@aws-amplify/storage 6.6.10 → 6.6.11-storage-browser-integrity.2a9053f.0

package/package.json

@@ -1,109 +1,120 @@
 {
-	"name": "@aws-amplify/storage",
-	"version": "6.6.10",
-	"description": "Storage category of aws-amplify",
-	"main": "./dist/cjs/index.js",
-	"module": "./dist/esm/index.mjs",
-	"react-native": {
-		"./dist/cjs/index": "./src/index.ts",
-		"fast-xml-parser": "fast-xml-parser",
-		"buffer": "buffer"
-	},
-	"typings": "./dist/esm/index.d.ts",
-	"browser": {
-		"./dist/esm/providers/s3/utils/client/runtime/base64/index.native.mjs": "./dist/esm/providers/s3/utils/client/runtime/base64/index.browser.mjs",
-		"./dist/esm/providers/s3/utils/client/runtime/s3TransferHandler/fetch.mjs": "./dist/esm/providers/s3/utils/client/runtime/s3TransferHandler/xhr.mjs",
-		"./dist/esm/providers/s3/utils/client/runtime/xmlParser/pureJs.mjs": "./dist/esm/providers/s3/utils/client/runtime/xmlParser/dom.mjs",
-		"fast-xml-parser": false,
-		"buffer": false
-	},
-	"sideEffects": false,
-	"publishConfig": {
-		"access": "public"
-	},
-	"scripts": {
-		"test": "npm run lint && jest -w 1 --coverage --logHeapUsage",
-		"build-with-test": "npm test && npm run build",
-		"build:umd": "webpack && webpack --config ./webpack.config.dev.js",
-		"build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
-		"build:watch": "npm run build:esm-cjs -- --watch",
-		"build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
-		"clean": "npm run clean:size && rimraf lib-esm lib dist",
-		"clean:size": "rimraf dual-publish-tmp tmp*",
-		"format": "echo \"Not implemented\"",
-		"lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
-		"lint:fix": "eslint '**/*.{ts,tsx}' --fix",
-		"ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 90.31"
-	},
-	"typesVersions": {
-		">=4.2": {
-			"s3": [
-				"./dist/esm/providers/s3/index.d.ts"
-			],
-			"server": [
-				"./dist/esm/server.d.ts"
-			],
-			"s3/server": [
-				"./dist/esm/providers/s3/server.d.ts"
-			]
-		}
-	},
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/aws-amplify/amplify-js.git"
-	},
-	"author": "Amazon Web Services",
-	"license": "Apache-2.0",
-	"bugs": {
-		"url": "https://github.com/aws/aws-amplify/issues"
-	},
-	"homepage": "https://aws-amplify.github.io/",
-	"files": [
-		"dist/cjs",
-		"dist/esm",
-		"src",
-		"server",
-		"s3"
-	],
-	"dependencies": {
-		"@aws-sdk/types": "3.398.0",
-		"@smithy/md5-js": "2.0.7",
-		"buffer": "4.9.2",
-		"fast-xml-parser": "^4.4.1",
-		"tslib": "^2.5.0"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/esm/index.d.ts",
-			"import": "./dist/esm/index.mjs",
-			"require": "./dist/cjs/index.js",
-			"react-native": "./src/index.ts"
-		},
-		"./server": {
-			"types": "./dist/esm/server.d.ts",
-			"import": "./dist/esm/server.mjs",
-			"require": "./dist/cjs/server.js"
-		},
-		"./s3": {
-			"types": "./dist/esm/providers/s3/index.d.ts",
-			"import": "./dist/esm/providers/s3/index.mjs",
-			"require": "./dist/cjs/providers/s3/index.js",
-			"react-native": "./src/providers/s3/index.ts"
-		},
-		"./s3/server": {
-			"types": "./dist/esm/providers/s3/server.d.ts",
-			"import": "./dist/esm/providers/s3/server.mjs",
-			"require": "./dist/cjs/providers/s3/server.js"
-		},
-		"./package.json": "./package.json"
-	},
-	"peerDependencies": {
-		"@aws-amplify/core": "^6.1.0"
-	},
-	"devDependencies": {
-		"@aws-amplify/core": "6.4.5",
-		"@aws-amplify/react-native": "1.1.6",
-		"typescript": "5.0.2"
-	},
-	"gitHead": "2361fcc1f3a5f1e44cd06256667bc985bca2728a"
+  "name": "@aws-amplify/storage",
+  "version": "6.6.11-storage-browser-integrity.2a9053f.0+2a9053f",
+  "description": "Storage category of aws-amplify",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.mjs",
+  "react-native": {
