@cdk8s/awscdk-resolver 0.0.135 → 0.0.137

package/node_modules/@aws-sdk/core/dist-es/submodules/account-id-endpoint/NodeAccountIdEndpointModeConfigOptions.js

@@ -0,0 +1,24 @@
+import { DEFAULT_ACCOUNT_ID_ENDPOINT_MODE, validateAccountIdEndpointMode, } from "./AccountIdEndpointModeConstants";
+const err = "Invalid AccountIdEndpointMode value";
+const _throw = (message) => {
+    throw new Error(message);
+};
+export const ENV_ACCOUNT_ID_ENDPOINT_MODE = "AWS_ACCOUNT_ID_ENDPOINT_MODE";
+export const CONFIG_ACCOUNT_ID_ENDPOINT_MODE = "account_id_endpoint_mode";
+export const NODE_ACCOUNT_ID_ENDPOINT_MODE_CONFIG_OPTIONS = {
+    environmentVariableSelector: (env) => {
+        const value = env[ENV_ACCOUNT_ID_ENDPOINT_MODE];
+        if (value && !validateAccountIdEndpointMode(value)) {
+            _throw(err);
+        }
+        return value;
+    },
+    configFileSelector: (profile) => {
+        const value = profile[CONFIG_ACCOUNT_ID_ENDPOINT_MODE];
+        if (value && !validateAccountIdEndpointMode(value)) {
+            _throw(err);
+        }
+        return value;
+    },
+    default: DEFAULT_ACCOUNT_ID_ENDPOINT_MODE,
+};

package/node_modules/@aws-sdk/core/dist-es/submodules/account-id-endpoint/index.js

@@ -0,0 +1,3 @@
+export * from "./AccountIdEndpointModeConfigResolver";
+export * from "./AccountIdEndpointModeConstants";
+export * from "./NodeAccountIdEndpointModeConfigOptions";

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4ASigner.js

@@ -0,0 +1,18 @@
+import { HttpRequest } from "@smithy/protocol-http";
+import { getSkewCorrectedDate } from "../utils";
+import { AwsSdkSigV4Signer, validateSigningProperties } from "./AwsSdkSigV4Signer";
+export class AwsSdkSigV4ASigner extends AwsSdkSigV4Signer {
+    async sign(httpRequest, identity, signingProperties) {
+        if (!HttpRequest.isInstance(httpRequest)) {
+            throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
+        }
+        const { config, signer, signingRegion, signingRegionSet, signingName } = await validateSigningProperties(signingProperties);
+        const multiRegionOverride = signingRegionSet?.join?.(",") ?? signingRegion;
+        const signedRequest = await signer.sign(httpRequest, {
+            signingDate: getSkewCorrectedDate(config.systemClockOffset),
+            signingRegion: multiRegionOverride,
+            signingService: signingName,
+        });
+        return signedRequest;
+    }
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js

@@ -6,18 +6,20 @@ const throwSigningPropertyError = (name, property) => {
     }
     return property;
 };
-const validateSigningProperties = async (signingProperties) => {
+export const validateSigningProperties = async (signingProperties) => {
     const context = throwSigningPropertyError("context", signingProperties.context);
     const config = throwSigningPropertyError("config", signingProperties.config);
     const authScheme = context.endpointV2?.properties?.authSchemes?.[0];
     const signerFunction = throwSigningPropertyError("signer", config.signer);
     const signer = await signerFunction(authScheme);
     const signingRegion = signingProperties?.signingRegion;
+    const signingRegionSet = signingProperties?.signingRegionSet;
     const signingName = signingProperties?.signingName;
     return {
         config,
         signer,
         signingRegion,
+        signingRegionSet,
         signingName,
     };
 };

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/index.js

@@ -1,2 +1,3 @@
-export * from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/submodules/account-id-endpoint/AccountIdEndpointModeConfigResolver.d.ts

