@aws-sdk/client-signin 3.1081.0 → 3.1083.0

package/dist-es/commands/RevokeOAuth2TokenWithIAMCommand.js

@@ -0,0 +1,4 @@
+import { _ep1, _mw0, command } from "../commandBuilder";
+import { RevokeOAuth2TokenWithIAM$ } from "../schemas/schemas_0";
+export class RevokeOAuth2TokenWithIAMCommand extends command(_ep1, _mw0, "RevokeOAuth2TokenWithIAM", RevokeOAuth2TokenWithIAM$) {
+}

package/dist-es/commands/index.js

@@ -1,8 +1,11 @@
 export * from "./CreateOAuth2TokenCommand";
+export * from "./CreateOAuth2TokenWithIAMCommand";
 export * from "./DeleteConsoleAuthorizationConfigurationCommand";
 export * from "./DeleteResourcePermissionStatementCommand";
 export * from "./GetConsoleAuthorizationConfigurationCommand";
 export * from "./GetResourcePolicyCommand";
+export * from "./IntrospectOAuth2TokenWithIAMCommand";
 export * from "./ListResourcePermissionStatementsCommand";
 export * from "./PutConsoleAuthorizationConfigurationCommand";
 export * from "./PutResourcePermissionStatementCommand";
+export * from "./RevokeOAuth2TokenWithIAMCommand";