+    "./dist/cjs/index": "./src/index.ts",
+    "fast-xml-parser": "fast-xml-parser",
+    "buffer": "buffer"
+  },
+  "typings": "./dist/esm/index.d.ts",
+  "browser": {
+    "./dist/esm/providers/s3/utils/client/runtime/base64/index.native.mjs": "./dist/esm/providers/s3/utils/client/runtime/base64/index.browser.mjs",
+    "./dist/esm/providers/s3/utils/client/runtime/s3TransferHandler/fetch.mjs": "./dist/esm/providers/s3/utils/client/runtime/s3TransferHandler/xhr.mjs",
+    "./dist/esm/providers/s3/utils/client/runtime/xmlParser/pureJs.mjs": "./dist/esm/providers/s3/utils/client/runtime/xmlParser/dom.mjs",
+    "fast-xml-parser": false,
+    "buffer": false
+  },
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "npm run lint && jest -w 1 --coverage --logHeapUsage",
+    "build-with-test": "npm test && npm run build",
+    "build:umd": "webpack && webpack --config ./webpack.config.dev.js",
+    "build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
+    "build:watch": "npm run build:esm-cjs -- --watch",
+    "build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
+    "clean": "npm run clean:size && rimraf lib-esm lib dist",
+    "clean:size": "rimraf dual-publish-tmp tmp*",
+    "format": "echo \"Not implemented\"",
+    "lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
+    "lint:fix": "eslint '**/*.{ts,tsx}' --fix",
+    "ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 90.31"
+  },
+  "typesVersions": {
+    ">=4.2": {
+      "s3": [
+        "./dist/esm/providers/s3/index.d.ts"
+      ],
+      "internals": [
+        "./dist/esm/internals/index.d.ts"
+      ],
+      "server": [
+        "./dist/esm/server.d.ts"
+      ],
+      "s3/server": [
+        "./dist/esm/providers/s3/server.d.ts"
+      ]
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws-amplify/amplify-js.git"
+  },
+  "author": "Amazon Web Services",
+  "license": "Apache-2.0",
+  "bugs": {
+    "url": "https://github.com/aws/aws-amplify/issues"
+  },
+  "homepage": "https://aws-amplify.github.io/",
+  "files": [
+    "dist/cjs",
+    "dist/esm",
+    "internals",
+    "src",
+    "server",
+    "s3"
+  ],
+  "dependencies": {
+    "@aws-sdk/types": "3.398.0",
+    "@smithy/md5-js": "2.0.7",
+    "buffer": "4.9.2",
+    "crc-32": "1.2.2",
+    "fast-xml-parser": "^4.4.1",
+    "tslib": "^2.5.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/esm/index.d.ts",
+      "import": "./dist/esm/index.mjs",
+      "require": "./dist/cjs/index.js",
+      "react-native": "./src/index.ts"
+    },
+    "./internals": {
+      "types": "./dist/esm/internals/index.d.ts",
+      "import": "./dist/esm/internals/index.mjs",
+      "require": "./dist/cjs/internals/index.js"
+    },
+    "./server": {
+      "types": "./dist/esm/server.d.ts",
+      "import": "./dist/esm/server.mjs",
+      "require": "./dist/cjs/server.js"
+    },
+    "./s3": {
+      "types": "./dist/esm/providers/s3/index.d.ts",
+      "import": "./dist/esm/providers/s3/index.mjs",
+      "require": "./dist/cjs/providers/s3/index.js",
+      "react-native": "./src/providers/s3/index.ts"
+    },
+    "./s3/server": {
+      "types": "./dist/esm/providers/s3/server.d.ts",
+      "import": "./dist/esm/providers/s3/server.mjs",
+      "require": "./dist/cjs/providers/s3/server.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "peerDependencies": {
+    "@aws-amplify/core": "6.4.6-storage-browser-integrity.2a9053f.0+2a9053f"
+  },
+  "devDependencies": {
+    "@aws-amplify/core": "6.4.6-storage-browser-integrity.2a9053f.0+2a9053f",
+    "@aws-amplify/react-native": "1.1.7-storage-browser-integrity.2a9053f.0+2a9053f",
+    "@types/node": "20.14.12",
+    "typescript": "5.0.2"
+  },
+  "gitHead": "2a9053f797decf58798d2a101970e906241f249a"
 }