@@ -0,0 +1,30 @@
+import { Provider } from "@smithy/types";
+import { AccountIdEndpointMode } from "./AccountIdEndpointModeConstants";
+/**
+ * @public
+ */
+export interface AccountIdEndpointModeInputConfig {
+    /**
+     * The account ID endpoint mode to use.
+     */
+    accountIdEndpointMode?: AccountIdEndpointMode | Provider<AccountIdEndpointMode>;
+}
+/**
+ * @internal
+ */
+interface PreviouslyResolved {
+}
+/**
+ * @internal
+ */
+export interface AccountIdEndpointModeResolvedConfig {
+    /**
+     * Resolved value for input config {config.accountIdEndpointMode}
+     */
+    accountIdEndpointMode: Provider<AccountIdEndpointMode>;
+}
+/**
+ * @internal
+ */
+export declare const resolveAccountIdEndpointModeConfig: <T>(input: T & AccountIdEndpointModeInputConfig & PreviouslyResolved) => T & AccountIdEndpointModeResolvedConfig;
+export {};

package/node_modules/@aws-sdk/core/dist-types/submodules/account-id-endpoint/AccountIdEndpointModeConstants.d.ts

@@ -0,0 +1,7 @@
+export type AccountIdEndpointMode = "disabled" | "preferred" | "required";
+export declare const DEFAULT_ACCOUNT_ID_ENDPOINT_MODE = "preferred";
+export declare const ACCOUNT_ID_ENDPOINT_MODE_VALUES: AccountIdEndpointMode[];
+/**
+ * @internal
+ */
+export declare function validateAccountIdEndpointMode(value: any): value is AccountIdEndpointMode;

package/node_modules/@aws-sdk/core/dist-types/submodules/account-id-endpoint/NodeAccountIdEndpointModeConfigOptions.d.ts

@@ -0,0 +1,14 @@
+import { LoadedConfigSelectors } from "@smithy/node-config-provider";
+import { AccountIdEndpointMode } from "./AccountIdEndpointModeConstants";
+/**
+ * @internal
+ */
+export declare const ENV_ACCOUNT_ID_ENDPOINT_MODE = "AWS_ACCOUNT_ID_ENDPOINT_MODE";
+/**
+ * @internal
+ */
+export declare const CONFIG_ACCOUNT_ID_ENDPOINT_MODE = "account_id_endpoint_mode";
+/**
+ * @internal
+ */
+export declare const NODE_ACCOUNT_ID_ENDPOINT_MODE_CONFIG_OPTIONS: LoadedConfigSelectors<AccountIdEndpointMode>;

package/node_modules/@aws-sdk/core/dist-types/submodules/account-id-endpoint/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./AccountIdEndpointModeConfigResolver";
+export * from "./AccountIdEndpointModeConstants";
+export * from "./NodeAccountIdEndpointModeConfigOptions";

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4ASigner.d.ts

@@ -0,0 +1,10 @@
+import { AwsCredentialIdentity, HttpRequest as IHttpRequest } from "@smithy/types";
+import { AwsSdkSigV4Signer } from "./AwsSdkSigV4Signer";
+/**
+ * @internal
+ * Note: this is not a signing algorithm implementation. The sign method
+ * accepts the real signer as an input parameter.
+ */
+export declare class AwsSdkSigV4ASigner extends AwsSdkSigV4Signer {
+    sign(httpRequest: IHttpRequest, identity: AwsCredentialIdentity, signingProperties: Record<string, unknown>): Promise<IHttpRequest>;
+}

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.d.ts

@@ -1,7 +1,30 @@
-import { AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner } from "@smithy/types";
+import { AuthScheme, AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner, RequestSigner } from "@smithy/types";
 /**
  * @internal
  */
+interface AwsSdkSigV4Config {
+    systemClockOffset: number;
+    signer: (authScheme?: AuthScheme) => Promise<RequestSigner>;
+}
+/**
+ * @internal
+ */
+interface AwsSdkSigV4AuthSigningProperties {
+    config: AwsSdkSigV4Config;
+    signer: RequestSigner;
+    signingRegion?: string;
+    signingRegionSet?: string[];
+    signingName?: string;
+}
+/**
+ * @internal
+ */
+export declare const validateSigningProperties: (signingProperties: Record<string, unknown>) => Promise<AwsSdkSigV4AuthSigningProperties>;
+/**
+ * @internal
+ * Note: this is not a signing algorithm implementation. The sign method
+ * accepts the real signer as an input parameter.
+ */
 export declare class AwsSdkSigV4Signer implements HttpSigner {
     sign(httpRequest: IHttpRequest, 
     /**
@@ -15,3 +38,4 @@ export declare class AwsSdkSigV4Signer implements HttpSigner {
  * @deprecated renamed to {@link AwsSdkSigV4Signer}
  */
 export declare const AWSSDKSigV4Signer: typeof AwsSdkSigV4Signer;
+export {};