package/dist-es/endpoint/bdd.js

@@ -1,52 +1,55 @@
 import { BinaryDecisionDiagram } from "@smithy/core/endpoints";
-const p = "ref";
-const a = -1, b = true, c = "isSet", d = "booleanEquals", e = "PartitionResult", f = "stringEquals", g = "getAttr", h = "https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}", i = { [p]: "Endpoint" }, j = { "fn": g, "argv": [{ [p]: e }, "name"] }, k = { [p]: e }, l = { [p]: "Region" }, m = { "authSchemes": [{ "name": "sigv4", "signingName": "signin", "signingRegion": "{Region}" }] }, n = {}, o = [l];
+const s = "ref";
+const a = -1, b = false, c = true, d = "isSet", e = "booleanEquals", f = "coalesce", g = "PartitionResult", h = "stringEquals", i = "getAttr", j = "https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}", k = { [s]: "Endpoint" }, l = { "fn": i, "argv": [{ [s]: g }, "name"] }, m = { [s]: "Region" }, n = { [s]: g }, o = { "authSchemes": [{ "name": "sigv4", "signingName": "signin", "signingRegion": "{Region}" }] }, p = {}, q = [m];
 const _data = {
     conditions: [
-        [c, o],
-        [d, [{ fn: "coalesce", argv: [{ [p]: "IsControlPlane" }, false] }, b]],
-        [c, [i]],
-        ["aws.partition", o, e],
-        [d, [{ [p]: "UseFIPS" }, b]],
-        [d, [{ [p]: "UseDualStack" }, b]],
-        [f, [j, "aws"]],
-        [f, [j, "aws-cn"]],
-        [d, [{ fn: g, argv: [k, "supportsDualStack"] }, b]],
-        [f, [l, "us-gov-west-1"]],
-        [f, [j, "aws-us-gov"]],
-        [d, [{ fn: g, argv: [k, "supportsFIPS"] }, b]],
-        [f, [j, "aws-iso"]],
-        [f, [j, "aws-iso-b"]],
-        [f, [j, "aws-iso-f"]],
-        [f, [j, "aws-iso-e"]],
-        [f, [j, "aws-eusc"]]
+        [d, q],
+        [e, [{ fn: f, argv: [{ [s]: "IsControlPlane" }, b] }, c]],
+        [d, [k]],
+        ["aws.partition", q, g],
+        [e, [{ [s]: "UseFIPS" }, c]],
+        [h, [l, "aws"]],
+        [e, [{ fn: f, argv: [{ [s]: "IsOAuthEndpoint" }, b] }, c]],
+        [e, [{ [s]: "UseDualStack" }, c]],
+        [h, [l, "aws-cn"]],
+        [h, [m, "us-gov-west-1"]],
+        [h, [l, "aws-us-gov"]],
+        [e, [{ fn: i, argv: [n, "supportsFIPS"] }, c]],
+        [h, [l, "aws-iso"]],
+        [h, [l, "aws-iso-b"]],
+        [h, [l, "aws-iso-f"]],
+        [h, [l, "aws-iso-e"]],
+        [h, [l, "aws-eusc"]],
+        [e, [{ fn: i, argv: [n, "supportsDualStack"] }, c]]
     ],
     results: [
         [a],
-        ["https://signin.{Region}.api.aws", m],
-        ["https://signin.{Region}.api.amazonwebservices.com.cn", m],
-        [h, m],
-        ["https://{Region}.signin.aws.amazon.com", n],
-        ["https://{Region}.signin.amazonaws.cn", n],
-        ["https://{Region}.signin.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin.c2shome.ic.gov", n],
-        ["https://{Region}.signin.sc2shome.sgov.gov", n],
-        ["https://{Region}.signin.csphome.hci.ic.gov", n],
-        ["https://{Region}.signin.csphome.adc-e.uk", n],
-        ["https://{Region}.signin.amazonaws-eusc.eu", n],
-        ["https://signin-fips.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin-fips.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin.{PartitionResult#dnsSuffix}", n],
+        ["https://signin.{Region}.api.aws", o],
+        ["https://signin.{Region}.api.amazonwebservices.com.cn", o],
+        [j, o],
