@aws-sdk/credential-providers 3.159.0 → 3.162.0

package/CHANGELOG.md

@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.162.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.161.0...v3.162.0) (2022-08-31)
+
+**Note:** Version bump only for package @aws-sdk/credential-providers
+
+
+
+
+
+# [3.161.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.160.0...v3.161.0) (2022-08-30)
+
+
+### Bug Fixes
+
+* **credential-providers:** support custom middleware for sts client ([#3887](https://github.com/aws/aws-sdk-js-v3/issues/3887)) ([072dea3](https://github.com/aws/aws-sdk-js-v3/commit/072dea35d610fdea8db4e0ac7233a0f8a8317a5e))
+
+
+
+
+
+# [3.160.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.159.0...v3.160.0) (2022-08-29)
+
+**Note:** Version bump only for package @aws-sdk/credential-providers
+
+
+
+
+
 # [3.159.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.158.0...v3.159.0) (2022-08-26)
 
 **Note:** Version bump only for package @aws-sdk/credential-providers

package/README.md

@@ -650,6 +650,35 @@ const credentialProvider = fromNodeProviderChain({
 });
 ```
 
+## Add Custom Headers to STS assume-role calls
+
+You can specify the plugins--groups of middleware, to inject to the STS client.
+For example, you can inject custom headers to each STS assume-role calls. It's
+available in [`fromTemporaryCredentials()`](#fromtemporarycredentials),
+[`fromWebToken()`](#fromwebtoken), [`fromTokenFile()`](#fromtokenfile), [`fromIni()`](#fromini).
+
+Code example:
+
+```javascript
+const addConfusedDeputyMiddleware = (next) => (args) => {
+  args.request.headers["x-amz-source-account"] = account;
+  args.request.headers["x-amz-source-arn"] = sourceArn;
+  return next(args);
+};
+const confusedDeputyPlugin = {
+  applyToStack: (stack) => {
+    stack.add(addConfusedDeputyMiddleware, { step: "finalizeRequest" });
+  },
+};
+const provider = fromTemporaryCredentials({
+  // Required. Options passed to STS AssumeRole operation.
+  params: {
+    RoleArn: "arn:aws:iam::1234567890:role/Role",
+  },
+  clientPlugins: [confusedDeputyPlugin],
+});
+```
+
 [getcredentialsforidentity_api]: https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetCredentialsForIdentity.html
 [getid_api]: https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html
 [assumerole_api]: https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

package/dist-cjs/fromIni.js

@@ -7,8 +7,8 @@ const fromIni = (init = {}) => {
     var _a, _b;
     return (0, credential_provider_ini_1.fromIni)({
         ...init,
-        roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumer)(init.clientConfig),
-        roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig),
+        roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumer)(init.clientConfig, init.clientPlugins),
+        roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig, init.clientPlugins),
     });
 };
 exports.fromIni = fromIni;

package/dist-cjs/fromNodeProviderChain.js

@@ -7,8 +7,8 @@ const fromNodeProviderChain = (init = {}) => {
     var _a, _b;
     return (0, credential_provider_node_1.defaultProvider)({
         ...init,
-        roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumer)(init.clientConfig),
-        roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig),
+        roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumer)(init.clientConfig, init.clientPlugins),
+        roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig, init.clientPlugins),
     });
 };
 exports.fromNodeProviderChain = fromNodeProviderChain;

package/dist-cjs/fromTemporaryCredentials.js

@@ -16,6 +16,11 @@ const fromTemporaryCredentials = (options) => {
         }
         if (!stsClient)
             stsClient = new client_sts_1.STSClient({ ...options.clientConfig, credentials: options.masterCredentials });
+        if (options.clientPlugins) {
+            for (const plugin of options.clientPlugins) {
+                stsClient.middlewareStack.use(plugin);
+            }
+        }
         const { Credentials } = await stsClient.send(new client_sts_1.AssumeRoleCommand(params));
         if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
             throw new property_provider_1.CredentialsProviderError(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);

package/dist-cjs/fromTokenFile.js

@@ -7,7 +7,7 @@ const fromTokenFile = (init = {}) => {
     var _a;
     return (0, credential_provider_web_identity_1.fromTokenFile)({
         ...init,
-        roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig),
+        roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig, init.clientPlugins),
     });
 };
 exports.fromTokenFile = fromTokenFile;

package/dist-cjs/fromWebToken.js

@@ -7,7 +7,7 @@ const fromWebToken = (init) => {
     var _a;
     return (0, credential_provider_web_identity_1.fromWebToken)({
         ...init,
-        roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig),
+        roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : (0, client_sts_1.getDefaultRoleAssumerWithWebIdentity)(init.clientConfig, init.clientPlugins),
     });
 };
 exports.fromWebToken = fromWebToken;

package/dist-es/fromIni.js

@@ -4,5 +4,5 @@ import { fromIni as _fromIni } from "@aws-sdk/credential-provider-ini";
 export var fromIni = function (init) {
     var _a, _b;
     if (init === void 0) { init = {}; }
-    return _fromIni(__assign(__assign({}, init), { roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : getDefaultRoleAssumer(init.clientConfig), roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : getDefaultRoleAssumerWithWebIdentity(init.clientConfig) }));
+    return _fromIni(__assign(__assign({}, init), { roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : getDefaultRoleAssumer(init.clientConfig, init.clientPlugins), roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : getDefaultRoleAssumerWithWebIdentity(init.clientConfig, init.clientPlugins) }));
 };

package/dist-es/fromNodeProviderChain.js

@@ -4,5 +4,5 @@ import { defaultProvider } from "@aws-sdk/credential-provider-node";
 export var fromNodeProviderChain = function (init) {
     var _a, _b;