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,2 +1,3 @@
-export * from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/account-id-endpoint/AccountIdEndpointModeConfigResolver.d.ts

@@ -0,0 +1,15 @@
+import { Provider } from "@smithy/types";
+import { AccountIdEndpointMode } from "./AccountIdEndpointModeConstants";
+export interface AccountIdEndpointModeInputConfig {
+  accountIdEndpointMode?:
+    | AccountIdEndpointMode
+    | Provider<AccountIdEndpointMode>;
+}
+interface PreviouslyResolved {}
+export interface AccountIdEndpointModeResolvedConfig {
+  accountIdEndpointMode: Provider<AccountIdEndpointMode>;
+}
+export declare const resolveAccountIdEndpointModeConfig: <T>(
+  input: T & AccountIdEndpointModeInputConfig & PreviouslyResolved
+) => T & AccountIdEndpointModeResolvedConfig;
+export {};

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/account-id-endpoint/AccountIdEndpointModeConstants.d.ts

@@ -0,0 +1,6 @@
+export type AccountIdEndpointMode = "disabled" | "preferred" | "required";
+export declare const DEFAULT_ACCOUNT_ID_ENDPOINT_MODE = "preferred";
+export declare const ACCOUNT_ID_ENDPOINT_MODE_VALUES: AccountIdEndpointMode[];
+export declare function validateAccountIdEndpointMode(
+  value: any
+): value is AccountIdEndpointMode;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/account-id-endpoint/NodeAccountIdEndpointModeConfigOptions.d.ts

@@ -0,0 +1,7 @@
+import { LoadedConfigSelectors } from "@smithy/node-config-provider";
+import { AccountIdEndpointMode } from "./AccountIdEndpointModeConstants";
+export declare const ENV_ACCOUNT_ID_ENDPOINT_MODE =
+  "AWS_ACCOUNT_ID_ENDPOINT_MODE";
+export declare const CONFIG_ACCOUNT_ID_ENDPOINT_MODE =
+  "account_id_endpoint_mode";
+export declare const NODE_ACCOUNT_ID_ENDPOINT_MODE_CONFIG_OPTIONS: LoadedConfigSelectors<AccountIdEndpointMode>;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/account-id-endpoint/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./AccountIdEndpointModeConfigResolver";
+export * from "./AccountIdEndpointModeConstants";
+export * from "./NodeAccountIdEndpointModeConfigOptions";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4ASigner.d.ts

@@ -0,0 +1,12 @@
+import {
+  AwsCredentialIdentity,
+  HttpRequest as IHttpRequest,
+} from "@smithy/types";
+import { AwsSdkSigV4Signer } from "./AwsSdkSigV4Signer";
+export declare class AwsSdkSigV4ASigner extends AwsSdkSigV4Signer {
+  sign(
+    httpRequest: IHttpRequest,
+    identity: AwsCredentialIdentity,
+    signingProperties: Record<string, unknown>
+  ): Promise<IHttpRequest>;
+}

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.d.ts

@@ -1,9 +1,25 @@
 import {
+  AuthScheme,
   AwsCredentialIdentity,
   HttpRequest as IHttpRequest,
   HttpResponse,
   HttpSigner,
+  RequestSigner,
 } from "@smithy/types";
+interface AwsSdkSigV4Config {
+  systemClockOffset: number;
+  signer: (authScheme?: AuthScheme) => Promise<RequestSigner>;
+}
+interface AwsSdkSigV4AuthSigningProperties {
+  config: AwsSdkSigV4Config;
+  signer: RequestSigner;
+  signingRegion?: string;
+  signingRegionSet?: string[];
+  signingName?: string;
+}
+export declare const validateSigningProperties: (
+  signingProperties: Record<string, unknown>
+) => Promise<AwsSdkSigV4AuthSigningProperties>;
 export declare class AwsSdkSigV4Signer implements HttpSigner {
   sign(
     httpRequest: IHttpRequest,
@@ -19,3 +35,4 @@ export declare class AwsSdkSigV4Signer implements HttpSigner {
   ): void;
 }
 export declare const AWSSDKSigV4Signer: typeof AwsSdkSigV4Signer;
+export {};