package/src/errors/IntegrityError.ts

@@ -0,0 +1,25 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import {
+	AmplifyErrorCode,
+	AmplifyErrorParams,
+} from '@aws-amplify/core/internals/utils';
+
+import { StorageError } from './StorageError';
+
+export class IntegrityError extends StorageError {
+	constructor(
+		params: AmplifyErrorParams = {
+			name: AmplifyErrorCode.Unknown,
+			message: 'An unknown error has occurred.',
+			recoverySuggestion:
+				'This may be a bug. Please reach out to library authors.',
+		},
+	) {
+		super(params);
+
+		// TODO: Delete the following 2 lines after we change the build target to >= es2015
+		this.constructor = IntegrityError;
+		Object.setPrototypeOf(this, IntegrityError.prototype);
+	}
+}

package/src/errors/constants.ts

@@ -0,0 +1,4 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+export const INVALID_STORAGE_INPUT = 'InvalidStorageInput';

package/src/errors/types/validation.ts

@@ -17,10 +17,14 @@ export enum StorageValidationErrorCode {
 	InvalidCopyOperationStorageBucket = 'InvalidCopyOperationStorageBucket',
 	InvalidStorageOperationPrefixInput = 'InvalidStorageOperationPrefixInput',
 	InvalidStorageOperationInput = 'InvalidStorageOperationInput',
+	InvalidAWSAccountID = 'InvalidAWSAccountID',
 	InvalidStoragePathInput = 'InvalidStoragePathInput',
 	InvalidUploadSource = 'InvalidUploadSource',
 	ObjectIsTooLarge = 'ObjectIsTooLarge',
 	UrlExpirationMaxLimitExceed = 'UrlExpirationMaxLimitExceed',
+	InvalidLocationCredentialsCacheSize = 'InvalidLocationCredentialsCacheSize',
+	LocationCredentialsStoreDestroyed = 'LocationCredentialsStoreDestroyed',
+	InvalidS3Uri = 'InvalidS3Uri',
 }
 
 export const validationErrorMap: AmplifyErrorMap<StorageValidationErrorCode> = {
@@ -66,12 +70,24 @@ export const validationErrorMap: AmplifyErrorMap<StorageValidationErrorCode> = {
 		message:
 			'Path or key parameter must be specified in the input. Both can not be specified at the same time.',
 	},
+	[StorageValidationErrorCode.InvalidAWSAccountID]: {
+		message: 'Invalid AWS account ID was provided.',
+	},
 	[StorageValidationErrorCode.InvalidStorageOperationPrefixInput]: {
 		message: 'Both path and prefix can not be specified at the same time.',
 	},
 	[StorageValidationErrorCode.InvalidStoragePathInput]: {
 		message: 'Input `path` does not allow a leading slash (/).',
 	},
+	[StorageValidationErrorCode.InvalidLocationCredentialsCacheSize]: {
+		message: 'locationCredentialsCacheSize must be a positive integer.',
+	},
+	[StorageValidationErrorCode.LocationCredentialsStoreDestroyed]: {
+		message: `Location-specific credentials store has been destroyed.`,
+	},
+	[StorageValidationErrorCode.InvalidS3Uri]: {
+		message: 'Invalid S3 URI.',
+	},
 	[StorageValidationErrorCode.InvalidStorageBucket]: {
 		message:
 			'Unable to lookup bucket from provided name in Amplify configuration.',