+        [a, "FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],
+        ["https://{Region}.oauth.signin.aws", o],
+        ["https://{Region}.signin.aws.amazon.com", p],
+        ["https://{Region}.signin.amazonaws.cn", p],
+        ["https://{Region}.signin.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin.c2shome.ic.gov", p],
+        ["https://{Region}.signin.sc2shome.sgov.gov", p],
+        ["https://{Region}.signin.csphome.hci.ic.gov", p],
+        ["https://{Region}.signin.csphome.adc-e.uk", p],
+        ["https://{Region}.signin.amazonaws-eusc.eu", p],
+        ["https://signin-fips.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin-fips.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin.{PartitionResult#dnsSuffix}", p],
         [a, "Invalid Configuration: FIPS and custom endpoint are not supported"],
         [a, "Invalid Configuration: Dualstack and custom endpoint are not supported"],
-        [i, n],
-        ["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", n],
+        [k, p],
+        ["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", p],
         [a, "FIPS and DualStack are enabled, but this partition does not support one or both"],
-        ["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}", n],
+        ["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}", p],
         [a, "FIPS is enabled but this partition does not support FIPS"],
-        [h, n],
+        [j, p],
         [a, "DualStack is enabled but this partition does not support DualStack"],
-        ["https://signin.{Region}.{PartitionResult#dnsSuffix}", n],
+        ["https://signin.{Region}.{PartitionResult#dnsSuffix}", p],
         [a, "Invalid Configuration: Missing Region"]
     ]
 };
@@ -54,37 +57,44 @@ const root = 2;
 const r = 100_000_000;
 const nodes = new Int32Array([
     -1, 1, -1,
-    0, 4, 3,
-    2, 30, r + 25,
-    1, 24, 5,
-    2, 30, 6,
-    3, 7, 26,
-    4, 18, 8,
-    5, 17, 9,
-    6, r + 4, 10,
-    7, r + 5, 11,
-    10, r + 6, 12,
-    12, r + 7, 13,
-    13, r + 8, 14,
-    14, r + 9, 15,
-    15, r + 10, 16,
-    16, r + 11, r + 14,
-    8, r + 22, r + 23,
-    5, 22, 19,
-    9, r + 12, 20,
-    10, r + 13, 21,
-    11, r + 20, r + 21,
-    8, 23, r + 19,
-    11, r + 18, r + 19,
-    2, 29, 25,
-    3, 32, 26,
-    4, 27, r + 25,
-    5, r + 25, 28,
-    9, r + 12, r + 25,
-    3, 32, 30,
-    4, r + 15, 31,
-    5, r + 16, r + 17,
-    6, r + 1, 33,
-    7, r + 2, r + 3,
+    0, 6, 3,
+    2, 36, 4,
+    4, 5, r + 27,
+    6, r + 4, r + 27,
+    1, 29, 7,
+    2, 36, 8,
+    3, 9, 31,
+    4, 22, 10,
+    5, 19, 11,
+    7, 21, 12,
+    8, r + 7, 13,
+    10, r + 8, 14,
+    12, r + 9, 15,
+    13, r + 10, 16,
+    14, r + 11, 17,
+    15, r + 12, 18,
+    16, r + 13, r + 16,
+    6, r + 5, 20,
+    7, 21, r + 6,
+    17, r + 24, r + 25,
+    6, r + 4, 23,
+    7, 27, 24,
+    9, r + 14, 25,
+    10, r + 15, 26,
+    11, r + 22, r + 23,
+    11, 28, r + 21,
+    17, r + 20, r + 21,
+    2, 35, 30,
+    3, 39, 31,
+    4, 32, r + 27,
+    6, r + 4, 33,
+    7, r + 27, 34,
+    9, r + 14, r + 27,
+    3, 39, 36,
+    4, 38, 37,
+    7, r + 18, r + 19,
+    6, r + 4, r + 17,
+    5, r + 1, 40,
+    8, r + 2, r + 3,
 ]);
 export const bdd = BinaryDecisionDiagram.from(nodes, root, _data.conditions, _data.results);