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,2 +1,3 @@
-export * from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.614.0",
+  "version": "3.623.0",
   "description": "Core functions & classes shared by multiple AWS SDK clients",
   "scripts": {
     "build": "yarn lint && concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
@@ -46,6 +46,13 @@
       "require": "./dist-cjs/submodules/httpAuthSchemes/index.js",
       "types": "./dist-types/submodules/httpAuthSchemes/index.d.ts"
     },
+    "./account-id-endpoint": {
+      "module": "./dist-es/submodules/account-id-endpoint/index.js",
+      "node": "./dist-cjs/submodules/account-id-endpoint/index.js",
+      "import": "./dist-es/submodules/account-id-endpoint/index.js",
+      "require": "./dist-cjs/submodules/account-id-endpoint/index.js",
+      "types": "./dist-types/submodules/account-id-endpoint/index.d.ts"
+    },
     "./protocols": {
       "module": "./dist-es/submodules/protocols/index.js",
       "node": "./dist-cjs/submodules/protocols/index.js",
@@ -58,7 +65,8 @@
     "dist-*/**",
     "./client.js",
     "./httpAuthSchemes.js",
-    "./protocols.js"
+    "./protocols.js",
+    "./account-id-endpoint.js"
   ],
   "sideEffects": false,
   "author": {
@@ -67,12 +75,14 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@smithy/core": "^2.2.6",
-    "@smithy/protocol-http": "^4.0.3",
-    "@smithy/signature-v4": "^3.1.2",
-    "@smithy/smithy-client": "^3.1.7",
+    "@smithy/core": "^2.3.2",
+    "@smithy/node-config-provider": "^3.1.4",
+    "@smithy/protocol-http": "^4.1.0",
+    "@smithy/signature-v4": "^4.1.0",
+    "@smithy/smithy-client": "^3.1.12",
     "@smithy/types": "^3.3.0",
-    "fast-xml-parser": "4.2.5",
+    "@smithy/util-middleware": "^3.0.3",
+    "fast-xml-parser": "4.4.1",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -92,7 +102,7 @@
       ]
     }
   },
-  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/master/packages/core",
+  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/core",
   "repository": {
     "type": "git",
     "url": "https://github.com/aws/aws-sdk-js-v3.git",

package/node_modules/@aws-sdk/credential-provider-env/dist-cjs/index.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  ENV_ACCOUNT_ID: () => ENV_ACCOUNT_ID,
   ENV_CREDENTIAL_SCOPE: () => ENV_CREDENTIAL_SCOPE,
   ENV_EXPIRATION: () => ENV_EXPIRATION,
   ENV_KEY: () => ENV_KEY,
@@ -37,6 +38,7 @@ var ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 var ENV_SESSION = "AWS_SESSION_TOKEN";
 var ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 var ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
+var ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
 var fromEnv = /* @__PURE__ */ __name((init) => async () => {
   var _a;
   (_a = init == null ? void 0 : init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-env - fromEnv");
@@ -45,13 +47,15 @@ var fromEnv = /* @__PURE__ */ __name((init) => async () => {
   const sessionToken = process.env[ENV_SESSION];
   const expiry = process.env[ENV_EXPIRATION];
   const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];
+  const accountId = process.env[ENV_ACCOUNT_ID];
   if (accessKeyId && secretAccessKey) {
     return {
       accessKeyId,
       secretAccessKey,
       ...sessionToken && { sessionToken },
       ...expiry && { expiration: new Date(expiry) },
-      ...credentialScope && { credentialScope }
+      ...credentialScope && { credentialScope },
+      ...accountId && { accountId }
     };
   }
   throw new import_property_provider.CredentialsProviderError("Unable to find environment variable credentials.", { logger: init == null ? void 0 : init.logger });
@@ -64,6 +68,7 @@ var fromEnv = /* @__PURE__ */ __name((init) => async () => {
   ENV_SESSION,
   ENV_EXPIRATION,
   ENV_CREDENTIAL_SCOPE,
+  ENV_ACCOUNT_ID,
   fromEnv
 });
 

