@aws-sdk/client-sts 3.33.0 → 3.36.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +47 -0
- package/{dist/cjs → dist-cjs}/STS.js +1 -9
- package/dist-cjs/STSClient.js +34 -0
- package/dist-cjs/commands/AssumeRoleCommand.js +38 -0
- package/dist-cjs/commands/AssumeRoleWithSAMLCommand.js +36 -0
- package/dist-cjs/commands/AssumeRoleWithWebIdentityCommand.js +36 -0
- package/dist-cjs/commands/DecodeAuthorizationMessageCommand.js +38 -0
- package/dist-cjs/commands/GetAccessKeyInfoCommand.js +38 -0
- package/dist-cjs/commands/GetCallerIdentityCommand.js +38 -0
- package/dist-cjs/commands/GetFederationTokenCommand.js +38 -0
- package/dist-cjs/commands/GetSessionTokenCommand.js +38 -0
- package/{dist/cjs → dist-cjs}/defaultRoleAssumers.js +0 -17
- package/{dist/cjs → dist-cjs}/defaultStsRoleAssumers.js +0 -21
- package/{dist/cjs → dist-cjs}/endpoints.js +0 -1
- package/{dist/cjs → dist-cjs}/index.js +0 -1
- package/{dist/cjs → dist-cjs}/models/index.js +0 -1
- package/{dist/cjs → dist-cjs}/models/models_0.js +0 -88
- package/{dist/cjs → dist-cjs}/protocols/Aws_query.js +22 -25
- package/{dist/cjs → dist-cjs}/runtimeConfig.browser.js +1 -5
- package/{dist/cjs → dist-cjs}/runtimeConfig.js +1 -5
- package/{dist/cjs → dist-cjs}/runtimeConfig.native.js +0 -4
- package/{dist/cjs → dist-cjs}/runtimeConfig.shared.js +1 -5
- package/{dist/es → dist-es}/STS.js +2 -10
- package/{dist/es → dist-es}/STSClient.js +2 -15
- package/dist-es/commands/AssumeRoleCommand.js +41 -0
- package/dist-es/commands/AssumeRoleWithSAMLCommand.js +39 -0
- package/dist-es/commands/AssumeRoleWithWebIdentityCommand.js +39 -0
- package/dist-es/commands/DecodeAuthorizationMessageCommand.js +41 -0
- package/dist-es/commands/GetAccessKeyInfoCommand.js +41 -0
- package/{dist/es → dist-es}/commands/GetCallerIdentityCommand.js +4 -39
- package/dist-es/commands/GetFederationTokenCommand.js +41 -0
- package/dist-es/commands/GetSessionTokenCommand.js +41 -0
- package/dist-es/defaultRoleAssumers.js +16 -0
- package/{dist/es → dist-es}/defaultStsRoleAssumers.js +10 -32
- package/{dist/es → dist-es}/endpoints.js +1 -2
- package/{dist/types/index.d.ts → dist-es/index.js} +0 -0
- package/{dist/types/models/index.d.ts → dist-es/models/index.js} +0 -0
- package/{dist/es → dist-es}/models/models_0.js +0 -88
- package/{dist/es → dist-es}/protocols/Aws_query.js +152 -155
- package/{dist/es → dist-es}/runtimeConfig.browser.js +1 -5
- package/{dist/es → dist-es}/runtimeConfig.js +1 -5
- package/{dist/es → dist-es}/runtimeConfig.native.js +0 -4
- package/{dist/es → dist-es}/runtimeConfig.shared.js +1 -5
- package/{dist/types → dist-types}/STS.d.ts +2 -2
- package/{dist/types → dist-types}/STSClient.d.ts +8 -8
- package/{dist/types → dist-types}/commands/AssumeRoleCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/AssumeRoleWithSAMLCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/AssumeRoleWithWebIdentityCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/DecodeAuthorizationMessageCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/GetAccessKeyInfoCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/GetCallerIdentityCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/GetFederationTokenCommand.d.ts +3 -3
- package/{dist/types → dist-types}/commands/GetSessionTokenCommand.d.ts +3 -3
- package/{dist/types → dist-types}/defaultRoleAssumers.d.ts +0 -0
- package/{dist/types → dist-types}/defaultStsRoleAssumers.d.ts +0 -0
- package/{dist/types → dist-types}/endpoints.d.ts +0 -0
- package/{index.ts → dist-types/index.d.ts} +0 -0
- package/{models/index.ts → dist-types/models/index.d.ts} +0 -0
- package/{dist/types → dist-types}/models/models_0.d.ts +0 -0
- package/{dist/types → dist-types}/protocols/Aws_query.d.ts +2 -2
- package/{dist/types → dist-types}/runtimeConfig.browser.d.ts +0 -0
- package/{dist/types → dist-types}/runtimeConfig.d.ts +0 -0
- package/{dist/types → dist-types}/runtimeConfig.native.d.ts +0 -0
- package/{dist/types → dist-types}/runtimeConfig.shared.d.ts +0 -0
- package/dist-types/ts3.4/STS.d.ts +45 -0
- package/{dist/types → dist-types}/ts3.4/STSClient.d.ts +32 -101
- package/dist-types/ts3.4/commands/AssumeRoleCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/AssumeRoleWithSAMLCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/AssumeRoleWithWebIdentityCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/DecodeAuthorizationMessageCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/GetAccessKeyInfoCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/GetCallerIdentityCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/GetFederationTokenCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/GetSessionTokenCommand.d.ts +17 -0
- package/dist-types/ts3.4/defaultRoleAssumers.d.ts +8 -0
- package/{dist/types → dist-types}/ts3.4/defaultStsRoleAssumers.d.ts +6 -25
- package/{dist/types → dist-types}/ts3.4/endpoints.d.ts +0 -0
- package/{dist/types → dist-types}/ts3.4/index.d.ts +0 -0
- package/{dist/types → dist-types}/ts3.4/models/index.d.ts +0 -0
- package/dist-types/ts3.4/models/models_0.d.ts +367 -0
- package/{dist/types → dist-types}/ts3.4/protocols/Aws_query.d.ts +2 -2
- package/{dist/types → dist-types}/ts3.4/runtimeConfig.browser.d.ts +1 -3
- package/{dist/types → dist-types}/ts3.4/runtimeConfig.d.ts +1 -3
- package/{dist/types → dist-types}/ts3.4/runtimeConfig.native.d.ts +1 -3
- package/{dist/types → dist-types}/ts3.4/runtimeConfig.shared.d.ts +1 -3
- package/package.json +52 -49
- package/STS.ts +0 -896
- package/STSClient.ts +0 -263
- package/commands/AssumeRoleCommand.ts +0 -176
- package/commands/AssumeRoleWithSAMLCommand.ts +0 -225
- package/commands/AssumeRoleWithWebIdentityCommand.ts +0 -232
- package/commands/DecodeAuthorizationMessageCommand.ts +0 -134
- package/commands/GetAccessKeyInfoCommand.ts +0 -113
- package/commands/GetCallerIdentityCommand.ts +0 -105
- package/commands/GetFederationTokenCommand.ts +0 -234
- package/commands/GetSessionTokenCommand.ts +0 -147
- package/defaultRoleAssumers.spec.ts +0 -148
- package/defaultRoleAssumers.ts +0 -41
- package/defaultStsRoleAssumers.ts +0 -126
- package/dist/cjs/STS.js.map +0 -1
- package/dist/cjs/STSClient.js +0 -47
- package/dist/cjs/STSClient.js.map +0 -1
- package/dist/cjs/commands/AssumeRoleCommand.js +0 -146
- package/dist/cjs/commands/AssumeRoleCommand.js.map +0 -1
- package/dist/cjs/commands/AssumeRoleWithSAMLCommand.js +0 -192
- package/dist/cjs/commands/AssumeRoleWithSAMLCommand.js.map +0 -1
- package/dist/cjs/commands/AssumeRoleWithWebIdentityCommand.js +0 -196
- package/dist/cjs/commands/AssumeRoleWithWebIdentityCommand.js.map +0 -1
- package/dist/cjs/commands/DecodeAuthorizationMessageCommand.js +0 -98
- package/dist/cjs/commands/DecodeAuthorizationMessageCommand.js.map +0 -1
- package/dist/cjs/commands/GetAccessKeyInfoCommand.js +0 -80
- package/dist/cjs/commands/GetAccessKeyInfoCommand.js.map +0 -1
- package/dist/cjs/commands/GetCallerIdentityCommand.js +0 -72
- package/dist/cjs/commands/GetCallerIdentityCommand.js.map +0 -1
- package/dist/cjs/commands/GetFederationTokenCommand.js +0 -201
- package/dist/cjs/commands/GetFederationTokenCommand.js.map +0 -1
- package/dist/cjs/commands/GetSessionTokenCommand.js +0 -114
- package/dist/cjs/commands/GetSessionTokenCommand.js.map +0 -1
- package/dist/cjs/defaultRoleAssumers.js.map +0 -1