     if (init === void 0) { init = {}; }
-    return defaultProvider(__assign(__assign({}, init), { roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : getDefaultRoleAssumer(init.clientConfig), roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : getDefaultRoleAssumerWithWebIdentity(init.clientConfig) }));
+    return defaultProvider(__assign(__assign({}, init), { roleAssumer: (_a = init.roleAssumer) !== null && _a !== void 0 ? _a : getDefaultRoleAssumer(init.clientConfig, init.clientPlugins), roleAssumerWithWebIdentity: (_b = init.roleAssumerWithWebIdentity) !== null && _b !== void 0 ? _b : getDefaultRoleAssumerWithWebIdentity(init.clientConfig, init.clientPlugins) }));
 };

package/dist-es/fromTemporaryCredentials.js

@@ -1,15 +1,16 @@
-import { __assign, __awaiter, __generator } from "tslib";
+import { __assign, __awaiter, __generator, __values } from "tslib";
 import { AssumeRoleCommand, STSClient } from "@aws-sdk/client-sts";
 import { CredentialsProviderError } from "@aws-sdk/property-provider";
 export var fromTemporaryCredentials = function (options) {
     var stsClient;
     return function () { return __awaiter(void 0, void 0, void 0, function () {
-        var params, _a, Credentials;
-        var _b;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
+        var params, _a, _b, _c, plugin, Credentials;
+        var e_1, _d;
+        var _e;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
                 case 0:
-                    params = __assign(__assign({}, options.params), { RoleSessionName: (_b = options.params.RoleSessionName) !== null && _b !== void 0 ? _b : "aws-sdk-js-" + Date.now() });
+                    params = __assign(__assign({}, options.params), { RoleSessionName: (_e = options.params.RoleSessionName) !== null && _e !== void 0 ? _e : "aws-sdk-js-" + Date.now() });
                     if (!(params === null || params === void 0 ? void 0 : params.SerialNumber)) return [3, 2];
                     if (!options.mfaCodeProvider) {
                         throw new CredentialsProviderError("Temporary credential requires multi-factor authentication," + " but no MFA code callback was provided.", false);
@@ -17,14 +18,29 @@ export var fromTemporaryCredentials = function (options) {
                     _a = params;
                     return [4, options.mfaCodeProvider(params === null || params === void 0 ? void 0 : params.SerialNumber)];
                 case 1:
-                    _a.TokenCode = _c.sent();
-                    _c.label = 2;
+                    _a.TokenCode = _f.sent();
+                    _f.label = 2;
                 case 2:
                     if (!stsClient)
                         stsClient = new STSClient(__assign(__assign({}, options.clientConfig), { credentials: options.masterCredentials }));
+                    if (options.clientPlugins) {
+                        try {
+                            for (_b = __values(options.clientPlugins), _c = _b.next(); !_c.done; _c = _b.next()) {
+                                plugin = _c.value;
+                                stsClient.middlewareStack.use(plugin);
+                            }
+                        }
+                        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                        finally {
+                            try {
+                                if (_c && !_c.done && (_d = _b.return)) _d.call(_b);
+                            }
+                            finally { if (e_1) throw e_1.error; }
+                        }
+                    }
                     return [4, stsClient.send(new AssumeRoleCommand(params))];
                 case 3:
-                    Credentials = (_c.sent()).Credentials;
+                    Credentials = (_f.sent()).Credentials;
                     if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
                         throw new CredentialsProviderError("Invalid response from STS.assumeRole call with role ".concat(params.RoleArn));
                     }

package/dist-es/fromTokenFile.js

@@ -4,5 +4,5 @@ import { fromTokenFile as _fromTokenFile, } from "@aws-sdk/credential-provider-w
 export var fromTokenFile = function (init) {
     var _a;
     if (init === void 0) { init = {}; }
-    return _fromTokenFile(__assign(__assign({}, init), { roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : getDefaultRoleAssumerWithWebIdentity(init.clientConfig) }));
+    return _fromTokenFile(__assign(__assign({}, init), { roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : getDefaultRoleAssumerWithWebIdentity(init.clientConfig, init.clientPlugins) }));
 };

package/dist-es/fromWebToken.js

@@ -3,5 +3,5 @@ import { getDefaultRoleAssumerWithWebIdentity } from "@aws-sdk/client-sts";
 import { fromWebToken as _fromWebToken, } from "@aws-sdk/credential-provider-web-identity";
 export var fromWebToken = function (init) {
     var _a;
-    return _fromWebToken(__assign(__assign({}, init), { roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : getDefaultRoleAssumerWithWebIdentity(init.clientConfig) }));
+    return _fromWebToken(__assign(__assign({}, init), { roleAssumerWithWebIdentity: (_a = init.roleAssumerWithWebIdentity) !== null && _a !== void 0 ? _a : getDefaultRoleAssumerWithWebIdentity(init.clientConfig, init.clientPlugins) }));
 };

package/dist-types/fromIni.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromIniInit as _FromIniInit } from "@aws-sdk/credential-provider-ini";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromIniInit extends _FromIniInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 /**
  * Creates a credential provider function that reads from a shared credentials file at `~/.aws/credentials` and a
@@ -36,6 +37,9 @@ export interface FromIniInit extends _FromIniInit {
  *     },
  *     // Optional. Custom STS client configurations overriding the default ones.
  *     clientConfig: { region },
+ *     // Optional. Custom STS client middleware plugin to modify the client default behavior.
+ *     // e.g. adding custom headers.
+ *     clientPlugins: [addFooHeadersPlugin],
  *   }),
  * });
  * ```