package/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js

@@ -4,6 +4,7 @@ export const ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 export const ENV_SESSION = "AWS_SESSION_TOKEN";
 export const ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 export const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
+export const ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
 export const fromEnv = (init) => async () => {
     init?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");
     const accessKeyId = process.env[ENV_KEY];
@@ -11,6 +12,7 @@ export const fromEnv = (init) => async () => {
     const sessionToken = process.env[ENV_SESSION];
     const expiry = process.env[ENV_EXPIRATION];
     const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];
+    const accountId = process.env[ENV_ACCOUNT_ID];
     if (accessKeyId && secretAccessKey) {
         return {
             accessKeyId,
@@ -18,6 +20,7 @@ export const fromEnv = (init) => async () => {
             ...(sessionToken && { sessionToken }),
             ...(expiry && { expiration: new Date(expiry) }),
             ...(credentialScope && { credentialScope }),
+            ...(accountId && { accountId }),
         };
     }
     throw new CredentialsProviderError("Unable to find environment variable credentials.", { logger: init?.logger });

package/node_modules/@aws-sdk/credential-provider-env/dist-types/fromEnv.d.ts

@@ -22,6 +22,10 @@ export declare const ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
  * @internal
  */
 export declare const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
+/**
+ * @internal
+ */
+export declare const ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
 /**
  * @internal
  *

package/node_modules/@aws-sdk/credential-provider-env/dist-types/ts3.4/fromEnv.d.ts

@@ -6,6 +6,7 @@ export declare const ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 export declare const ENV_SESSION = "AWS_SESSION_TOKEN";
 export declare const ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 export declare const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
+export declare const ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
 export declare const fromEnv: (
   init?: FromEnvInit
 ) => AwsCredentialIdentityProvider;

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.609.0",
+  "version": "3.620.1",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.614.0",
+  "version": "3.622.0",
   "description": "AWS credential provider for containers and HTTP sources",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -27,13 +27,13 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@aws-sdk/types": "3.609.0",
-    "@smithy/fetch-http-handler": "^3.2.1",
-    "@smithy/node-http-handler": "^3.1.2",
+    "@smithy/fetch-http-handler": "^3.2.4",
+    "@smithy/node-http-handler": "^3.1.4",
     "@smithy/property-provider": "^3.1.3",
-    "@smithy/protocol-http": "^4.0.3",
-    "@smithy/smithy-client": "^3.1.7",
+    "@smithy/protocol-http": "^4.1.0",
+    "@smithy/smithy-client": "^3.1.12",
     "@smithy/types": "^3.3.0",
-    "@smithy/util-stream": "^3.0.6",
+    "@smithy/util-stream": "^3.1.3",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js

@@ -180,7 +180,7 @@ var resolveSsoCredentials = /* @__PURE__ */ __name(async (profile, options = {})
 var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
 
 // src/resolveStaticCredentials.ts
-var isStaticCredsProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1, "isStaticCredsProfile");
+var isStaticCredsProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 && ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1, "isStaticCredsProfile");
 var resolveStaticCredentials = /* @__PURE__ */ __name((profile, options) => {
   var _a;
   (_a = options == null ? void 0 : options.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
@@ -188,7 +188,8 @@ var resolveStaticCredentials = /* @__PURE__ */ __name((profile, options) => {
     accessKeyId: profile.aws_access_key_id,
     secretAccessKey: profile.aws_secret_access_key,
     sessionToken: profile.aws_session_token,
-    credentialScope: profile.aws_credential_scope
+    ...profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope },
+    ...profile.aws_account_id && { accountId: profile.aws_account_id }
   });
 }, "resolveStaticCredentials");
 