- package/dist/cjs/defaultRoleAssumers.spec.js +0 -135
- package/dist/cjs/defaultRoleAssumers.spec.js.map +0 -1
- package/dist/cjs/defaultStsRoleAssumers.js.map +0 -1
- package/dist/cjs/endpoints.js.map +0 -1
- package/dist/cjs/index.js.map +0 -1
- package/dist/cjs/models/index.js.map +0 -1
- package/dist/cjs/models/models_0.js.map +0 -1
- package/dist/cjs/package.json +0 -93
- package/dist/cjs/protocols/Aws_query.js.map +0 -1
- package/dist/cjs/runtimeConfig.browser.js.map +0 -1
- package/dist/cjs/runtimeConfig.js.map +0 -1
- package/dist/cjs/runtimeConfig.native.js.map +0 -1
- package/dist/cjs/runtimeConfig.shared.js.map +0 -1
- package/dist/es/STS.js.map +0 -1
- package/dist/es/STSClient.js.map +0 -1
- package/dist/es/commands/AssumeRoleCommand.js +0 -150
- package/dist/es/commands/AssumeRoleCommand.js.map +0 -1
- package/dist/es/commands/AssumeRoleWithSAMLCommand.js +0 -196
- package/dist/es/commands/AssumeRoleWithSAMLCommand.js.map +0 -1
- package/dist/es/commands/AssumeRoleWithWebIdentityCommand.js +0 -200
- package/dist/es/commands/AssumeRoleWithWebIdentityCommand.js.map +0 -1
- package/dist/es/commands/DecodeAuthorizationMessageCommand.js +0 -102
- package/dist/es/commands/DecodeAuthorizationMessageCommand.js.map +0 -1
- package/dist/es/commands/GetAccessKeyInfoCommand.js +0 -84
- package/dist/es/commands/GetAccessKeyInfoCommand.js.map +0 -1
- package/dist/es/commands/GetCallerIdentityCommand.js.map +0 -1
- package/dist/es/commands/GetFederationTokenCommand.js +0 -205
- package/dist/es/commands/GetFederationTokenCommand.js.map +0 -1
- package/dist/es/commands/GetSessionTokenCommand.js +0 -118
- package/dist/es/commands/GetSessionTokenCommand.js.map +0 -1
- package/dist/es/defaultRoleAssumers.js +0 -33
- package/dist/es/defaultRoleAssumers.js.map +0 -1
- package/dist/es/defaultRoleAssumers.spec.js +0 -142
- package/dist/es/defaultRoleAssumers.spec.js.map +0 -1
- package/dist/es/defaultStsRoleAssumers.js.map +0 -1
- package/dist/es/endpoints.js.map +0 -1
- package/dist/es/index.js +0 -13
- package/dist/es/index.js.map +0 -1
- package/dist/es/models/index.js +0 -2
- package/dist/es/models/index.js.map +0 -1
- package/dist/es/models/models_0.js.map +0 -1
- package/dist/es/package.json +0 -93
- package/dist/es/protocols/Aws_query.js.map +0 -1
- package/dist/es/runtimeConfig.browser.js.map +0 -1
- package/dist/es/runtimeConfig.js.map +0 -1
- package/dist/es/runtimeConfig.native.js.map +0 -1
- package/dist/es/runtimeConfig.shared.js.map +0 -1
- package/dist/types/defaultRoleAssumers.spec.d.ts +0 -1
- package/dist/types/ts3.4/STS.d.ts +0 -666
- package/dist/types/ts3.4/commands/AssumeRoleCommand.d.ts +0 -118
- package/dist/types/ts3.4/commands/AssumeRoleWithSAMLCommand.d.ts +0 -166
- package/dist/types/ts3.4/commands/AssumeRoleWithWebIdentityCommand.d.ts +0 -170
- package/dist/types/ts3.4/commands/DecodeAuthorizationMessageCommand.d.ts +0 -70
- package/dist/types/ts3.4/commands/GetAccessKeyInfoCommand.d.ts +0 -52
- package/dist/types/ts3.4/commands/GetCallerIdentityCommand.d.ts +0 -44
- package/dist/types/ts3.4/commands/GetFederationTokenCommand.d.ts +0 -173
- package/dist/types/ts3.4/commands/GetSessionTokenCommand.d.ts +0 -86
- package/dist/types/ts3.4/defaultRoleAssumers.d.ts +0 -19
- package/dist/types/ts3.4/defaultRoleAssumers.spec.d.ts +0 -1
- package/dist/types/ts3.4/models/models_0.d.ts +0 -1192
- package/endpoints.ts +0 -91
- package/jest.config.js +0 -4
- package/models/models_0.ts +0 -1361
- package/protocols/Aws_query.ts +0 -1513
- package/runtimeConfig.browser.ts +0 -40
- package/runtimeConfig.native.ts +0 -16
- package/runtimeConfig.shared.ts +0 -16
- package/runtimeConfig.ts +0 -45
- package/tsconfig.es.json +0 -12
- package/tsconfig.json +0 -32
|
@@ -1,201 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.GetFederationTokenCommand = void 0;
|
|
4
|
-
const models_0_1 = require("../models/models_0");
|
|
5
|
-
const Aws_query_1 = require("../protocols/Aws_query");
|
|
6
|
-
const middleware_serde_1 = require("@aws-sdk/middleware-serde");
|
|
7
|
-
const middleware_signing_1 = require("@aws-sdk/middleware-signing");
|
|
8
|
-
const smithy_client_1 = require("@aws-sdk/smithy-client");
|
|
9
|
-
/**
|
|
10
|
-
* <p>Returns a set of temporary security credentials (consisting of an access key ID, a
|
|
11
|
-
* secret access key, and a security token) for a federated user. A typical use is in a proxy
|
|
12
|
-
* application that gets temporary security credentials on behalf of distributed applications
|
|
13
|
-
* inside a corporate network. You must call the <code>GetFederationToken</code> operation
|
|
14
|
-
* using the long-term security credentials of an IAM user. As a result, this call is
|
|
15
|
-
* appropriate in contexts where those credentials can be safely stored, usually in a
|
|
16
|
-
* server-based application. For a comparison of <code>GetFederationToken</code> with the
|
|
17
|
-
* other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security
|
|
18
|
-
* Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
|
|
19
|
-
* STS API operations</a> in the <i>IAM User Guide</i>.</p>
|
|
20
|
-
* <note>
|
|
21
|
-
* <p>You can create a mobile-based or browser-based app that can authenticate users using
|
|
22
|
-
* a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
|
|
23
|
-
* Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
|
|
24
|
-
* <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
|
|
25
|
-
* <i>IAM User Guide</i>.</p>
|
|
26
|
-
* </note>
|
|
27
|
-
* <p>You can also call <code>GetFederationToken</code> using the security credentials of an
|
|
28
|
-
* Amazon Web Services account root user, but we do not recommend it. Instead, we recommend that you create
|
|
29
|
-
* an IAM user for the purpose of the proxy application. Then attach a policy to the IAM
|
|
30
|
-
* user that limits federated users to only the actions and resources that they need to
|
|
31
|
-
* access. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html">IAM Best Practices</a> in the
|
|
32
|
-
* <i>IAM User Guide</i>. </p>
|
|
33
|
-
* <p>
|
|
34
|
-
* <b>Session duration</b>
|
|
35
|
-
* </p>
|
|
36
|
-
* <p>The temporary credentials are valid for the specified duration, from 900 seconds (15
|
|
37
|
-
* minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is
|
|
38
|
-
* 43,200 seconds (12 hours). Temporary credentials that are obtained by using Amazon Web Services account
|
|
39
|
-
* root user credentials have a maximum duration of 3,600 seconds (1 hour).</p>
|
|
40
|
-
* <p>
|
|
41
|
-
* <b>Permissions</b>
|
|
42
|
-
* </p>
|
|
43
|
-
* <p>You can use the temporary credentials created by <code>GetFederationToken</code> in any
|
|
44
|
-
* Amazon Web Services service except the following:</p>
|
|
45
|
-
* <ul>
|
|
46
|
-
* <li>
|
|
47
|
-
* <p>You cannot call any IAM operations using the CLI or the Amazon Web Services API. </p>
|
|
48
|
-
* </li>
|
|
49
|
-
* <li>
|
|
50
|
-
* <p>You cannot call any STS operations except <code>GetCallerIdentity</code>.</p>
|
|
51
|
-
* </li>
|
|
52
|
-
* </ul>
|
|
53
|
-
* <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
|
|
54
|
-
* this operation. You can pass a single JSON policy document to use as an inline session
|
|
55
|
-
* policy. You can also specify up to 10 managed policies to use as managed session policies.