package/src/index.ts

@@ -53,3 +53,5 @@ export { TransferProgressEvent } from './types';
 
 export { isCancelError } from './errors/CanceledError';
 export { StorageError } from './errors/StorageError';
+
+export { DEFAULT_PART_SIZE } from './providers/s3/utils/constants';

package/src/internals/apis/copy.ts

@@ -0,0 +1,33 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { copy as copyInternal } from '../../providers/s3/apis/internal/copy';
+import { CopyInput } from '../types/inputs';
+import { CopyOutput } from '../types/outputs';
+
+/**
+ * @internal
+ */
+export const copy = (input: CopyInput) =>
+	copyInternal(Amplify, {
+		source: {
+			path: input.source.path,
+			bucket: input.source.bucket,
+			eTag: input.source.eTag,
+			notModifiedSince: input.source.notModifiedSince,
+			expectedBucketOwner: input.source.expectedBucketOwner,
+		},
+		destination: {
+			path: input.destination.path,
+			bucket: input.destination.bucket,
+			expectedBucketOwner: input.destination.expectedBucketOwner,
+		},
+		options: {
+			// Advanced options
+			locationCredentialsProvider: input.options?.locationCredentialsProvider,
+		},
+		// Type casting is necessary because `copyInternal` supports both Gen1 and Gen2 signatures, but here
+		// given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+	}) as Promise<CopyOutput>;

package/src/internals/apis/downloadData.ts

@@ -0,0 +1,24 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { downloadData as downloadDataInternal } from '../../providers/s3/apis/internal/downloadData';
+import { DownloadDataInput } from '../types/inputs';
+import { DownloadDataOutput } from '../types/outputs';
+
+/**
+ * @internal
+ */
+export const downloadData = (input: DownloadDataInput): DownloadDataOutput =>
+	downloadDataInternal({
+		path: input.path,
+		options: {
+			useAccelerateEndpoint: input?.options?.useAccelerateEndpoint,
+			bucket: input?.options?.bucket,
+			locationCredentialsProvider: input?.options?.locationCredentialsProvider,
+			bytesRange: input?.options?.bytesRange,
+			onProgress: input?.options?.onProgress,
+			expectedBucketOwner: input?.options?.expectedBucketOwner,
+		},
+		// Type casting is necessary because `downloadDataInternal` supports both Gen1 and Gen2 signatures, but here
+		// given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+	}) as DownloadDataOutput;

package/src/internals/apis/getDataAccess.ts

@@ -0,0 +1,82 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import {
+	AmplifyErrorCode,
+	StorageAction,
+} from '@aws-amplify/core/internals/utils';
+import { CredentialsProviderOptions } from '@aws-amplify/core/internals/aws-client-utils';
+
+import { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent';
+import { getDataAccess as getDataAccessClient } from '../../providers/s3/utils/client/s3control';
+import { StorageError } from '../../errors/StorageError';
+import { GetDataAccessInput } from '../types/inputs';
+import { GetDataAccessOutput } from '../types/outputs';
+import { logger } from '../../utils';
+import { DEFAULT_CRED_TTL } from '../utils/constants';
+
+/**
+ * @internal
+ */
+export const getDataAccess = async (
+	input: GetDataAccessInput,
+): Promise<GetDataAccessOutput> => {
+	const targetType = input.scope.endsWith('*') ? undefined : 'Object';
+	const clientCredentialsProvider = async (
+		options?: CredentialsProviderOptions,
+	) => {
+		const { credentials } = await input.credentialsProvider(options);
+
+		return credentials;
+	};
+
+	const result = await getDataAccessClient(
+		{
+			credentials: clientCredentialsProvider,
+			region: input.region,
+			userAgentValue: getStorageUserAgentValue(StorageAction.GetDataAccess),
+		},
+		{
+			AccountId: input.accountId,
+			Target: input.scope,
+			Permission: input.permission,
+			TargetType: targetType,
+			DurationSeconds: DEFAULT_CRED_TTL,
+		},
+	);
+
+	const grantCredentials = result.Credentials;
+
+	// Ensure that S3 returned credentials (this shouldn't happen)
+	if (
+		!grantCredentials ||
+		!grantCredentials.AccessKeyId ||
+		!grantCredentials.SecretAccessKey ||
+		!grantCredentials.SessionToken ||
+		!grantCredentials.Expiration
+	) {
+		throw new StorageError({
+			name: AmplifyErrorCode.Unknown,
+			message: 'Service did not return valid temporary credentials.',
+		});
+	} else {
+		logger.debug(`Retrieved credentials for: ${result.MatchedGrantTarget}`);
+	}
+
+	const {
+		AccessKeyId: accessKeyId,
+		SecretAccessKey: secretAccessKey,
+		SessionToken: sessionToken,
+		Expiration: expiration,
+	} = grantCredentials;
+
+	return {
+		credentials: {
+			accessKeyId,
+			secretAccessKey,
+			sessionToken,
+			expiration,
+		},
+		scope: result.MatchedGrantTarget,
+	};
+};

