 'aws-sdk-core/client_stubs'
-require_relative 'aws-sdk-core/async_client_stubs'
-require_relative 'aws-sdk-core/eager_loader'
-require_relative 'aws-sdk-core/errors'
-require_relative 'aws-sdk-core/pageable_response'
-require_relative 'aws-sdk-core/pager'
-require_relative 'aws-sdk-core/param_converter'
-require_relative 'aws-sdk-core/param_validator'
-require_relative 'aws-sdk-core/shared_config'
-require_relative 'aws-sdk-core/structure'
-require_relative 'aws-sdk-core/type_builder'
-require_relative 'aws-sdk-core/util'
-
-# resource classes
-
-require_relative 'aws-sdk-core/resources/collection'
-
-# logging
-
-require_relative 'aws-sdk-core/log/formatter'
-require_relative 'aws-sdk-core/log/param_filter'
-require_relative 'aws-sdk-core/log/param_formatter'
-
-# stubbing
-
-require_relative 'aws-sdk-core/stubbing/empty_stub'
-require_relative 'aws-sdk-core/stubbing/data_applicator'
-require_relative 'aws-sdk-core/stubbing/stub_data'
-require_relative 'aws-sdk-core/stubbing/xml_error'
-
-# stubbing protocols
-
-require_relative 'aws-sdk-core/stubbing/protocols/json'
-require_relative 'aws-sdk-core/stubbing/protocols/rest'
-require_relative 'aws-sdk-core/stubbing/protocols/rest_json'
-require_relative 'aws-sdk-core/stubbing/protocols/rest_xml'
-require_relative 'aws-sdk-core/stubbing/protocols/query'
-require_relative 'aws-sdk-core/stubbing/protocols/ec2'
-require_relative 'aws-sdk-core/stubbing/protocols/rpc_v2'
-require_relative 'aws-sdk-core/stubbing/protocols/api_gateway'
-
-# protocols
-
-require_relative 'aws-sdk-core/error_handler'
-require_relative 'aws-sdk-core/rest'
-require_relative 'aws-sdk-core/xml'
-require_relative 'aws-sdk-core/json'
-require_relative 'aws-sdk-core/query'
-require_relative 'aws-sdk-core/rpc_v2'
-
-# event stream
-
-require_relative 'aws-sdk-core/binary'
-require_relative 'aws-sdk-core/event_emitter'
-
-# endpoint discovery
-
-require_relative 'aws-sdk-core/endpoint_cache'
-
-# client metrics
-
-require_relative 'aws-sdk-core/client_side_monitoring/request_metrics'
-require_relative 'aws-sdk-core/client_side_monitoring/publisher'
-
-# utilities
-
-require_relative 'aws-sdk-core/arn'
-require_relative 'aws-sdk-core/arn_parser'
-require_relative 'aws-sdk-core/ec2_metadata'
-require_relative 'aws-sdk-core/lru_cache'
-
-# dynamic endpoints
-require_relative 'aws-sdk-core/endpoints'
-require_relative 'aws-sdk-core/plugins/signature_v4'
-
 # defaults
 require_relative 'aws-defaults'
 
-# plugins
-# loaded through building STS or SSO ..
-
-# aws-sdk-sts is included to support Aws::AssumeRoleCredentials
-require_relative 'aws-sdk-sts'
-
-# aws-sdk-sso is included to support Aws::SSOCredentials
-require_relative 'aws-sdk-sso'
-require_relative 'aws-sdk-ssooidc'
-
 module Aws
 