|
|
56
|
-
* The plaintext that you use for both inline and managed session policies can't exceed 2,048
|
|
57
|
-
* characters.</p>
|
|
58
|
-
* <p>Though the session policy parameters are optional, if you do not pass a policy, then the
|
|
59
|
-
* resulting federated user session has no permissions. When you pass session policies, the
|
|
60
|
-
* session permissions are the intersection of the IAM user policies and the session
|
|
61
|
-
* policies that you pass. This gives you a way to further restrict the permissions for a
|
|
62
|
-
* federated user. You cannot use session policies to grant more permissions than those that
|
|
63
|
-
* are defined in the permissions policy of the IAM user. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
|
|
64
|
-
* Policies</a> in the <i>IAM User Guide</i>. For information about
|
|
65
|
-
* using <code>GetFederationToken</code> to create temporary security credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken">GetFederationToken—Federation Through a Custom Identity Broker</a>. </p>
|
|
66
|
-
* <p>You can use the credentials to access a resource that has a resource-based policy. If
|
|
67
|
-
* that policy specifically references the federated user session in the
|
|
68
|
-
* <code>Principal</code> element of the policy, the session has the permissions allowed by
|
|
69
|
-
* the policy. These permissions are granted in addition to the permissions granted by the
|
|
70
|
-
* session policies.</p>
|
|
71
|
-
* <p>
|
|
72
|
-
* <b>Tags</b>
|
|
73
|
-
* </p>
|
|
74
|
-
* <p>(Optional) You can pass tag key-value pairs to your session. These are called session
|
|
75
|
-
* tags. For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
|
|
76
|
-
* <i>IAM User Guide</i>.</p>
|
|
77
|
-
* <note>
|
|
78
|
-
* <p>You can create a mobile-based or browser-based app that can authenticate users
|
|
79
|
-
* using a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
|
|
80
|
-
* Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
|
|
81
|
-
* <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
|
|
82
|
-
* <i>IAM User Guide</i>.</p>
|
|
83
|
-
* </note>
|
|
84
|
-
* <p>You can also call <code>GetFederationToken</code> using the security credentials of an
|
|
85
|
-
* Amazon Web Services account root user, but we do not recommend it. Instead, we recommend that you
|
|
86
|
-
* create an IAM user for the purpose of the proxy application. Then attach a policy to
|
|
87
|
-
* the IAM user that limits federated users to only the actions and resources that they
|
|
88
|
-
* need to access. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html">IAM Best Practices</a> in the
|
|
89
|
-
* <i>IAM User Guide</i>. </p>
|
|
90
|
-
* <p>
|
|
91
|
-
* <b>Session duration</b>
|
|
92
|
-
* </p>
|
|
93
|
-
* <p>The temporary credentials are valid for the specified duration, from 900 seconds (15
|
|
94
|
-
* minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is
|
|
95
|
-
* 43,200 seconds (12 hours). Temporary credentials that are obtained by using Amazon Web Services
|
|
96
|
-
* account root user credentials have a maximum duration of 3,600 seconds (1 hour).</p>
|
|
97
|
-
* <p>
|
|
98
|
-
* <b>Permissions</b>
|
|
99
|
-
* </p>
|
|
100
|
-
* <p>You can use the temporary credentials created by <code>GetFederationToken</code> in
|
|
101
|
-
* any Amazon Web Services service except the following:</p>
|
|
102
|
-
* <ul>
|
|
103
|
-
* <li>
|
|
104
|
-
* <p>You cannot call any IAM operations using the CLI or the Amazon Web Services API.
|
|
105
|
-
* </p>
|
|
106
|
-
* </li>
|
|
107
|
-
* <li>
|
|
108
|
-
* <p>You cannot call any STS operations except
|
|
109
|
-
* <code>GetCallerIdentity</code>.</p>
|
|
110
|
-
* </li>
|
|
111
|
-
* </ul>
|
|
112
|
-
* <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
|
|
113
|
-
* this operation. You can pass a single JSON policy document to use as an inline session
|
|
114
|
-
* policy. You can also specify up to 10 managed policies to use as managed session
|
|
115
|
-
* policies. The plain text that you use for both inline and managed session policies can't
|
|
116
|
-
* exceed 2,048 characters.</p>
|
|
117
|
-
* <p>Though the session policy parameters are optional, if you do not pass a policy, then
|
|
118
|
-
* the resulting federated user session has no permissions. When you pass session policies,
|
|
119
|
-
* the session permissions are the intersection of the IAM user policies and the session
|
|
120
|
-
* policies that you pass. This gives you a way to further restrict the permissions for a
|
|
121
|
-
* federated user. You cannot use session policies to grant more permissions than those
|
|
122
|
-
* that are defined in the permissions policy of the IAM user. For more information, see
|
|
123
|
-
* <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a>
|
|
124
|
-
* in the <i>IAM User Guide</i>. For information about using
|
|
125
|
-
* <code>GetFederationToken</code> to create temporary security credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken">GetFederationToken—Federation Through a Custom Identity Broker</a>. </p>
|
|
126
|
-
* <p>You can use the credentials to access a resource that has a resource-based policy. If
|
|
127
|
-
* that policy specifically references the federated user session in the
|
|
128
|
-
* <code>Principal</code> element of the policy, the session has the permissions
|
|
129
|
-
* allowed by the policy. These permissions are granted in addition to the permissions
|
|
130
|
-
* granted by the session policies.</p>
|
|
131
|
-
* <p>
|
|
132
|
-
* <b>Tags</b>
|
|
133
|
-
* </p>
|
|
134
|
-
* <p>(Optional) You can pass tag key-value pairs to your session. These are called session
|
|
135
|
-
* tags. For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in
|
|
136
|
-
* the <i>IAM User Guide</i>.</p>
|
|
137
|
-
* <p>An administrator must grant you the permissions necessary to pass session tags. The
|
|
138
|
-
* administrator can also create granular permissions to allow you to pass only specific
|
|
139
|
-
* session tags. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_attribute-based-access-control.html">Tutorial: Using
|
|
140
|
-
* Tags for Attribute-Based Access Control</a> in the
|
|
141
|
-
* <i>IAM User Guide</i>.</p>
|
|
142
|
-
* <p>Tag key–value pairs are not case sensitive, but case is preserved. This means that you
|
|
143
|
-
* cannot have separate <code>Department</code> and <code>department</code> tag keys.
|
|
144
|
-
* Assume that the user that you are federating has the
|
|
145
|
-
* <code>Department</code>=<code>Marketing</code> tag and you pass the
|
|
146
|
-
* <code>department</code>=<code>engineering</code> session tag.
|
|
147
|
-
* <code>Department</code> and <code>department</code> are not saved as separate tags,
|
|
148
|
-
* and the session tag passed in the request takes precedence over the user tag.</p>
|
|
149
|
-
* @example
|
|
150
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
151
|
-
* ```javascript
|
|
152
|
-
* import { STSClient, GetFederationTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
|
|
153
|
-
* // const { STSClient, GetFederationTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
|
|
154
|
-
* const client = new STSClient(config);
|
|
155
|
-
* const command = new GetFederationTokenCommand(input);
|
|
156
|
-
* const response = await client.send(command);
|
|
157
|
-
* ```
|
|
158
|
-
*
|
|
159
|
-
* @see {@link GetFederationTokenCommandInput} for command's `input` shape.
|
|
160
|
-
* @see {@link GetFederationTokenCommandOutput} for command's `response` shape.
|
|
161
|
-
* @see {@link STSClientResolvedConfig | config} for command's `input` shape.