package/dist-es/endpoint/endpointResolver.js

@@ -3,7 +3,7 @@ import { customEndpointFunctions, decideEndpoint, EndpointCache } from "@smithy/
 import { bdd } from "./bdd";
 const cache = new EndpointCache({
     size: 50,
-    params: ["Endpoint", "IsControlPlane", "Region", "UseDualStack", "UseFIPS"],
+    params: ["Endpoint", "IsControlPlane", "IsOAuthEndpoint", "Region", "UseDualStack", "UseFIPS"],
 });
 export const defaultEndpointResolver = (endpointParams, context = {}) => {
     return cache.get(endpointParams, () => decideEndpoint(bdd, {

package/dist-es/schemas/schemas_0.js

@@ -9,6 +9,9 @@ const _COATR = "CreateOAuth2TokenRequest";
 const _COATRB = "CreateOAuth2TokenRequestBody";
 const _COATRBr = "CreateOAuth2TokenResponseBody";
 const _COATRr = "CreateOAuth2TokenResponse";
+const _COATWIAM = "CreateOAuth2TokenWithIAM";
+const _COATWIAMR = "CreateOAuth2TokenWithIAMRequest";
+const _COATWIAMRr = "CreateOAuth2TokenWithIAMResponse";
 const _DCAC = "DeleteConsoleAuthorizationConfiguration";
 const _DCACI = "DeleteConsoleAuthorizationConfigurationInput";
 const _DCACO = "DeleteConsoleAuthorizationConfigurationOutput";
@@ -22,10 +25,15 @@ const _GCACO = "GetConsoleAuthorizationConfigurationOutput";
 const _GRP = "GetResourcePolicy";
 const _GRPI = "GetResourcePolicyInput";
 const _GRPO = "GetResourcePolicyOutput";
+const _IOATWIAM = "IntrospectOAuth2TokenWithIAM";
+const _IOATWIAMR = "IntrospectOAuth2TokenWithIAMRequest";
+const _IOATWIAMRn = "IntrospectOAuth2TokenWithIAMResponse";
 const _ISE = "InternalServerException";
+const _IT = "IntrospectionToken";
 const _LRPS = "ListResourcePermissionStatements";
 const _LRPSI = "ListResourcePermissionStatementsInput";
 const _LRPSO = "ListResourcePermissionStatementsOutput";
+const _OAAT = "OAuthAccessToken";
 const _P = "Principal";
 const _PCAC = "PutConsoleAuthorizationConfiguration";
 const _PCACI = "PutConsoleAuthorizationConfigurationInput";
@@ -39,35 +47,52 @@ const _PSSe = "PermissionStatementSummaries";
 const _PSo = "PolicyStatements";
 const _R = "Resource";
 const _RNFE = "ResourceNotFoundException";
+const _ROATWIAM = "RevokeOAuth2TokenWithIAM";
+const _ROATWIAMR = "RevokeOAuth2TokenWithIAMRequest";
+const _ROATWIAMRe = "RevokeOAuth2TokenWithIAMResponse";
 const _RT = "RefreshToken";
+const _RTe = "RevocationToken";
 const _S = "Statement";
 const _SQEE = "ServiceQuotaExceededException";
 const _SRBP = "SigninResourceBasedPolicy";
 const _TMRE = "TooManyRequestsError";
 const _V = "Version";
 const _VE = "ValidationException";
-const _a = "action";
+const _a = "active";
+const _aI = "accountId";
 const _aKI = "accessKeyId";
 const _aT = "accessToken";
+const _ac = "action";
+const _ai = "account_id";
+const _at = "access_token";
+const _au = "aud";
 const _c = "client";
 const _cAE = "consoleAuthorizationEnabled";
 const _cI = "clientId";
 const _cSV = "consoleSourceVpce";
 const _cT = "clientToken";
 const _cV = "codeVerifier";
+const _ci = "client_id";
 const _co = "code";
 const _con = "condition";
 const _e = "error";
 const _eI = "expiresIn";
 const _eP = "excludedPrincipal";
 const _ef = "effect";
+const _ei = "expires_in";
+const _ex = "exp";
 const _gT = "grantType";
+const _gt = "grant_type";
 const _h = "http";
 const _hE = "httpError";
+const _i = "iat";
 const _iT = "idToken";
+const _is = "iss";
+const _j = "jti";
 const _jN = "jsonName";
 const _m = "message";
 const _mR = "maxResults";
+const _n = "nbf";
 const _nT = "nextToken";
 const _p = "principal";
 const _pS = "permissionStatements";
@@ -80,17 +105,26 @@ const _sAK = "secretAccessKey";
 const _sI = "statementId";
 const _sIo = "sourceIp";
 const _sRBP = "signinResourceBasedPolicy";
+const _sS = "signinSession";
 const _sSV = "signinSourceVpce";
 const _sT = "sessionToken";
 const _sV = "sourceVpc";
 const _sc = "scope";
 const _se = "server";
 const _si = "sid";
+const _ss = "signin_session";
 const _st = "statement";
+const _su = "sub";
+const _t = "token";
 const _tI = "tokenInput";
 const _tIa = "targetId";
 const _tO = "tokenOutput";
 const _tT = "tokenType";
+const _tTH = "tokenTypeHint";
+const _tt = "token_type";
+const _tth = "token_type_hint";
+const _uI = "userId";
+const _ui = "user_id";
 const _v = "version";
 const _vSI = "vpcSourceIp";
 const n0 = "com.amazonaws.signin";
@@ -147,7 +181,10 @@ export const errorTypeRegistries = [
     _s_registry,
     n0_registry,
 ];
+var IntrospectionToken = [0, n0, _IT, 8, 0];