-  CORE_GEM_VERSION = File.read(File.expand_path('../../VERSION', __FILE__)).strip
+  autoload :IniParser, 'aws-sdk-core/ini_parser'
+
+  # Credentials and credentials providers
+  autoload :Credentials, 'aws-sdk-core/credentials'
+  autoload :CredentialProvider, 'aws-sdk-core/credential_provider'
+  autoload :RefreshingCredentials, 'aws-sdk-core/refreshing_credentials'
+  autoload :AssumeRoleCredentials, 'aws-sdk-core/assume_role_credentials'
+  autoload :AssumeRoleWebIdentityCredentials, 'aws-sdk-core/assume_role_web_identity_credentials'
+  autoload :CredentialProviderChain, 'aws-sdk-core/credential_provider_chain'
+  autoload :ECSCredentials, 'aws-sdk-core/ecs_credentials'
+  autoload :InstanceProfileCredentials, 'aws-sdk-core/instance_profile_credentials'
+  autoload :SharedCredentials, 'aws-sdk-core/shared_credentials'
+  autoload :ProcessCredentials, 'aws-sdk-core/process_credentials'
+  autoload :SSOCredentials, 'aws-sdk-core/sso_credentials'
+
+
+  # tokens and token providers
+  autoload :Token, 'aws-sdk-core/token'
+  autoload :TokenProvider, 'aws-sdk-core/token_provider'
+  autoload :StaticTokenProvider, 'aws-sdk-core/static_token_provider'
+  autoload :RefreshingToken, 'aws-sdk-core/refreshing_token'
+  autoload :SSOTokenProvider, 'aws-sdk-core/sso_token_provider'
+  autoload :TokenProviderChain, 'aws-sdk-core/token_provider_chain'
+
+  # client modules
+  autoload :ClientStubs, 'aws-sdk-core/client_stubs'
+  autoload :AsyncClientStubs, 'aws-sdk-core/async_client_stubs'
+  autoload :EagerLoader, 'aws-sdk-core/eager_loader'
+  autoload :Errors, 'aws-sdk-core/errors'
+  autoload :PageableResponse, 'aws-sdk-core/pageable_response'
+  autoload :Pager, 'aws-sdk-core/pager'
+  autoload :ParamConverter, 'aws-sdk-core/param_converter'
+  autoload :ParamValidator, 'aws-sdk-core/param_validator'
+  autoload :SharedConfig, 'aws-sdk-core/shared_config'
+  autoload :Structure, 'aws-sdk-core/structure'
+  autoload :EmptyStructure, 'aws-sdk-core/structure'
+  autoload :TypeBuilder, 'aws-sdk-core/type_builder'
+  autoload :Util, 'aws-sdk-core/util'
+
+  # protocols
+  autoload :ErrorHandler, 'aws-sdk-core/error_handler'
+  autoload :Rest, 'aws-sdk-core/rest'
+  autoload :Xml, 'aws-sdk-core/xml'
+  autoload :Json, 'aws-sdk-core/json'
+  autoload :Query, 'aws-sdk-core/query'
+  autoload :RpcV2, 'aws-sdk-core/rpc_v2'
+
+  # event stream
+  autoload :Binary, 'aws-sdk-core/binary'
+  autoload :EventEmitter, 'aws-sdk-core/event_emitter'
+
+  # endpoint discovery
+  autoload :EndpointCache, 'aws-sdk-core/endpoint_cache'
+
+  autoload :Telemetry, 'aws-sdk-core/telemetry'
+
+  # utilities
+  autoload :ARN, 'aws-sdk-core/arn'
+  autoload :ARNParser, 'aws-sdk-core/arn_parser'
+  autoload :EC2Metadata, 'aws-sdk-core/ec2_metadata'
+  autoload :LRUCache, 'aws-sdk-core/lru_cache'
+
+  # dynamic endpoints
+  autoload :Endpoints, 'aws-sdk-core/endpoints'
+
+  CORE_GEM_VERSION = File.read(File.expand_path('../VERSION', __dir__)).strip
 
   @config = {}
 
@@ -205,3 +160,18 @@ module Aws
 
   end
 end
+
+# Setup additional autoloads/modules
+require_relative 'aws-sdk-core/client_side_monitoring'
+require_relative 'aws-sdk-core/log'
+require_relative 'aws-sdk-core/plugins'
+require_relative 'aws-sdk-core/resources'
+require_relative 'aws-sdk-core/stubbing'
+require_relative 'aws-sdk-core/waiters'
+
+# aws-sdk-sts is included to support Aws::AssumeRoleCredentials
+require_relative 'aws-sdk-sts'
+
+# aws-sdk-sso is included to support Aws::SSOCredentials
+require_relative 'aws-sdk-sso'
+require_relative 'aws-sdk-ssooidc'

data/lib/aws-sdk-sso/client.rb

@@ -32,11 +32,10 @@ require 'aws-sdk-core/plugins/checksum_algorithm.rb'
 require 'aws-sdk-core/plugins/request_compression.rb'
 require 'aws-sdk-core/plugins/defaults_mode.rb'
 require 'aws-sdk-core/plugins/recursion_detection.rb'
+require 'aws-sdk-core/plugins/telemetry.rb'
 require 'aws-sdk-core/plugins/sign.rb'
 require 'aws-sdk-core/plugins/protocols/rest_json.rb'
 