|
|
162
|
-
*
|
|
163
|
-
*/
|
|
164
|
-
class GetFederationTokenCommand extends smithy_client_1.Command {
|
|
165
|
-
// Start section: command_properties
|
|
166
|
-
// End section: command_properties
|
|
167
|
-
constructor(input) {
|
|
168
|
-
// Start section: command_constructor
|
|
169
|
-
super();
|
|
170
|
-
this.input = input;
|
|
171
|
-
// End section: command_constructor
|
|
172
|
-
}
|
|
173
|
-
/**
|
|
174
|
-
* @internal
|
|
175
|
-
*/
|
|
176
|
-
resolveMiddleware(clientStack, configuration, options) {
|
|
177
|
-
this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize));
|
|
178
|
-
this.middlewareStack.use(middleware_signing_1.getAwsAuthPlugin(configuration));
|
|
179
|
-
const stack = clientStack.concat(this.middlewareStack);
|
|
180
|
-
const { logger } = configuration;
|
|
181
|
-
const clientName = "STSClient";
|
|
182
|
-
const commandName = "GetFederationTokenCommand";
|
|
183
|
-
const handlerExecutionContext = {
|
|
184
|
-
logger,
|
|
185
|
-
clientName,
|
|
186
|
-
commandName,
|
|
187
|
-
inputFilterSensitiveLog: models_0_1.GetFederationTokenRequest.filterSensitiveLog,
|
|
188
|
-
outputFilterSensitiveLog: models_0_1.GetFederationTokenResponse.filterSensitiveLog,
|
|
189
|
-
};
|
|
190
|
-
const { requestHandler } = configuration;
|
|
191
|
-
return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext);
|
|
192
|
-
}
|
|
193
|
-
serialize(input, context) {
|
|
194
|
-
return Aws_query_1.serializeAws_queryGetFederationTokenCommand(input, context);
|
|
195
|
-
}
|
|
196
|
-
deserialize(output, context) {
|
|
197
|
-
return Aws_query_1.deserializeAws_queryGetFederationTokenCommand(output, context);
|
|
198
|
-
}
|
|
199
|
-
}
|
|
200
|
-
exports.GetFederationTokenCommand = GetFederationTokenCommand;
|
|
201
|
-
//# sourceMappingURL=GetFederationTokenCommand.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"GetFederationTokenCommand.js","sourceRoot":"","sources":["../../../commands/GetFederationTokenCommand.ts"],"names":[],"mappings":";;;AACA,iDAA2F;AAC3F,sDAGgC;AAChC,gEAA2D;AAC3D,oEAA+D;AAE/D,0DAA6D;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0JG;AACH,MAAa,yBAA0B,SAAQ,uBAI9C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,YAAqB,KAAqC;QACxD,qCAAqC;QACrC,KAAK,EAAE,CAAC;QAFW,UAAK,GAAL,KAAK,CAAgC;QAGxD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iCAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,2BAA2B,CAAC;QAChD,MAAM,uBAAuB,GAA4B;YACvD,MAAM;YACN,UAAU;YACV,WAAW;YACX,uBAAuB,EAAE,oCAAyB,CAAC,kBAAkB;YACrE,wBAAwB,EAAE,qCAA0B,CAAC,kBAAkB;SACxE,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,CAAC,OAAsC,EAAE,EAAE,CACzC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAqC,EAAE,OAAuB;QAC9E,OAAO,uDAA2C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,OAAuB;QACjE,OAAO,yDAA6C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;CAIF;AAvDD,8DAuDC"}
|
|
@@ -1,114 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.GetSessionTokenCommand = void 0;
|
|
4
|
-
const models_0_1 = require("../models/models_0");
|
|
5
|
-
const Aws_query_1 = require("../protocols/Aws_query");
|
|
6
|
-
const middleware_serde_1 = require("@aws-sdk/middleware-serde");
|
|
7
|
-
const middleware_signing_1 = require("@aws-sdk/middleware-signing");
|
|
8
|
-
const smithy_client_1 = require("@aws-sdk/smithy-client");
|
|
9
|
-
/**
|
|
10
|
-
* <p>Returns a set of temporary credentials for an Amazon Web Services account or IAM user. The
|
|
11
|
-
* credentials consist of an access key ID, a secret access key, and a security token.
|
|
12
|
-
* Typically, you use <code>GetSessionToken</code> if you want to use MFA to protect
|
|
13
|
-
* programmatic calls to specific Amazon Web Services API operations like Amazon EC2 <code>StopInstances</code>.
|
|
14
|
-
* MFA-enabled IAM users would need to call <code>GetSessionToken</code> and submit an MFA
|
|
15
|
-
* code that is associated with their MFA device. Using the temporary security credentials
|
|
16
|
-
* that are returned from the call, IAM users can then make programmatic calls to API
|
|
17
|
-
* operations that require MFA authentication. If you do not supply a correct MFA code, then
|
|
18
|
-
* the API returns an access denied error. For a comparison of <code>GetSessionToken</code>
|
|
19
|
-
* with the other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting
|
|
20
|
-
* Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
|
|
21
|
-
* STS API operations</a> in the <i>IAM User Guide</i>.</p>
|
|
22
|
-
* <p>
|
|
23
|
-
* <b>Session Duration</b>
|
|
24
|
-
* </p>
|
|
25
|
-
* <p>The <code>GetSessionToken</code> operation must be called by using the long-term Amazon Web Services
|
|
26
|
-
* security credentials of the Amazon Web Services account root user or an IAM user. Credentials that are
|
|
27
|
-
* created by IAM users are valid for the duration that you specify. This duration can range
|
|
28
|
-
* from 900 seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours), with a default
|
|
29
|
-
* of 43,200 seconds (12 hours). Credentials based on account credentials can range from 900
|
|
30
|
-
* seconds (15 minutes) up to 3,600 seconds (1 hour), with a default of 1 hour. </p>
|
|
31
|
-
* <p>
|
|
32
|
-
* <b>Permissions</b>
|
|
33
|
-
* </p>
|
|
34
|
-
* <p>The temporary security credentials created by <code>GetSessionToken</code> can be used
|
|
35
|
-
* to make API calls to any Amazon Web Services service with the following exceptions:</p>
|
|
36
|
-
* <ul>
|
|
37
|
-
* <li>
|
|
38
|
-
* <p>You cannot call any IAM API operations unless MFA authentication information is
|
|
39
|
-
* included in the request.</p>
|
|
40
|
-
* </li>
|
|
41
|
-
* <li>
|
|
42
|
-
* <p>You cannot call any STS API <i>except</i>
|
|
43
|
-
* <code>AssumeRole</code> or <code>GetCallerIdentity</code>.</p>
|
|
44
|
-
* </li>
|
|
45
|
-
* </ul>
|
|
46
|
-
* <note>
|
|
47
|
-
* <p>We recommend that you do not call <code>GetSessionToken</code> with Amazon Web Services account
|
|
48
|
-
* root user credentials. Instead, follow our <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#create-iam-users">best practices</a> by
|
|
49
|
-
* creating one or more IAM users, giving them the necessary permissions, and using IAM
|
|
50
|
-
* users for everyday interaction with Amazon Web Services. </p>
|
|
51
|
-
* </note>
|
|
52
|
-
* <p>The credentials that are returned by <code>GetSessionToken</code> are based on
|
|
53
|
-
* permissions associated with the user whose credentials were used to call the operation. If
|
|
54
|
-
* <code>GetSessionToken</code> is called using Amazon Web Services account root user credentials, the
|
|
55
|
-
* temporary credentials have root user permissions. Similarly, if
|
|
56
|
-
* <code>GetSessionToken</code> is called using the credentials of an IAM user, the
|
|
57
|
-
* temporary credentials have the same permissions as the IAM user. </p>
|
|
58
|
-
* <p>For more information about using <code>GetSessionToken</code> to create temporary
|
|
59
|
-
* credentials, go to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getsessiontoken">Temporary
|
|
60
|
-
* Credentials for Users in Untrusted Environments</a> in the
|
|
61
|
-
* <i>IAM User Guide</i>. </p>
|
|
62
|
-
* @example
|
|
63
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
64
|
-
* ```javascript
|
|
65
|
-
* import { STSClient, GetSessionTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
|
|
66
|
-
* // const { STSClient, GetSessionTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
|
|
67
|
-
* const client = new STSClient(config);
|
|
68
|
-
* const command = new GetSessionTokenCommand(input);
|
|
69
|
-
* const response = await client.send(command);
|
|
70
|
-
* ```
|
|
71
|
-
*
|
|
72
|
-
* @see {@link GetSessionTokenCommandInput} for command's `input` shape.
|
|
73
|
-
* @see {@link GetSessionTokenCommandOutput} for command's `response` shape.
|
|
74
|
-
* @see {@link STSClientResolvedConfig | config} for command's `input` shape.