+var OAuthAccessToken = [0, n0, _OAAT, 8, 0];
 var RefreshToken = [0, n0, _RT, 8, 0];
+var RevocationToken = [0, n0, _RTe, 8, 0];
 export var AccessToken$ = [3, n0, _AT,
     8,
     [_aKI, _sAK, _sT],
@@ -173,6 +210,16 @@ export var CreateOAuth2TokenResponseBody$ = [3, n0, _COATRBr,
     [_aT, _tT, _eI, _rT, _iT],
     [[() => AccessToken$, { [_jN]: _aT }], [0, { [_jN]: _tT }], [1, { [_jN]: _eI }], [() => RefreshToken, { [_jN]: _rT }], [0, { [_jN]: _iT }]], 4
 ];
+export var CreateOAuth2TokenWithIAMRequest$ = [3, n0, _COATWIAMR,
+    0,
+    [_gT, _r],
+    [[0, { [_jN]: _gt }], 0], 2
+];
+export var CreateOAuth2TokenWithIAMResponse$ = [3, n0, _COATWIAMRr,
+    0,
+    [_aT, _tT, _eI],
+    [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }]], 3
+];
 export var DeleteConsoleAuthorizationConfigurationInput$ = [3, n0, _DCACI,
     0,
     [_tIa],
@@ -213,6 +260,16 @@ export var GetResourcePolicyOutput$ = [3, n0, _GRPO,
     [_sRBP],
     [[() => SigninResourceBasedPolicy$, 0]], 1
 ];
+export var IntrospectOAuth2TokenWithIAMRequest$ = [3, n0, _IOATWIAMR,
+    0,
+    [_t, _tTH],
+    [[() => IntrospectionToken, { [_jN]: _t }], [0, { [_jN]: _tth }]], 1
+];
+export var IntrospectOAuth2TokenWithIAMResponse$ = [3, n0, _IOATWIAMRn,
+    0,
+    [_a, _cI, _uI, _tT, _ex, _i, _n, _su, _au, _is, _j, _aI, _sS, _r],
+    [2, [0, { [_jN]: _ci }], [0, { [_jN]: _ui }], [0, { [_jN]: _tt }], [1, { [_jN]: _ex }], [1, { [_jN]: _i }], [1, { [_jN]: _n }], [0, { [_jN]: _su }], [0, { [_jN]: _au }], [0, { [_jN]: _is }], [0, { [_jN]: _j }], [0, { [_jN]: _ai }], [0, { [_jN]: _ss }], [0, { [_jN]: _r }]], 1
+];
 export var ListResourcePermissionStatementsInput$ = [3, n0, _LRPSI,
     0,
     [_mR, _nT],
@@ -230,7 +287,7 @@ export var PermissionStatementSummary$ = [3, n0, _PSS,
 ];
 export var PolicyStatement$ = [3, n0, _PS,
     0,
-    [_ef, _p, _a, _r, _con],
+    [_ef, _p, _ac, _r, _con],
     [[0, { [_jN]: _E }], [128 | 0, { [_jN]: _P }], [64 | 0, { [_jN]: _A }], [0, { [_jN]: _R }], [[2, n0, _CB, 0, 0, [2, n0, _C, 0, 0, 64 | 0]], { [_jN]: _C }]]
 ];
 export var PutConsoleAuthorizationConfigurationInput$ = [3, n0, _PCACI,
@@ -253,6 +310,16 @@ export var PutResourcePermissionStatementOutput$ = [3, n0, _PRPSO,
     [_sI],
     [0], 1
 ];
+export var RevokeOAuth2TokenWithIAMRequest$ = [3, n0, _ROATWIAMR,
+    0,
+    [_t],
+    [[() => RevocationToken, { [_jN]: _t }]], 1
+];
+export var RevokeOAuth2TokenWithIAMResponse$ = [3, n0, _ROATWIAMRe,
+    0,
+    [],
+    []
+];
 export var SigninResourceBasedPolicy$ = [3, n0, _SRBP,
     0,
     [_v, _st],
@@ -277,6 +344,9 @@ var Principal = 128 | 0;
 export var CreateOAuth2Token$ = [9, n0, _COAT,
     { [_h]: ["POST", "/v1/token", 200] }, () => CreateOAuth2TokenRequest$, () => CreateOAuth2TokenResponse$
 ];
+export var CreateOAuth2TokenWithIAM$ = [9, n0, _COATWIAM,
+    { [_h]: ["POST", "/v1/token?x-amz-client-auth-method=iam", 200] }, () => CreateOAuth2TokenWithIAMRequest$, () => CreateOAuth2TokenWithIAMResponse$
+];
 export var DeleteConsoleAuthorizationConfiguration$ = [9, n0, _DCAC,
     { [_h]: ["POST", "/delete-console-authorization-configuration", 200] }, () => DeleteConsoleAuthorizationConfigurationInput$, () => DeleteConsoleAuthorizationConfigurationOutput$
 ];
@@ -289,6 +359,9 @@ export var GetConsoleAuthorizationConfiguration$ = [9, n0, _GCAC,
 export var GetResourcePolicy$ = [9, n0, _GRP,
     { [_h]: ["POST", "/get-resource-policy", 200] }, () => GetResourcePolicyInput$, () => GetResourcePolicyOutput$
 ];
+export var IntrospectOAuth2TokenWithIAM$ = [9, n0, _IOATWIAM,
+    { [_h]: ["POST", "/v1/introspect?x-amz-client-auth-method=iam", 200] }, () => IntrospectOAuth2TokenWithIAMRequest$, () => IntrospectOAuth2TokenWithIAMResponse$
+];
 export var ListResourcePermissionStatements$ = [9, n0, _LRPS,
     { [_h]: ["POST", "/list-resource-permission-statements", 200] }, () => ListResourcePermissionStatementsInput$, () => ListResourcePermissionStatementsOutput$
 ];
@@ -298,3 +371,6 @@ export var PutConsoleAuthorizationConfiguration$ = [9, n0, _PCAC,
 export var PutResourcePermissionStatement$ = [9, n0, _PRPS,
     { [_h]: ["POST", "/put-resource-permission-statement", 200] }, () => PutResourcePermissionStatementInput$, () => PutResourcePermissionStatementOutput$
 ];
+export var RevokeOAuth2TokenWithIAM$ = [9, n0, _ROATWIAM,
+    { [_h]: ["POST", "/v1/revoke?x-amz-client-auth-method=iam", 200] }, () => RevokeOAuth2TokenWithIAMRequest$, () => RevokeOAuth2TokenWithIAMResponse$
+];