-Aws::Plugins::GlobalConfiguration.add_identifier(:sso)
-
 module Aws::SSO
   # An API client for SSO.  To construct a client, you need to configure a `:region` and `:credentials`.
   #
@@ -83,6 +82,7 @@ module Aws::SSO
     add_plugin(Aws::Plugins::RequestCompression)
     add_plugin(Aws::Plugins::DefaultsMode)
     add_plugin(Aws::Plugins::RecursionDetection)
+    add_plugin(Aws::Plugins::Telemetry)
     add_plugin(Aws::Plugins::Sign)
     add_plugin(Aws::Plugins::Protocols::RestJson)
     add_plugin(Aws::SSO::Plugins::Endpoints)
@@ -128,13 +128,15 @@ module Aws::SSO
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
-    #     * The `:access_key_id`, `:secret_access_key`, and `:session_token` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
+    #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
+    #       `:account_id` options.
+    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
+    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
     #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
     #       to true.
@@ -153,6 +155,8 @@ module Aws::SSO
     #
     #   @option options [String] :access_key_id
     #
+    #   @option options [String] :account_id
+    #
     #   @option options [Boolean] :active_endpoint_cache (false)
     #     When set to `true`, a thread polling for endpoints will be running in
     #     the background every 60 secs (default). Defaults to `false`.
@@ -330,6 +334,16 @@ module Aws::SSO
     #     ** Please note ** When response stubbing is enabled, no HTTP
     #     requests are made, and retries are disabled.
     #
+    #   @option options [Aws::Telemetry::TelemetryProviderBase] :telemetry_provider (Aws::Telemetry::NoOpTelemetryProvider)
+    #     Allows you to provide a telemetry provider, which is used to
+    #     emit telemetry data. By default, uses `NoOpTelemetryProvider` which
+    #     will not record or emit any telemetry data. The SDK supports the
+    #     following telemetry providers:
+    #
+    #     * OpenTelemetry (OTel) - To use the OTel provider, install and require the
+    #     `opentelemetry-sdk` gem and then, pass in an instance of a
+    #     `Aws::Telemetry::OTelProvider` for telemetry provider.
+    #
     #   @option options [Aws::TokenProvider] :token_provider
     #     A Bearer Token Provider. This can be an instance of any one of the
     #     following classes:
@@ -357,7 +371,9 @@ module Aws::SSO
     #     sending the request.
     #
     #   @option options [Aws::SSO::EndpointProvider] :endpoint_provider
-    #     The endpoint provider used to resolve endpoints. Any object that responds to `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to `Aws::SSO::EndpointParameters`
+    #     The endpoint provider used to resolve endpoints. Any object that responds to
+    #     `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to
+    #     `Aws::SSO::EndpointParameters`.
     #
     #   @option options [Float] :http_continue_timeout (1)
     #     The number of seconds to wait for a 100-continue response before sending the
@@ -413,6 +429,12 @@ module Aws::SSO
     #   @option options [String] :ssl_ca_store
     #     Sets the X509::Store to verify peer certificate.
     #
+    #   @option options [OpenSSL::X509::Certificate] :ssl_cert
+    #     Sets a client certificate when creating http connections.
+    #
+    #   @option options [OpenSSL::PKey] :ssl_key
+    #     Sets a client key when creating http connections.
+    #
     #   @option options [Float] :ssl_timeout
     #     Sets the SSL timeout in seconds
     #
@@ -635,14 +657,19 @@ module Aws::SSO
     # @api private
     def build_request(operation_name, params = {})
       handlers = @handlers.for(operation_name)
+      tracer = config.telemetry_provider.tracer_provider.tracer(
+        Aws::Telemetry.module_to_tracer_name('Aws::SSO')
+      )
       context = Seahorse::Client::RequestContext.new(
         operation_name: operation_name,
         operation: config.api.operation(operation_name),
         client: self,
         params: params,
-        config: config)
+        config: config,
+        tracer: tracer
+      )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.201.3'
+      context[:gem_version] = '3.209.1'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso/client_api.rb

@@ -7,6 +7,7 @@
 #
 # WARNING ABOUT GENERATED CODE
 
+
 module Aws::SSO
   # @api private
   module ClientApi

data/lib/aws-sdk-sso/endpoints.rb

@@ -14,56 +14,44 @@ module Aws::SSO
 
     class GetRoleCredentials
       def self.build(context)
-        unless context.config.regional_endpoint
-          endpoint = context.config.endpoint.to_s
-        end
         Aws::SSO::EndpointParameters.new(
           region: context.config.region,
           use_dual_stack: context.config.use_dualstack_endpoint,
           use_fips: context.config.use_fips_endpoint,
-          endpoint: endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
         )
       end
     end
 
     class ListAccountRoles
       def self.build(context)
-        unless context.config.regional_endpoint
-          endpoint = context.config.endpoint.to_s
-        end
         Aws::SSO::EndpointParameters.new(
           region: context.config.region,
           use_dual_stack: context.config.use_dualstack_endpoint,
           use_fips: context.config.use_fips_endpoint,
-          endpoint: endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
         )
       end
     end
 