|
|
75
|
-
*
|
|
76
|
-
*/
|
|
77
|
-
class GetSessionTokenCommand extends smithy_client_1.Command {
|
|
78
|
-
// Start section: command_properties
|
|
79
|
-
// End section: command_properties
|
|
80
|
-
constructor(input) {
|
|
81
|
-
// Start section: command_constructor
|
|
82
|
-
super();
|
|
83
|
-
this.input = input;
|
|
84
|
-
// End section: command_constructor
|
|
85
|
-
}
|
|
86
|
-
/**
|
|
87
|
-
* @internal
|
|
88
|
-
*/
|
|
89
|
-
resolveMiddleware(clientStack, configuration, options) {
|
|
90
|
-
this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize));
|
|
91
|
-
this.middlewareStack.use(middleware_signing_1.getAwsAuthPlugin(configuration));
|
|
92
|
-
const stack = clientStack.concat(this.middlewareStack);
|
|
93
|
-
const { logger } = configuration;
|
|
94
|
-
const clientName = "STSClient";
|
|
95
|
-
const commandName = "GetSessionTokenCommand";
|
|
96
|
-
const handlerExecutionContext = {
|
|
97
|
-
logger,
|
|
98
|
-
clientName,
|
|
99
|
-
commandName,
|
|
100
|
-
inputFilterSensitiveLog: models_0_1.GetSessionTokenRequest.filterSensitiveLog,
|
|
101
|
-
outputFilterSensitiveLog: models_0_1.GetSessionTokenResponse.filterSensitiveLog,
|
|
102
|
-
};
|
|
103
|
-
const { requestHandler } = configuration;
|
|
104
|
-
return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext);
|
|
105
|
-
}
|
|
106
|
-
serialize(input, context) {
|
|
107
|
-
return Aws_query_1.serializeAws_queryGetSessionTokenCommand(input, context);
|
|
108
|
-
}
|
|
109
|
-
deserialize(output, context) {
|
|
110
|
-
return Aws_query_1.deserializeAws_queryGetSessionTokenCommand(output, context);
|
|
111
|
-
}
|
|
112
|
-
}
|
|
113
|
-
exports.GetSessionTokenCommand = GetSessionTokenCommand;
|
|
114
|
-
//# sourceMappingURL=GetSessionTokenCommand.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"GetSessionTokenCommand.js","sourceRoot":"","sources":["../../../commands/GetSessionTokenCommand.ts"],"names":[],"mappings":";;;AACA,iDAAqF;AACrF,sDAGgC;AAChC,gEAA2D;AAC3D,oEAA+D;AAE/D,0DAA6D;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,sBAAuB,SAAQ,uBAI3C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,YAAqB,KAAkC;QACrD,qCAAqC;QACrC,KAAK,EAAE,CAAC;QAFW,UAAK,GAAL,KAAK,CAA6B;QAGrD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iCAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,wBAAwB,CAAC;QAC7C,MAAM,uBAAuB,GAA4B;YACvD,MAAM;YACN,UAAU;YACV,WAAW;YACX,uBAAuB,EAAE,iCAAsB,CAAC,kBAAkB;YAClE,wBAAwB,EAAE,kCAAuB,CAAC,kBAAkB;SACrE,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,CAAC,OAAsC,EAAE,EAAE,CACzC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAkC,EAAE,OAAuB;QAC3E,OAAO,oDAAwC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,OAAuB;QACjE,OAAO,sDAA0C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;CAIF;AAvDD,wDAuDC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"defaultRoleAssumers.js","sourceRoot":"","sources":["../../defaultRoleAssumers.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,0LAA0L;AAC1L,qEAMkC;AAClC,2CAAyD;AAEzD;;GAEG;AACI,MAAM,qBAAqB,GAAG,CACnC,aAA4E,EAAE,EACjE,EAAE,CAAC,8CAAwB,CAAC,UAAU,EAAE,qBAAS,CAAC,CAAC;AAFrD,QAAA,qBAAqB,yBAEgC;AAElE;;GAEG;AACI,MAAM,oCAAoC,GAAG,CAClD,aAA4E,EAAE,EAClD,EAAE,CAAC,6DAAuC,CAAC,UAAU,EAAE,qBAAS,CAAC,CAAC;AAFnF,QAAA,oCAAoC,wCAE+C;AAEhG;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAC5C,CAAC,QAAmC,EAA6B,EAAE,CACnE,CAAC,KAAU,EAAE,EAAE,CACb,QAAQ,CAAC;IACP,WAAW,EAAE,6BAAqB,CAAC,KAAK,CAAC;IACzC,0BAA0B,EAAE,4CAAoC,CAAC,KAAK,CAAC;IACvE,GAAG,KAAK;CACT,CAAC,CAAC;AAPM,QAAA,iCAAiC,qCAOvC"}
|
|
@@ -1,135 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
// Please do not touch this file. It's generated from template in:
|
|
4
|
-
// https://github.com/aws/aws-sdk-js-v3/blob/main/codegen/smithy-aws-typescript-codegen/src/main/resources/software/amazon/smithy/aws/typescript/codegen/sts-client-defaultRoleAssumers.spec.ts
|
|
5
|
-
const protocol_http_1 = require("@aws-sdk/protocol-http");
|
|
6
|
-
const stream_1 = require("stream");
|
|
7
|
-
const mockHandle = jest.fn().mockResolvedValue({
|
|
8
|
-
response: new protocol_http_1.HttpResponse({
|
|
9
|
-
statusCode: 200,
|
|
10
|
-
body: stream_1.Readable.from([""]),
|
|
11
|
-
}),
|
|
12
|
-
});
|
|
13
|
-
jest.mock("@aws-sdk/node-http-handler", () => ({
|
|
14
|
-
NodeHttpHandler: jest.fn().mockImplementation(() => ({
|
|
15
|
-
destroy: () => { },
|
|
16
|
-
handle: mockHandle,
|
|
17
|
-
})),
|
|
18
|
-
streamCollector: jest.fn(),
|
|
19
|
-
}));
|
|
20
|
-
const defaultRoleAssumers_1 = require("./defaultRoleAssumers");
|
|
21
|
-
const node_http_handler_1 = require("@aws-sdk/node-http-handler");
|
|
22
|
-
const mockConstructorInput = jest.fn();
|
|
23
|
-
jest.mock("./STSClient", () => ({
|
|
24
|
-
STSClient: function (params) {
|
|
25
|
-
mockConstructorInput(params);
|
|
26
|
-
//@ts-ignore
|
|
27
|
-
return new (jest.requireActual("./STSClient").STSClient)(params);
|
|
28
|
-
},
|
|
29
|
-
}));
|
|
30
|
-
describe("getDefaultRoleAssumer", () => {
|
|
31
|
-
const assumeRoleResponse = `<AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
|
|
32
|
-
<AssumeRoleResult>
|
|
33
|
-
<AssumedRoleUser>
|
|
34
|
-
<AssumedRoleId>AROAZOX2IL27GNRBJHWC2:session</AssumedRoleId>
|
|
35
|
-
<Arn>arn:aws:sts::123:assumed-role/assume-role-test/session</Arn>
|
|
36
|
-
</AssumedRoleUser>
|
|
37
|
-
<Credentials>
|
|
38
|
-
<AccessKeyId>key</AccessKeyId>
|
|
39
|
-
<SecretAccessKey>secrete</SecretAccessKey>
|
|
40
|
-
<SessionToken>session-token</SessionToken>
|
|
41
|
-
<Expiration>2021-05-05T23:22:08Z</Expiration>
|
|
42
|
-
</Credentials>
|
|
43
|
-
</AssumeRoleResult>
|
|
44
|
-
<ResponseMetadata>
|
|
45
|
-
<RequestId>12345678id</RequestId>
|
|
46
|
-
</ResponseMetadata>
|
|
47
|
-
</AssumeRoleResponse>`;
|
|
48
|
-
beforeAll(() => {
|
|
49
|
-
node_http_handler_1.streamCollector.mockImplementation(async () => Buffer.from(assumeRoleResponse));
|
|
50
|
-
});
|
|
51
|
-
beforeEach(() => {
|
|
52
|
-
jest.clearAllMocks();
|
|
53
|
-
});
|
|
54
|
-
it("should use supplied source credentials", async () => {
|
|
55
|
-
var _a, _b;
|
|
56
|
-
const roleAssumer = defaultRoleAssumers_1.getDefaultRoleAssumer();
|
|
57
|
-
const params = {
|
|
58
|
-
RoleArn: "arn:aws:foo",
|
|
59
|
-
RoleSessionName: "session",
|
|
60
|
-
};
|
|
61
|
-
const sourceCred1 = { accessKeyId: "key1", secretAccessKey: "secrete1" };
|
|
62
|
-
await roleAssumer(sourceCred1, params);
|
|
63
|
-
expect(mockHandle).toBeCalledTimes(1);
|
|
64
|
-
// Validate request is signed by sourceCred1
|
|
65
|
-