package/src/internals/apis/getProperties.ts

@@ -0,0 +1,26 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { getProperties as getPropertiesInternal } from '../../providers/s3/apis/internal/getProperties';
+import { GetPropertiesInput } from '../types/inputs';
+import { GetPropertiesOutput } from '../types/outputs';
+
+/**
+ * @internal
+ */
+export const getProperties = (
+	input: GetPropertiesInput,
+): Promise<GetPropertiesOutput> =>
+	getPropertiesInternal(Amplify, {
+		path: input.path,
+		options: {
+			useAccelerateEndpoint: input?.options?.useAccelerateEndpoint,
+			bucket: input?.options?.bucket,
+			locationCredentialsProvider: input?.options?.locationCredentialsProvider,
+			expectedBucketOwner: input?.options?.expectedBucketOwner,
+		},
+		// Type casting is necessary because `getPropertiesInternal` supports both Gen1 and Gen2 signatures, but here
+		// given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+	}) as Promise<GetPropertiesOutput>;

package/src/internals/apis/getUrl.ts

@@ -0,0 +1,30 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { getUrl as getUrlInternal } from '../../providers/s3/apis/internal/getUrl';
+import { GetUrlInput } from '../types/inputs';
+import { GetUrlOutput } from '../types/outputs';
+
+/**
+ * @internal
+ */
+export const getUrl = (input: GetUrlInput) =>
+	getUrlInternal(Amplify, {
+		path: input.path,
+		options: {
+			useAccelerateEndpoint: input?.options?.useAccelerateEndpoint,
+			bucket: input?.options?.bucket,
+			validateObjectExistence: input?.options?.validateObjectExistence,
+			expiresIn: input?.options?.expiresIn,
+			contentDisposition: input?.options?.contentDisposition,
+			contentType: input?.options?.contentType,
+			expectedBucketOwner: input?.options?.expectedBucketOwner,
+
+			// Advanced options
+			locationCredentialsProvider: input?.options?.locationCredentialsProvider,
+		},
+		// Type casting is necessary because `getPropertiesInternal` supports both Gen1 and Gen2 signatures, but here
+		// given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+	}) as Promise<GetUrlOutput>;

package/src/internals/apis/list.ts

@@ -0,0 +1,46 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { list as listInternal } from '../../providers/s3/apis/internal/list';
+import { ListAllInput, ListInput, ListPaginateInput } from '../types/inputs';
+import {
+	ListAllWithPathOutput,
+	ListPaginateWithPathOutput,
+} from '../../providers/s3';
+import { ListOutput } from '../types/outputs';
+
+/**
+ * @internal
+ */
+export function list(input: ListAllInput): Promise<ListAllWithPathOutput>;
+/**
+ * @internal
+ */
+export function list(
+	input: ListPaginateInput,
+): Promise<ListPaginateWithPathOutput>;
+/**
+ * @internal
+ */
+export function list(input: ListInput): Promise<ListOutput> {
+	return listInternal(Amplify, {
+		path: input.path,
+		options: {
+			bucket: input.options?.bucket,
+			subpathStrategy: input.options?.subpathStrategy,
+			useAccelerateEndpoint: input.options?.useAccelerateEndpoint,
+			listAll: input.options?.listAll,
+			expectedBucketOwner: input.options?.expectedBucketOwner,
+
+			// Pagination options
+			nextToken: (input as ListPaginateInput).options?.nextToken,
+			pageSize: (input as ListPaginateInput).options?.pageSize,
+			// Advanced options
+			locationCredentialsProvider: input.options?.locationCredentialsProvider,
+		},
+		// Type casting is necessary because `listInternal` supports both Gen1 and Gen2 signatures, but here
+		// given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+	} as ListInput) as Promise<ListOutput>;
+}