     class ListAccounts
       def self.build(context)
-        unless context.config.regional_endpoint
-          endpoint = context.config.endpoint.to_s
-        end
         Aws::SSO::EndpointParameters.new(
           region: context.config.region,
           use_dual_stack: context.config.use_dualstack_endpoint,
           use_fips: context.config.use_fips_endpoint,
-          endpoint: endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
         )
       end
     end
 
     class Logout
       def self.build(context)
-        unless context.config.regional_endpoint
-          endpoint = context.config.endpoint.to_s
-        end
         Aws::SSO::EndpointParameters.new(
           region: context.config.region,
           use_dual_stack: context.config.use_dualstack_endpoint,
           use_fips: context.config.use_fips_endpoint,
-          endpoint: endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
         )
       end
     end

data/lib/aws-sdk-sso/plugins/endpoints.rb

@@ -15,11 +15,11 @@ module Aws::SSO
         :endpoint_provider,
         doc_type: 'Aws::SSO::EndpointProvider',
         rbs_type: 'untyped',
-        docstring: 'The endpoint provider used to resolve endpoints. Any '\
-                   'object that responds to `#resolve_endpoint(parameters)` '\
-                   'where `parameters` is a Struct similar to '\
-                   '`Aws::SSO::EndpointParameters`'
-      ) do |cfg|
+        docstring: <<~DOCS) do |_cfg|
+The endpoint provider used to resolve endpoints. Any object that responds to
+`#resolve_endpoint(parameters)` where `parameters` is a Struct similar to
+`Aws::SSO::EndpointParameters`.
+        DOCS
         Aws::SSO::EndpointProvider.new
       end
 
@@ -40,11 +40,23 @@ module Aws::SSO
           context[:auth_scheme] =
             Aws::Endpoints.resolve_auth_scheme(context, endpoint)
 
-          @handler.call(context)
+          with_metrics(context) { @handler.call(context) }
         end
 
         private
 
+        def with_metrics(context, &block)
+          metrics = []
+          metrics << 'ENDPOINT_OVERRIDE' unless context.config.regional_endpoint
+          if context[:auth_scheme] && context[:auth_scheme]['name'] == 'sigv4a'
+            metrics << 'SIGV4A_SIGNING'
+          end
+          if context.config.credentials&.credentials&.account_id
+            metrics << 'RESOLVED_ACCOUNT_ID'
+          end
+          Aws::Plugins::UserAgent.metric(*metrics, &block)
+        end
+
         def apply_endpoint_headers(context, headers)
           headers.each do |key, values|
             value = values

data/lib/aws-sdk-sso/types.rb

@@ -315,3 +315,4 @@ module Aws::SSO
 
   end
 end
+

data/lib/aws-sdk-sso.rb

@@ -13,16 +13,7 @@ unless Module.const_defined?(:Aws)
   require 'aws-sigv4'
 end
 
-require_relative 'aws-sdk-sso/types'
-require_relative 'aws-sdk-sso/client_api'
-require_relative 'aws-sdk-sso/plugins/endpoints.rb'
-require_relative 'aws-sdk-sso/client'
-require_relative 'aws-sdk-sso/errors'
-require_relative 'aws-sdk-sso/resource'
-require_relative 'aws-sdk-sso/endpoint_parameters'
-require_relative 'aws-sdk-sso/endpoint_provider'
-require_relative 'aws-sdk-sso/endpoints'
-require_relative 'aws-sdk-sso/customizations'
+Aws::Plugins::GlobalConfiguration.add_identifier(:sso)
 
 # This module provides support for AWS Single Sign-On. This module is available in the
 # `aws-sdk-core` gem.
@@ -53,7 +44,20 @@ require_relative 'aws-sdk-sso/customizations'
 #
 # @!group service
 module Aws::SSO
+  autoload :Types, 'aws-sdk-sso/types'
+  autoload :ClientApi, 'aws-sdk-sso/client_api'
+  module Plugins
+    autoload :Endpoints, 'aws-sdk-sso/plugins/endpoints.rb'
+  end
+  autoload :Client, 'aws-sdk-sso/client'
+  autoload :Errors, 'aws-sdk-sso/errors'
+  autoload :Resource, 'aws-sdk-sso/resource'
+  autoload :EndpointParameters, 'aws-sdk-sso/endpoint_parameters'
+  autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
+  autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.201.3'
+  GEM_VERSION = '3.209.1'
 
 end
+
+require_relative 'aws-sdk-sso/customizations'