expect((_a = mockHandle.mock.calls[0][0].headers) === null || _a === void 0 ? void 0 : _a.authorization).toEqual(expect.stringContaining("AWS4-HMAC-SHA256 Credential=key1/"));
|
|
66
|
-
const sourceCred2 = { accessKeyId: "key2", secretAccessKey: "secrete1" };
|
|
67
|
-
await roleAssumer(sourceCred2, params);
|
|
68
|
-
// Validate request is signed by sourceCred2
|
|
69
|
-
expect(mockHandle).toBeCalledTimes(2);
|
|
70
|
-
expect((_b = mockHandle.mock.calls[1][0].headers) === null || _b === void 0 ? void 0 : _b.authorization).toEqual(expect.stringContaining("AWS4-HMAC-SHA256 Credential=key2/"));
|
|
71
|
-
});
|
|
72
|
-
it("should use the STS client config", async () => {
|
|
73
|
-
const logger = console;
|
|
74
|
-
const region = "some-region";
|
|
75
|
-
const handler = new node_http_handler_1.NodeHttpHandler();
|
|
76
|
-
const roleAssumer = defaultRoleAssumers_1.getDefaultRoleAssumer({
|
|
77
|
-
region,
|
|
78
|
-
logger,
|
|
79
|
-
requestHandler: handler,
|
|
80
|
-
});
|
|
81
|
-
const params = {
|
|
82
|
-
RoleArn: "arn:aws:foo",
|
|
83
|
-
RoleSessionName: "session",
|
|
84
|
-
};
|
|
85
|
-
const sourceCred = { accessKeyId: "key", secretAccessKey: "secrete" };
|
|
86
|
-
await roleAssumer(sourceCred, params);
|
|
87
|
-
expect(mockConstructorInput).toHaveBeenCalledTimes(1);
|
|
88
|
-
expect(mockConstructorInput.mock.calls[0][0]).toMatchObject({
|
|
89
|
-
logger,
|
|
90
|
-
requestHandler: handler,
|
|
91
|
-
region,
|
|
92
|
-
});
|
|
93
|
-
});
|
|
94
|
-
});
|
|
95
|
-
describe("getDefaultRoleAssumerWithWebIdentity", () => {
|
|
96
|
-
const assumeRoleResponse = `<Response xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
|
|
97
|
-
<AssumeRoleWithWebIdentityResult>
|
|
98
|
-
<Credentials>
|
|
99
|
-
<AccessKeyId>key</AccessKeyId>
|
|
100
|
-
<SecretAccessKey>secrete</SecretAccessKey>
|
|
101
|
-
<SessionToken>session-token</SessionToken>
|
|
102
|
-
<Expiration>2021-05-05T23:22:08Z</Expiration>
|
|
103
|
-
</Credentials>
|
|
104
|
-
</AssumeRoleWithWebIdentityResult>
|
|
105
|
-
</Response>`;
|
|
106
|
-
beforeAll(() => {
|
|
107
|
-
node_http_handler_1.streamCollector.mockImplementation(async () => Buffer.from(assumeRoleResponse));
|
|
108
|
-
});
|
|
109
|
-
beforeEach(() => {
|
|
110
|
-
jest.clearAllMocks();
|
|
111
|
-
});
|
|
112
|
-
it("should use the STS client config", async () => {
|
|
113
|
-
const logger = console;
|
|
114
|
-
const region = "some-region";
|
|
115
|
-
const handler = new node_http_handler_1.NodeHttpHandler();
|
|
116
|
-
const roleAssumerWithWebIdentity = defaultRoleAssumers_1.getDefaultRoleAssumerWithWebIdentity({
|
|
117
|
-
region,
|
|
118
|
-
logger,
|
|
119
|
-
requestHandler: handler,
|
|
120
|
-
});
|
|
121
|
-
const params = {
|
|
122
|
-
RoleArn: "arn:aws:foo",
|
|
123
|
-
RoleSessionName: "session",
|
|
124
|
-
WebIdentityToken: "token",
|
|
125
|
-
};
|
|
126
|
-
await roleAssumerWithWebIdentity(params);
|
|
127
|
-
expect(mockConstructorInput).toHaveBeenCalledTimes(1);
|
|
128
|
-
expect(mockConstructorInput.mock.calls[0][0]).toMatchObject({
|
|
129
|
-
logger,
|
|
130
|
-
requestHandler: handler,
|
|
131
|
-
region,
|
|
132
|
-
});
|
|
133
|
-
});
|
|
134
|
-
});
|
|
135
|
-
//# sourceMappingURL=defaultRoleAssumers.spec.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"defaultRoleAssumers.spec.js","sourceRoot":"","sources":["../../defaultRoleAssumers.spec.ts"],"names":[],"mappings":";;AAAA,kEAAkE;AAClE,+LAA+L;AAC/L,0DAAsD;AACtD,mCAAkC;AAElC,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;IAC7C,QAAQ,EAAE,IAAI,4BAAY,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,iBAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;KAC1B,CAAC;CACH,CAAC,CAAC;AACH,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IACH,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,+DAAoG;AAEpG,kEAA8E;AAE9E,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;AACvC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,UAAU,MAAW;QAC9B,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC7B,YAAY;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;sBAgBP,CAAC;IAErB,SAAS,CAAC,GAAG,EAAE;QACZ,mCAA6B,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;;QACtD,MAAM,WAAW,GAAG,2CAAqB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA2B;YACrC,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;SAC3B,CAAC;QACF,MAAM,WAAW,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACzE,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,4CAA4C;QAC5C,MAAM,CAAC,MAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,0CAAE,aAAa,CAAC,CAAC,OAAO,CAChE,MAAM,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,CAC7D,CAAC;QACF,MAAM,WAAW,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACzE,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,4CAA4C;QAC5C,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,0CAAE,aAAa,CAAC,CAAC,OAAO,CAChE,MAAM,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,mCAAe,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,2CAAqB,CAAC;YACxC,MAAM;YACN,MAAM;YACN,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAA2B;YACrC,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;SAC3B,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;QACtE,MAAM,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1D,MAAM;YACN,cAAc,EAAE,OAAO;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,kBAAkB,GAAG;;;;;;;;;cASf,CAAC;IAEb,SAAS,CAAC,GAAG,EAAE;QACZ,mCAA6B,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,mCAAe,EAAE,CAAC;QACtC,MAAM,0BAA0B,GAAG,0DAAoC,CAAC;YACtE,MAAM;YACN,MAAM;YACN,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAA0C;YACpD,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;YAC1B,gBAAgB,EAAE,OAAO;SAC1B,CAAC;QACF,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1D,MAAM;YACN,cAAc,EAAE,OAAO;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"defaultStsRoleAssumers.js","sourceRoot":"","sources":["../../defaultStsRoleAssumers.ts"],"names":[],"mappings":";;;AAIA,oEAAyF;AACzF,kGAGqD;AAQrD,MAAM,0BAA0B,GAAG,WAAW,CAAC;AAE/C;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAAC,MAA6C,EAA6B,EAAE;IACzG,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE;QAChC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC;KACnE;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI;YACF,OAAO,MAAM,MAAM,EAAE,CAAC;SACvB;QAAC,OAAO,CAAC,EAAE;YACV,OAAO,0BAA0B,CAAC;SACnC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,qBAAqB,GAAG,CACnC,UAAyE,EACzE,aAA0D,EAC7C,EAAE;IACf,IAAI,SAAoB,CAAC;IACzB,IAAI,kBAA+B,CAAC;IACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;QACnC,kBAAkB,GAAG,WAAW,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;YACtD,SAAS,GAAG,IAAI,aAAa,CAAC;gBAC5B,MAAM;gBACN,oEAAoE;gBACpE,yBAAyB,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,kBAAkB;gBAC/D,MAAM,EAAE,qBAAqB,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;gBAC1D,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC;SACJ;QACD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,qCAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE;YAC5E,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;SAC1F;QACD,OAAO;YACL,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,qBAAqB,yBA6BhC;AAOF;;;GAGG;AACI,MAAM,oCAAoC,GAAG,CAClD,UAAyE,EACzE,aAA0D,EAC9B,EAAE;IAC9B,IAAI,SAAoB,CAAC;IACzB,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;YACtD,SAAS,GAAG,IAAI,aAAa,CAAC;gBAC5B,MAAM;gBACN,MAAM,EAAE,qBAAqB,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;gBAC1D,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC;SACJ;QACD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,mEAAgC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE;YAC5E,MAAM,IAAI,KAAK,CAAC,sEAAsE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;SACzG;QACD,OAAO;YACL,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC,CAAC;AAzBW,QAAA,oCAAoC,wCAyB/C;AAOF;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAC5C,CAAC,QAAmC,EAA6B,EAAE,CACnE,CAAC,KAA8B,EAAE,EAAE,CACjC,QAAQ,CAAC;IACP,WAAW,EAAE,6BAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC;IAC9D,0BAA0B,EAAE,4CAAoC,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC;IAC5F,GAAG,KAAK;CACT,CAAC,CAAC;AAPM,QAAA,iCAAiC,qCAOvC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../../endpoints.ts"],"names":[],"mappings":";;;AAAA,8DAAoF;AAGpF,MAAM,UAAU,GAAe;IAC7B,YAAY,EAAE;QACZ,QAAQ,EAAE,mBAAmB;QAC7B,aAAa,EAAE,WAAW;KAC3B;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,kCAAkC;QAC5C,aAAa,EAAE,WAAW;KAC3B;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,kCAAkC;QAC5C,aAAa,EAAE,WAAW;KAC3B;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,iCAAiC;QAC3C,aAAa,EAAE,eAAe;KAC/B;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,iCAAiC;QAC3C,aAAa,EAAE,eAAe;KAC/B;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,kCAAkC;QAC5C,aAAa,EAAE,WAAW;KAC3B;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,kCAAkC;QAC5C,aAAa,EAAE,WAAW;KAC3B;CACF,CAAC;AAEF,MAAM,aAAa,GAAkB;IACnC,GAAG,EAAE;QACH,OAAO,EAAE;YACP,YAAY;YACZ,WAAW;YACX,gBAAgB;YAChB,gBAAgB;YAChB,gBAAgB;YAChB,YAAY;YACZ,gBAAgB;YAChB,gBAAgB;YAChB,YAAY;YACZ,cAAc;YACd,cAAc;YACd,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,WAAW;YACX,WAAW;YACX,YAAY;YACZ,WAAW;YACX,WAAW;YACX,gBAAgB;YAChB,WAAW;YACX,gBAAgB;YAChB,WAAW;YACX,gBAAgB;YAChB,WAAW;YACX,gBAAgB;SACjB;QACD,QAAQ,EAAE,4BAA4B;KACvC;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACzC,QAAQ,EAAE,+BAA+B;KAC1C;IACD,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,eAAe,CAAC;QAC1B,QAAQ,EAAE,yBAAyB;KACpC;IACD,WAAW,EAAE;QACX,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,QAAQ,EAAE,4BAA4B;KACvC;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,oBAAoB,CAAC;QACvF,QAAQ,EAAE,4BAA4B;KACvC;CACF,CAAC;AAEK,MAAM,yBAAyB,GAAuB,KAAK,EAAE,MAAc,EAAE,OAAa,EAAE,EAAE,CACnG,+BAAa,CAAC,MAAM,EAAE;IACpB,GAAG,OAAO;IACV,cAAc,EAAE,KAAK;IACrB,UAAU;IACV,aAAa;CACd,CAAC,CAAC;AANQ,QAAA,yBAAyB,6BAMjC"}
|
package/dist/cjs/index.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../index.ts"],"names":[],"mappings":";;;AAAA,sDAA4B;AAC5B,gDAAsB;AACtB,uEAA6C;AAC7C,+EAAqD;AACrD,sFAA4D;AAC5D,uFAA6D;AAC7D,6EAAmD;AACnD,8EAAoD;AACpD,+EAAqD;AACrD,4EAAkD;AAClD,gEAAsC;AACtC,yDAA+B"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../models/index.ts"],"names":[],"mappings":";;;AAAA,qDAA2B"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"models_0.js","sourceRoot":"","sources":["../../../models/models_0.ts"],"names":[],"mappings":";;;AAqBA,IAAiB,eAAe,CAO/B;AAPD,WAAiB,eAAe;IAC9B;;OAEG;IACU,kCAAkB,GAAG,CAAC,GAAoB,EAAO,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,eAAe,GAAf,uBAAe,KAAf,uBAAe,QAO/B;AAeD,IAAiB,oBAAoB,CAOpC;AAPD,WAAiB,oBAAoB;IACnC;;OAEG;IACU,uCAAkB,GAAG,CAAC,GAAyB,EAAO,EAAE,CAAC,CAAC;QACrE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,oBAAoB,GAApB,4BAAoB,KAApB,4BAAoB,QAOpC;AA0BD,IAAiB,GAAG,CAOnB;AAPD,WAAiB,GAAG;IAClB;;OAEG;IACU,sBAAkB,GAAG,CAAC,GAAQ,EAAO,EAAE,CAAC,CAAC;QACpD,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,GAAG,GAAH,WAAG,KAAH,WAAG,QAOnB;AA2MD,IAAiB,iBAAiB,CAOjC;AAPD,WAAiB,iBAAiB;IAChC;;OAEG;IACU,oCAAkB,GAAG,CAAC,GAAsB,EAAO,EAAE,CAAC,CAAC;QAClE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAOjC;AA4BD,IAAiB,WAAW,CAO3B;AAPD,WAAiB,WAAW;IAC1B;;OAEG;IACU,8BAAkB,GAAG,CAAC,GAAgB,EAAO,EAAE,CAAC,CAAC;QAC5D,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,WAAW,GAAX,mBAAW,KAAX,mBAAW,QAO3B;AAmDD,IAAiB,kBAAkB,CAOlC;AAPD,WAAiB,kBAAkB;IACjC;;OAEG;IACU,qCAAkB,GAAG,CAAC,GAAuB,EAAO,EAAE,CAAC,CAAC;QACnE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,kBAAkB,GAAlB,0BAAkB,KAAlB,0BAAkB,QAOlC;AAYD,IAAiB,qBAAqB,CAOrC;AAPD,WAAiB,qBAAqB;IACpC;;OAEG;IACU,wCAAkB,GAAG,CAAC,GAA0B,EAAO,EAAE,CAAC,CAAC;QACtE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAOrC;AAYD,IAAiB,gCAAgC,CAOhD;AAPD,WAAiB,gCAAgC;IAC/C;;OAEG;IACU,mDAAkB,GAAG,CAAC,GAAqC,EAAO,EAAE,CAAC,CAAC;QACjF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,gCAAgC,GAAhC,wCAAgC,KAAhC,wCAAgC,QAOhD;AAmBD,IAAiB,6BAA6B,CAO7C;AAPD,WAAiB,6BAA6B;IAC5C;;OAEG;IACU,gDAAkB,GAAG,CAAC,GAAkC,EAAO,EAAE,CAAC,CAAC;QAC9E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,6BAA6B,GAA7B,qCAA6B,KAA7B,qCAA6B,QAO7C;AAeD,IAAiB,uBAAuB,CAOvC;AAPD,WAAiB,uBAAuB;IACtC;;OAEG;IACU,0CAAkB,GAAG,CAAC,GAA4B,EAAO,EAAE,CAAC,CAAC;QACxE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,uBAAuB,GAAvB,+BAAuB,KAAvB,+BAAuB,QAOvC;AAoGD,IAAiB,yBAAyB,CAOzC;AAPD,WAAiB,yBAAyB;IACxC;;OAEG;IACU,4CAAkB,GAAG,CAAC,GAA8B,EAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,yBAAyB,GAAzB,iCAAyB,KAAzB,iCAAyB,QAOzC;AAqGD,IAAiB,0BAA0B,CAO1C;AAPD,WAAiB,0BAA0B;IACzC;;OAEG;IACU,6CAAkB,GAAG,CAAC,GAA+B,EAAO,EAAE,CAAC,CAAC;QAC3E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,0BAA0B,GAA1B,kCAA0B,KAA1B,kCAA0B,QAO1C;AAcD,IAAiB,yBAAyB,CAOzC;AAPD,WAAiB,yBAAyB;IACxC;;OAEG;IACU,4CAAkB,GAAG,CAAC,GAA8B,EAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,yBAAyB,GAAzB,iCAAyB,KAAzB,iCAAyB,QAOzC;AAYD,IAAiB,6BAA6B,CAO7C;AAPD,WAAiB,6BAA6B;IAC5C;;OAEG;IACU,gDAAkB,GAAG,CAAC,GAAkC,EAAO,EAAE,CAAC,CAAC;QAC9E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,6BAA6B,GAA7B,qCAA6B,KAA7B,qCAA6B,QAO7C;AAkHD,IAAiB,gCAAgC,CAOhD;AAPD,WAAiB,gCAAgC;IAC/C;;OAEG;IACU,mDAAkB,GAAG,CAAC,GAAqC,EAAO,EAAE,CAAC,CAAC;QACjF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,gCAAgC,GAAhC,wCAAgC,KAAhC,wCAAgC,QAOhD;AAgFD,IAAiB,iCAAiC,CAOjD;AAPD,WAAiB,iCAAiC;IAChD;;OAEG;IACU,oDAAkB,GAAG,CAAC,GAAsC,EAAO,EAAE,CAAC,CAAC;QAClF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,iCAAiC,GAAjC,yCAAiC,KAAjC,yCAAiC,QAOjD;AAeD,IAAiB,8BAA8B,CAO9C;AAPD,WAAiB,8BAA8B;IAC7C;;OAEG;IACU,iDAAkB,GAAG,CAAC,GAAmC,EAAO,EAAE,CAAC,CAAC;QAC/E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,8BAA8B,GAA9B,sCAA8B,KAA9B,sCAA8B,QAO9C;AASD,IAAiB,iCAAiC,CAOjD;AAPD,WAAiB,iCAAiC;IAChD;;OAEG;IACU,oDAAkB,GAAG,CAAC,GAAsC,EAAO,EAAE,CAAC,CAAC;QAClF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,iCAAiC,GAAjC,yCAAiC,KAAjC,yCAAiC,QAOjD;AAaD,IAAiB,kCAAkC,CAOlD;AAPD,WAAiB,kCAAkC;IACjD;;OAEG;IACU,qDAAkB,GAAG,CAAC,GAAuC,EAAO,EAAE,CAAC,CAAC;QACnF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,kCAAkC,GAAlC,0CAAkC,KAAlC,0CAAkC,QAOlD;AAaD,IAAiB,oCAAoC,CAOpD;AAPD,WAAiB,oCAAoC;IACnD;;OAEG;IACU,uDAAkB,GAAG,CAAC,GAAyC,EAAO,EAAE,CAAC,CAAC;QACrF,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,oCAAoC,GAApC,4CAAoC,KAApC,4CAAoC,QAOpD;AAWD,IAAiB,uBAAuB,CAOvC;AAPD,WAAiB,uBAAuB;IACtC;;OAEG;IACU,0CAAkB,GAAG,CAAC,GAA4B,EAAO,EAAE,CAAC,CAAC;QACxE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,uBAAuB,GAAvB,+BAAuB,KAAvB,+BAAuB,QAOvC;AASD,IAAiB,wBAAwB,CAOxC;AAPD,WAAiB,wBAAwB;IACvC;;OAEG;IACU,2CAAkB,GAAG,CAAC,GAA6B,EAAO,EAAE,CAAC,CAAC;QACzE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,wBAAwB,GAAxB,gCAAwB,KAAxB,gCAAwB,QAOxC;AAID,IAAiB,wBAAwB,CAOxC;AAPD,WAAiB,wBAAwB;IACvC;;OAEG;IACU,2CAAkB,GAAG,CAAC,GAA6B,EAAO,EAAE,CAAC,CAAC;QACzE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,wBAAwB,GAAxB,gCAAwB,KAAxB,gCAAwB,QAOxC;AA2BD,IAAiB,yBAAyB,CAOzC;AAPD,WAAiB,yBAAyB;IACxC;;OAEG;IACU,4CAAkB,GAAG,CAAC,GAA8B,EAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,yBAAyB,GAAzB,iCAAyB,KAAzB,iCAAyB,QAOzC;AA2HD,IAAiB,yBAAyB,CAOzC;AAPD,WAAiB,yBAAyB;IACxC;;OAEG;IACU,4CAAkB,GAAG,CAAC,GAA8B,EAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,yBAAyB,GAAzB,iCAAyB,KAAzB,iCAAyB,QAOzC;AAoBD,IAAiB,aAAa,CAO7B;AAPD,WAAiB,aAAa;IAC5B;;OAEG;IACU,gCAAkB,GAAG,CAAC,GAAkB,EAAO,EAAE,CAAC,CAAC;QAC9D,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,aAAa,GAAb,qBAAa,KAAb,qBAAa,QAO7B;AAiCD,IAAiB,0BAA0B,CAO1C;AAPD,WAAiB,0BAA0B;IACzC;;OAEG;IACU,6CAAkB,GAAG,CAAC,GAA+B,EAAO,EAAE,CAAC,CAAC;QAC3E,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,0BAA0B,GAA1B,kCAA0B,KAA1B,kCAA0B,QAO1C;AAsCD,IAAiB,sBAAsB,CAOtC;AAPD,WAAiB,sBAAsB;IACrC;;OAEG;IACU,yCAAkB,GAAG,CAAC,GAA2B,EAAO,EAAE,CAAC,CAAC;QACvE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,sBAAsB,GAAtB,8BAAsB,KAAtB,8BAAsB,QAOtC;AAmBD,IAAiB,uBAAuB,CAOvC;AAPD,WAAiB,uBAAuB;IACtC;;OAEG;IACU,0CAAkB,GAAG,CAAC,GAA4B,EAAO,EAAE,CAAC,CAAC;QACxE,GAAG,GAAG;KACP,CAAC,CAAC;AACL,CAAC,EAPgB,uBAAuB,GAAvB,+BAAuB,KAAvB,+BAAuB,QAOvC"}
|
package/dist/cjs/package.json
DELETED
|
@@ -1,93 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@aws-sdk/client-sts",
|
|
3
|
-
"description": "AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.33.0",
|
|
5
|
-
"scripts": {
|
|
6
|
-
"clean": "yarn remove-definitions && yarn remove-dist && yarn remove-documentation",
|
|
7
|
-
"build-documentation": "yarn remove-documentation && typedoc ./",
|
|
8
|
-
"remove-definitions": "rimraf ./types",
|
|
9
|
-
"remove-dist": "rimraf ./dist",
|
|
10
|
-
"remove-documentation": "rimraf ./docs",
|
|
11
|
-
"test": "exit 0",
|
|
12
|
-
"build:cjs": "tsc -p tsconfig.json",
|
|
13
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
14
|
-
"build": "yarn build:cjs && yarn build:es",
|
|
15
|
-
"downlevel-dts": "downlevel-dts dist/types dist/types/ts3.4"
|
|
16
|
-
},
|
|
17
|
-
"main": "./dist/cjs/index.js",
|
|
18
|
-
"types": "./dist/types/index.d.ts",
|
|
19
|
-
"module": "./dist/es/index.js",
|
|
20
|
-
"browser": {
|
|
21
|
-
"./runtimeConfig": "./runtimeConfig.browser"
|
|
22
|
-
},
|
|
23
|
-
"react-native": {
|
|
24
|
-
"./runtimeConfig": "./runtimeConfig.native"
|
|
25
|
-
},
|
|
26
|
-
"sideEffects": false,
|
|
27
|
-
"dependencies": {
|
|
28
|
-
"@aws-crypto/sha256-browser": "^1.0.0",
|
|
29
|
-
"@aws-crypto/sha256-js": "^1.0.0",
|
|
30
|
-
"@aws-sdk/config-resolver": "3.33.0",
|
|
31
|
-
"@aws-sdk/credential-provider-node": "3.33.0",
|
|
32
|
-
"@aws-sdk/fetch-http-handler": "3.32.0",
|
|
33
|
-
"@aws-sdk/hash-node": "3.32.0",
|
|
34
|
-
"@aws-sdk/invalid-dependency": "3.32.0",
|
|
35
|
-
"@aws-sdk/middleware-content-length": "3.32.0",
|
|
36
|
-
"@aws-sdk/middleware-host-header": "3.32.0",
|
|
37
|
-
"@aws-sdk/middleware-logger": "3.32.0",
|
|
38
|
-
"@aws-sdk/middleware-retry": "3.32.0",
|
|
39
|
-
"@aws-sdk/middleware-sdk-sts": "3.33.0",
|
|
40
|
-
"@aws-sdk/middleware-serde": "3.32.0",
|
|
41
|
-
"@aws-sdk/middleware-signing": "3.33.0",
|
|
42
|
-
"@aws-sdk/middleware-stack": "3.32.0",
|
|
43
|
-
"@aws-sdk/middleware-user-agent": "3.32.0",
|
|
44
|
-
"@aws-sdk/node-config-provider": "3.32.0",
|
|
45
|
-
"@aws-sdk/node-http-handler": "3.32.0",
|
|
46
|
-
"@aws-sdk/protocol-http": "3.32.0",
|
|
47
|
-
"@aws-sdk/smithy-client": "3.32.0",
|
|
48
|
-
"@aws-sdk/types": "3.32.0",
|
|
49
|
-
"@aws-sdk/url-parser": "3.32.0",
|
|
50
|
-
"@aws-sdk/util-base64-browser": "3.32.0",
|
|
51
|
-
"@aws-sdk/util-base64-node": "3.32.0",
|
|
52
|
-
"@aws-sdk/util-body-length-browser": "3.32.0",
|
|
53
|
-
"@aws-sdk/util-body-length-node": "3.32.0",
|
|
54
|
-
"@aws-sdk/util-user-agent-browser": "3.32.0",
|
|
55
|
-
"@aws-sdk/util-user-agent-node": "3.33.0",
|
|
56
|
-
"@aws-sdk/util-utf8-browser": "3.32.0",
|
|
57
|
-
"@aws-sdk/util-utf8-node": "3.32.0",
|
|
58
|
-
"entities": "2.2.0",
|
|
59
|
-
"fast-xml-parser": "3.19.0",
|
|
60
|
-
"tslib": "^2.3.0"
|
|
61
|
-
},
|
|
62
|
-
"devDependencies": {
|
|
63
|
-
"@aws-sdk/client-documentation-generator": "3.32.0",
|
|
64
|
-
"@types/node": "^12.7.5",
|
|
65
|
-
"downlevel-dts": "0.7.0",
|
|
66
|
-
"jest": "^26.1.0",
|
|
67
|
-
"rimraf": "^3.0.0",
|
|
68
|
-
"ts-jest": "^26.4.1",
|
|
69
|
-
"typedoc": "^0.19.2",
|
|
70
|
-
"typescript": "~4.3.5"
|
|
71
|
-
},
|
|
72
|
-
"engines": {
|
|
73
|
-
"node": ">=10.0.0"
|
|
74
|
-
},
|
|
75
|
-
"typesVersions": {
|
|
76
|
-
"<4.0": {
|
|
77
|
-
"dist/types/*": [
|
|
78
|
-
"dist/types/ts3.4/*"
|
|
79
|
-
]
|
|
80
|
-
}
|
|
81
|
-
},
|
|
82
|
-
"author": {
|
|
83
|
-
"name": "AWS SDK for JavaScript Team",
|
|
84
|
-
"url": "https://aws.amazon.com/javascript/"
|
|
85
|
-
},
|
|
86
|
-
"license": "Apache-2.0",
|
|
87
|
-
"homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-sts",
|
|
88
|
-
"repository": {
|
|
89
|
-
"type": "git",
|
|
90
|
-
"url": "https://github.com/aws/aws-sdk-js-v3.git",
|
|
91
|
-
"directory": "clients/client-sts"
|
|
92
|
-
}
|
|
93
|
-
}
|