package/dist-types/fromNodeProviderChain.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { DefaultProviderInit } from "@aws-sdk/credential-provider-node";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface fromNodeProviderChainInit extends DefaultProviderInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 /**
  * This is the same credential provider as {@link defaultProvider|the default provider for Node.js SDK},
@@ -23,6 +24,9 @@ export interface fromNodeProviderChainInit extends DefaultProviderInit {
  *
  *   // Optional. Custom STS client configurations overriding the default ones.
  *   clientConfig: { region },
+ *   // Optional. Custom STS client middleware plugin to modify the client default behavior.
+ *   // e.g. adding custom headers.
+ *   clientPlugins: [addFooHeadersPlugin],
  * })
  * ```
  */

package/dist-types/fromTemporaryCredentials.d.ts

@@ -1,11 +1,12 @@
 import { AssumeRoleCommandInput, STSClientConfig } from "@aws-sdk/client-sts";
-import { CredentialProvider, Credentials } from "@aws-sdk/types";
+import { CredentialProvider, Credentials, Pluggable } from "@aws-sdk/types";
 export interface FromTemporaryCredentialsOptions {
     params: Omit<AssumeRoleCommandInput, "RoleSessionName"> & {
         RoleSessionName?: string;
     };
     masterCredentials?: Credentials | CredentialProvider;
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
     mfaCodeProvider?: (mfaSerial: string) => Promise<string>;
 }
 /**
@@ -36,6 +37,9 @@ export interface FromTemporaryCredentialsOptions {
  *     },
  *     // Optional. Custom STS client configurations overriding the default ones.
  *     clientConfig: { region },
+ *     // Optional. Custom STS client middleware plugin to modify the client default behavior.
+ *     // e.g. adding custom headers.
+ *     clientPlugins: [addFooHeadersPlugin],
  *     // Optional. A function that returns a promise fulfilled with an MFA token code for the provided MFA Serial code.
  *     // Required if `params` has `SerialNumber` config.
  *     mfaCodeProvider: async mfaSerial => {

package/dist-types/fromTokenFile.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromTokenFileInit as _FromTokenFileInit } from "@aws-sdk/credential-provider-web-identity";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromTokenFileInit extends _FromTokenFileInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 /**
  * Creates a credential provider function that reads OIDC token from given file, then call STS.AssumeRoleWithWebIdentity
@@ -25,6 +26,9 @@ export interface FromTokenFileInit extends _FromTokenFileInit {
  *   credentials: fromTokenFile({
  *     // Optional. STS client config to make the assume role request.
  *     clientConfig: { region }
+ *     // Optional. Custom STS client middleware plugin to modify the client default behavior.
+ *     // e.g. adding custom headers.
+ *     clientPlugins: [addFooHeadersPlugin],
  *   });
  * });
  * ```