package/dist-types/Signin.d.ts

@@ -1,12 +1,15 @@
 import type { HttpHandlerOptions as __HttpHandlerOptions, PaginationConfiguration, Paginator } from "@smithy/types";
 import { type CreateOAuth2TokenCommandInput, type CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
+import { type CreateOAuth2TokenWithIAMCommandInput, type CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
 import { type DeleteConsoleAuthorizationConfigurationCommandInput, type DeleteConsoleAuthorizationConfigurationCommandOutput } from "./commands/DeleteConsoleAuthorizationConfigurationCommand";
 import { type DeleteResourcePermissionStatementCommandInput, type DeleteResourcePermissionStatementCommandOutput } from "./commands/DeleteResourcePermissionStatementCommand";
 import { type GetConsoleAuthorizationConfigurationCommandInput, type GetConsoleAuthorizationConfigurationCommandOutput } from "./commands/GetConsoleAuthorizationConfigurationCommand";
 import { type GetResourcePolicyCommandInput, type GetResourcePolicyCommandOutput } from "./commands/GetResourcePolicyCommand";
+import { type IntrospectOAuth2TokenWithIAMCommandInput, type IntrospectOAuth2TokenWithIAMCommandOutput } from "./commands/IntrospectOAuth2TokenWithIAMCommand";
 import { type ListResourcePermissionStatementsCommandInput, type ListResourcePermissionStatementsCommandOutput } from "./commands/ListResourcePermissionStatementsCommand";
 import { type PutConsoleAuthorizationConfigurationCommandInput, type PutConsoleAuthorizationConfigurationCommandOutput } from "./commands/PutConsoleAuthorizationConfigurationCommand";
 import { type PutResourcePermissionStatementCommandInput, type PutResourcePermissionStatementCommandOutput } from "./commands/PutResourcePermissionStatementCommand";
+import { type RevokeOAuth2TokenWithIAMCommandInput, type RevokeOAuth2TokenWithIAMCommandOutput } from "./commands/RevokeOAuth2TokenWithIAMCommand";
 import { SigninClient } from "./SigninClient";
 export interface Signin {
     /**
@@ -15,6 +18,12 @@ export interface Signin {
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, options?: __HttpHandlerOptions): Promise<CreateOAuth2TokenCommandOutput>;
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, cb: (err: any, data?: CreateOAuth2TokenCommandOutput) => void): void;
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOAuth2TokenCommandOutput) => void): void;
+    /**
+     * @see {@link CreateOAuth2TokenWithIAMCommand}
+     */
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options?: __HttpHandlerOptions): Promise<CreateOAuth2TokenWithIAMCommandOutput>;
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
     /**
      * @see {@link DeleteConsoleAuthorizationConfigurationCommand}
      */
@@ -42,6 +51,12 @@ export interface Signin {
     getResourcePolicy(args: GetResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<GetResourcePolicyCommandOutput>;
     getResourcePolicy(args: GetResourcePolicyCommandInput, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
     getResourcePolicy(args: GetResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
+    /**
+     * @see {@link IntrospectOAuth2TokenWithIAMCommand}
+     */
+    introspectOAuth2TokenWithIAM(args: IntrospectOAuth2TokenWithIAMCommandInput, options?: __HttpHandlerOptions): Promise<IntrospectOAuth2TokenWithIAMCommandOutput>;
+    introspectOAuth2TokenWithIAM(args: IntrospectOAuth2TokenWithIAMCommandInput, cb: (err: any, data?: IntrospectOAuth2TokenWithIAMCommandOutput) => void): void;
+    introspectOAuth2TokenWithIAM(args: IntrospectOAuth2TokenWithIAMCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: IntrospectOAuth2TokenWithIAMCommandOutput) => void): void;
     /**
      * @see {@link ListResourcePermissionStatementsCommand}
      */
@@ -63,6 +78,12 @@ export interface Signin {
     putResourcePermissionStatement(args: PutResourcePermissionStatementCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePermissionStatementCommandOutput>;
     putResourcePermissionStatement(args: PutResourcePermissionStatementCommandInput, cb: (err: any, data?: PutResourcePermissionStatementCommandOutput) => void): void;
     putResourcePermissionStatement(args: PutResourcePermissionStatementCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutResourcePermissionStatementCommandOutput) => void): void;
+    /**
+     * @see {@link RevokeOAuth2TokenWithIAMCommand}
+     */
+    revokeOAuth2TokenWithIAM(args: RevokeOAuth2TokenWithIAMCommandInput, options?: __HttpHandlerOptions): Promise<RevokeOAuth2TokenWithIAMCommandOutput>;
+    revokeOAuth2TokenWithIAM(args: RevokeOAuth2TokenWithIAMCommandInput, cb: (err: any, data?: RevokeOAuth2TokenWithIAMCommandOutput) => void): void;
+    revokeOAuth2TokenWithIAM(args: RevokeOAuth2TokenWithIAMCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RevokeOAuth2TokenWithIAMCommandOutput) => void): void;
     /**
      * @see {@link ListResourcePermissionStatementsCommand}
      * @param args - command input.