package/src/internals/apis/listCallerAccessGrants.ts

@@ -0,0 +1,95 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { StorageAction } from '@aws-amplify/core/internals/utils';
+import { CredentialsProviderOptions } from '@aws-amplify/core/internals/aws-client-utils';
+
+import { logger } from '../../utils';
+import { listCallerAccessGrants as listCallerAccessGrantsClient } from '../../providers/s3/utils/client/s3control';
+import { StorageError } from '../../errors/StorageError';
+import { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent';
+import { LocationType } from '../types/common';
+import { LocationAccess } from '../types/credentials';
+import { ListCallerAccessGrantsInput } from '../types/inputs';
+import { ListCallerAccessGrantsOutput } from '../types/outputs';
+import { MAX_PAGE_SIZE } from '../utils/constants';
+
+/**
+ * @internal
+ */
+export const listCallerAccessGrants = async (
+	input: ListCallerAccessGrantsInput,
+): Promise<ListCallerAccessGrantsOutput> => {
+	const { credentialsProvider, accountId, region, nextToken, pageSize } = input;
+
+	logger.debug(`listing available locations from account ${input.accountId}`);
+
+	if (!!pageSize && pageSize > MAX_PAGE_SIZE) {
+		logger.debug(`defaulting pageSize to ${MAX_PAGE_SIZE}.`);
+	}
+
+	const clientCredentialsProvider = async (
+		options?: CredentialsProviderOptions,
+	) => {
+		const { credentials } = await credentialsProvider(options);
+
+		return credentials;
+	};
+
+	const { CallerAccessGrantsList, NextToken } =
+		await listCallerAccessGrantsClient(
+			{
+				credentials: clientCredentialsProvider,
+				region,
+				userAgentValue: getStorageUserAgentValue(
+					StorageAction.ListCallerAccessGrants,
+				),
+			},
+			{
+				AccountId: accountId,
+				NextToken: nextToken,
+				MaxResults: pageSize ?? MAX_PAGE_SIZE,
+			},
+		);
+
+	const accessGrants: LocationAccess[] =
+		CallerAccessGrantsList?.map(grant => {
+			assertGrantScope(grant.GrantScope);
+
+			return {
+				scope: grant.GrantScope,
+				permission: grant.Permission!,
+				type: parseGrantType(grant.GrantScope!),
+			};
+		}) ?? [];
+
+	return {
+		locations: accessGrants,
+		nextToken: NextToken,
+	};
+};
+
+const parseGrantType = (grantScope: string): LocationType => {
+	const bucketScopeReg = /^s3:\/\/(.*)\/\*$/;
+	const possibleBucketName = grantScope.match(bucketScopeReg)?.[1];
+	if (!grantScope.endsWith('*')) {
+		return 'OBJECT';
+	} else if (
+		grantScope.endsWith('/*') &&
+		possibleBucketName &&
+		possibleBucketName.indexOf('/') === -1
+	) {
+		return 'BUCKET';
+	} else {
+		return 'PREFIX';
+	}
+};
+
+function assertGrantScope(value: unknown): asserts value is string {
+	if (typeof value !== 'string' || !value.startsWith('s3://')) {
+		throw new StorageError({
+			name: 'InvalidGrantScope',
+			message: `Expected a valid grant scope, got ${value}`,
+		});
+	}
+}