package/dist-types/fromWebToken.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromWebTokenInit as _FromWebTokenInit } from "@aws-sdk/credential-provider-web-identity";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromWebTokenInit extends _FromWebTokenInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 /**
  * Creates a credential provider function that gets credentials calling STS
@@ -21,6 +22,9 @@ export interface FromWebTokenInit extends _FromWebTokenInit {
  *     webIdentityToken: await openIdProvider()
  *     // Optional. Custom STS client configurations overriding the default ones.
  *     clientConfig: { region }
+ *     // Optional. Custom STS client middleware plugin to modify the client default behavior.
+ *     // e.g. adding custom headers.
+ *     clientPlugins: [addFooHeadersPlugin],
  *     // Optional. A function that assumes a role with web identity and returns a promise fulfilled with credentials for
  *     // the assumed role.
  *     roleAssumerWithWebIdentity,

package/dist-types/ts3.4/fromIni.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromIniInit as _FromIniInit } from "@aws-sdk/credential-provider-ini";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromIniInit extends _FromIniInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 
 export declare const fromIni: (init?: FromIniInit) => CredentialProvider;

package/dist-types/ts3.4/fromNodeProviderChain.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { DefaultProviderInit } from "@aws-sdk/credential-provider-node";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface fromNodeProviderChainInit extends DefaultProviderInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 
 export declare const fromNodeProviderChain: (init?: fromNodeProviderChainInit) => CredentialProvider;