package/dist-types/SigninClient.d.ts

@@ -7,24 +7,27 @@ import { type RetryInputConfig, type RetryResolvedConfig } from "@smithy/core/re
 import type { AwsCredentialIdentityProvider, BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, Logger as __Logger, Provider as __Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
 import { type HttpAuthSchemeInputConfig, type HttpAuthSchemeResolvedConfig } from "./auth/httpAuthSchemeProvider";
 import type { CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
+import type { CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
 import type { DeleteConsoleAuthorizationConfigurationCommandInput, DeleteConsoleAuthorizationConfigurationCommandOutput } from "./commands/DeleteConsoleAuthorizationConfigurationCommand";
 import type { DeleteResourcePermissionStatementCommandInput, DeleteResourcePermissionStatementCommandOutput } from "./commands/DeleteResourcePermissionStatementCommand";
 import type { GetConsoleAuthorizationConfigurationCommandInput, GetConsoleAuthorizationConfigurationCommandOutput } from "./commands/GetConsoleAuthorizationConfigurationCommand";
 import type { GetResourcePolicyCommandInput, GetResourcePolicyCommandOutput } from "./commands/GetResourcePolicyCommand";
+import type { IntrospectOAuth2TokenWithIAMCommandInput, IntrospectOAuth2TokenWithIAMCommandOutput } from "./commands/IntrospectOAuth2TokenWithIAMCommand";
 import type { ListResourcePermissionStatementsCommandInput, ListResourcePermissionStatementsCommandOutput } from "./commands/ListResourcePermissionStatementsCommand";
 import type { PutConsoleAuthorizationConfigurationCommandInput, PutConsoleAuthorizationConfigurationCommandOutput } from "./commands/PutConsoleAuthorizationConfigurationCommand";
 import type { PutResourcePermissionStatementCommandInput, PutResourcePermissionStatementCommandOutput } from "./commands/PutResourcePermissionStatementCommand";
+import type { RevokeOAuth2TokenWithIAMCommandInput, RevokeOAuth2TokenWithIAMCommandOutput } from "./commands/RevokeOAuth2TokenWithIAMCommand";
 import { type ClientInputEndpointParameters, type ClientResolvedEndpointParameters, type EndpointParameters } from "./endpoint/EndpointParameters";
 import { type RuntimeExtension, type RuntimeExtensionsConfig } from "./runtimeExtensions";
 export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = CreateOAuth2TokenCommandInput | DeleteConsoleAuthorizationConfigurationCommandInput | DeleteResourcePermissionStatementCommandInput | GetConsoleAuthorizationConfigurationCommandInput | GetResourcePolicyCommandInput | ListResourcePermissionStatementsCommandInput | PutConsoleAuthorizationConfigurationCommandInput | PutResourcePermissionStatementCommandInput;
+export type ServiceInputTypes = CreateOAuth2TokenCommandInput | CreateOAuth2TokenWithIAMCommandInput | DeleteConsoleAuthorizationConfigurationCommandInput | DeleteResourcePermissionStatementCommandInput | GetConsoleAuthorizationConfigurationCommandInput | GetResourcePolicyCommandInput | IntrospectOAuth2TokenWithIAMCommandInput | ListResourcePermissionStatementsCommandInput | PutConsoleAuthorizationConfigurationCommandInput | PutResourcePermissionStatementCommandInput | RevokeOAuth2TokenWithIAMCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput | DeleteConsoleAuthorizationConfigurationCommandOutput | DeleteResourcePermissionStatementCommandOutput | GetConsoleAuthorizationConfigurationCommandOutput | GetResourcePolicyCommandOutput | ListResourcePermissionStatementsCommandOutput | PutConsoleAuthorizationConfigurationCommandOutput | PutResourcePermissionStatementCommandOutput;
+export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput | CreateOAuth2TokenWithIAMCommandOutput | DeleteConsoleAuthorizationConfigurationCommandOutput | DeleteResourcePermissionStatementCommandOutput | GetConsoleAuthorizationConfigurationCommandOutput | GetResourcePolicyCommandOutput | IntrospectOAuth2TokenWithIAMCommandOutput | ListResourcePermissionStatementsCommandOutput | PutConsoleAuthorizationConfigurationCommandOutput | PutResourcePermissionStatementCommandOutput | RevokeOAuth2TokenWithIAMCommandOutput;
 /**
  * @public
  */