package/dist-types/ts3.4/fromTemporaryCredentials.d.ts

@@ -1,11 +1,12 @@
 import { AssumeRoleCommandInput, STSClientConfig } from "@aws-sdk/client-sts";
-import { CredentialProvider, Credentials } from "@aws-sdk/types";
+import { CredentialProvider, Credentials, Pluggable } from "@aws-sdk/types";
 export interface FromTemporaryCredentialsOptions {
     params: Pick<AssumeRoleCommandInput, Exclude<keyof AssumeRoleCommandInput, "RoleSessionName">> & {
         RoleSessionName?: string;
     };
     masterCredentials?: Credentials | CredentialProvider;
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
     mfaCodeProvider?: (mfaSerial: string) => Promise<string>;
 }
 

package/dist-types/ts3.4/fromTokenFile.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromTokenFileInit as _FromTokenFileInit } from "@aws-sdk/credential-provider-web-identity";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromTokenFileInit extends _FromTokenFileInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 
 export declare const fromTokenFile: (init?: FromTokenFileInit) => CredentialProvider;

package/dist-types/ts3.4/fromWebToken.d.ts

@@ -1,8 +1,9 @@
 import { STSClientConfig } from "@aws-sdk/client-sts";
 import { FromWebTokenInit as _FromWebTokenInit } from "@aws-sdk/credential-provider-web-identity";
-import { CredentialProvider } from "@aws-sdk/types";
+import { CredentialProvider, Pluggable } from "@aws-sdk/types";
 export interface FromWebTokenInit extends _FromWebTokenInit {
     clientConfig?: STSClientConfig;
+    clientPlugins?: Pluggable<any, any>[];
 }
 
 export declare const fromWebToken: (init: FromWebTokenInit) => CredentialProvider;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-providers",
-  "version": "3.159.0",
+  "version": "3.162.0",
   "description": "A collection of credential providers, without requiring service clients like STS, Cognito",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -26,20 +26,20 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/client-cognito-identity": "3.159.0",
-    "@aws-sdk/client-sso": "3.159.0",
-    "@aws-sdk/client-sts": "3.159.0",
-    "@aws-sdk/credential-provider-cognito-identity": "3.159.0",
-    "@aws-sdk/credential-provider-env": "3.159.0",
-    "@aws-sdk/credential-provider-imds": "3.159.0",
-    "@aws-sdk/credential-provider-ini": "3.159.0",
-    "@aws-sdk/credential-provider-node": "3.159.0",
-    "@aws-sdk/credential-provider-process": "3.159.0",
-    "@aws-sdk/credential-provider-sso": "3.159.0",
-    "@aws-sdk/credential-provider-web-identity": "3.159.0",
-    "@aws-sdk/property-provider": "3.159.0",
-    "@aws-sdk/shared-ini-file-loader": "3.159.0",
-    "@aws-sdk/types": "3.159.0",
+    "@aws-sdk/client-cognito-identity": "3.162.0",
+    "@aws-sdk/client-sso": "3.162.0",
+    "@aws-sdk/client-sts": "3.162.0",
+    "@aws-sdk/credential-provider-cognito-identity": "3.162.0",
+    "@aws-sdk/credential-provider-env": "3.162.0",
+    "@aws-sdk/credential-provider-imds": "3.162.0",
+    "@aws-sdk/credential-provider-ini": "3.162.0",
+    "@aws-sdk/credential-provider-node": "3.162.0",
+    "@aws-sdk/credential-provider-process": "3.162.0",
+    "@aws-sdk/credential-provider-sso": "3.162.0",
+    "@aws-sdk/credential-provider-web-identity": "3.162.0",
+    "@aws-sdk/property-provider": "3.162.0",
+    "@aws-sdk/shared-ini-file-loader": "3.162.0",
+    "@aws-sdk/types": "3.162.0",
     "tslib": "^2.3.1"
   },
   "devDependencies": {