package/dist-types/commandBuilder.d.ts

@@ -16,6 +16,10 @@ export declare const _ep0: EndpointParameterInstructions;
  * @internal
  */
 export declare const _ep1: EndpointParameterInstructions;
+/**
+ * @internal
+ */
+export declare const _ep2: EndpointParameterInstructions;
 /**
  * @internal
  */

package/dist-types/commands/CreateOAuth2TokenWithIAMCommand.d.ts

@@ -0,0 +1,114 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { CreateOAuth2TokenWithIAMRequest, CreateOAuth2TokenWithIAMResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link CreateOAuth2TokenWithIAMCommand}.
+ */
+export interface CreateOAuth2TokenWithIAMCommandInput extends CreateOAuth2TokenWithIAMRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link CreateOAuth2TokenWithIAMCommand}.
+ */
+export interface CreateOAuth2TokenWithIAMCommandOutput extends CreateOAuth2TokenWithIAMResponse, __MetadataBearer {
+}
+declare const CreateOAuth2TokenWithIAMCommand_base: {
+    new (input: CreateOAuth2TokenWithIAMCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: CreateOAuth2TokenWithIAMCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * Grants permission to exchange client credentials for an OAuth 2.0 access token
+ * scoped to a resource that can be used to access AWS services from applications
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SigninClient, CreateOAuth2TokenWithIAMCommand } from "@aws-sdk/client-signin"; // ES Modules import
+ * // const { SigninClient, CreateOAuth2TokenWithIAMCommand } = require("@aws-sdk/client-signin"); // CommonJS import
+ * // import type { SigninClientConfig } from "@aws-sdk/client-signin";
+ * const config = {}; // type is SigninClientConfig
+ * const client = new SigninClient(config);
+ * const input = { // CreateOAuth2TokenWithIAMRequest
+ *   grantType: "STRING_VALUE", // required
+ *   resource: "STRING_VALUE", // required
+ * };
+ * const command = new CreateOAuth2TokenWithIAMCommand(input);
+ * const response = await client.send(command);
+ * // { // CreateOAuth2TokenWithIAMResponse
+ * //   accessToken: "STRING_VALUE", // required
+ * //   tokenType: "STRING_VALUE", // required
+ * //   expiresIn: Number("int"), // required
+ * // };
+ *
+ * ```
+ *
+ * @param CreateOAuth2TokenWithIAMCommandInput - {@link CreateOAuth2TokenWithIAMCommandInput}
+ * @returns {@link CreateOAuth2TokenWithIAMCommandOutput}
+ * @see {@link CreateOAuth2TokenWithIAMCommandInput} for command's `input` shape.
+ * @see {@link CreateOAuth2TokenWithIAMCommandOutput} for command's `response` shape.
+ * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  Error thrown for access denied scenarios with flexible HTTP status mapping
+ *
+ * Runtime HTTP Status Code Mapping:
+ * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
+ * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
+ *
+ * The specific HTTP status code is determined at runtime based on the error enum value.
+ * Consumers should use the error field to determine the specific access denial reason.
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  Error thrown when an internal server error occurs
+ *
+ * HTTP Status Code: 500 Internal Server Error
+ *
+ * Used for unexpected server-side errors that prevent request processing.
+ *
+ * @throws {@link TooManyRequestsError} (client fault)
+ *  Error thrown when rate limit is exceeded
+ *
+ * HTTP Status Code: 429 Too Many Requests
+ *
+ * Possible OAuth2ErrorCode values:
+ * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
+ *
+ * Possible causes:
+ * - Too many token requests from the same client
+ * - Rate limiting based on client_id or IP address
+ * - Abuse prevention mechanisms triggered
+ * - Service protection against excessive token generation
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  Error thrown when request validation fails
+ *
+ * HTTP Status Code: 400 Bad Request
+ *
+ * Used for request validation errors such as malformed parameters,
+ * missing required fields, or invalid parameter values.
+ *
+ * @throws {@link SigninServiceException}
+ * <p>Base exception class for all service exceptions from Signin service.</p>
+ *
+ *
+ * @public
+ */
+export declare class CreateOAuth2TokenWithIAMCommand extends CreateOAuth2TokenWithIAMCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateOAuth2TokenWithIAMRequest;
+            output: CreateOAuth2TokenWithIAMResponse;
+        };
+        sdk: {
+            input: CreateOAuth2TokenWithIAMCommandInput;
+            output: CreateOAuth2TokenWithIAMCommandOutput;
+        };
+    };
+}