package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js

@@ -2,13 +2,15 @@ export const isStaticCredsProfile = (arg) => Boolean(arg) &&
     typeof arg === "object" &&
     typeof arg.aws_access_key_id === "string" &&
     typeof arg.aws_secret_access_key === "string" &&
-    ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1;
+    ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 &&
+    ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1;
 export const resolveStaticCredentials = (profile, options) => {
     options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
     return Promise.resolve({
         accessKeyId: profile.aws_access_key_id,
         secretAccessKey: profile.aws_secret_access_key,
         sessionToken: profile.aws_session_token,
-        credentialScope: profile.aws_credential_scope,
+        ...(profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope }),
+        ...(profile.aws_account_id && { accountId: profile.aws_account_id }),
     });
 };

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveStaticCredentials.d.ts

@@ -8,6 +8,7 @@ export interface StaticCredsProfile extends Profile {
     aws_secret_access_key: string;
     aws_session_token?: string;
     aws_credential_scope?: string;
+    aws_account_id?: string;
 }
 /**
  * @internal

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveStaticCredentials.d.ts

@@ -5,6 +5,7 @@ export interface StaticCredsProfile extends Profile {
   aws_secret_access_key: string;
   aws_session_token?: string;
   aws_credential_scope?: string;
+  aws_account_id?: string;
 }
 export declare const isStaticCredsProfile: (
   arg: any

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.614.0",
+  "version": "3.623.0",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -24,13 +24,13 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/credential-provider-env": "3.609.0",
-    "@aws-sdk/credential-provider-http": "3.614.0",
-    "@aws-sdk/credential-provider-process": "3.614.0",
-    "@aws-sdk/credential-provider-sso": "3.614.0",
-    "@aws-sdk/credential-provider-web-identity": "3.609.0",
+    "@aws-sdk/credential-provider-env": "3.620.1",
+    "@aws-sdk/credential-provider-http": "3.622.0",
+    "@aws-sdk/credential-provider-process": "3.620.1",
+    "@aws-sdk/credential-provider-sso": "3.623.0",
+    "@aws-sdk/credential-provider-web-identity": "3.621.0",
     "@aws-sdk/types": "3.609.0",
-    "@smithy/credential-provider-imds": "^3.1.4",
+    "@smithy/credential-provider-imds": "^3.2.0",
     "@smithy/property-provider": "^3.1.3",
     "@smithy/shared-ini-file-loader": "^3.1.4",
     "@smithy/types": "^3.3.0",
@@ -45,7 +45,7 @@
     "typescript": "~4.9.5"
   },
   "peerDependencies": {
-    "@aws-sdk/client-sts": "^3.614.0"
+    "@aws-sdk/client-sts": "^3.623.0"
   },
   "types": "./dist-types/index.d.ts",
   "engines": {

package/node_modules/@aws-sdk/credential-provider-node/dist-cjs/index.js

@@ -63,15 +63,39 @@ var remoteProvider = /* @__PURE__ */ __name(async (init) => {
 }, "remoteProvider");
 
 // src/defaultProvider.ts
+var multipleCredentialSourceWarningEmitted = false;
 var defaultProvider = /* @__PURE__ */ __name((init = {}) => (0, import_property_provider.memoize)(
   (0, import_property_provider.chain)(
-    ...init.profile || process.env[import_shared_ini_file_loader.ENV_PROFILE] ? [] : [
-      async () => {
-        var _a;
-        (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv");
-        return (0, import_credential_provider_env.fromEnv)(init)();
+    async () => {
+      var _a, _b, _c, _d;
+      const profile = init.profile ?? process.env[import_shared_ini_file_loader.ENV_PROFILE];
+      if (profile) {
+        const envStaticCredentialsAreSet = process.env[import_credential_provider_env.ENV_KEY] && process.env[import_credential_provider_env.ENV_SECRET];
+        if (envStaticCredentialsAreSet) {
+          if (!multipleCredentialSourceWarningEmitted) {
+            const warnFn = ((_a = init.logger) == null ? void 0 : _a.warn) && ((_c = (_b = init.logger) == null ? void 0 : _b.constructor) == null ? void 0 : _c.name) !== "NoOpLogger" ? init.logger.warn : console.warn;
+            warnFn(
+              `@aws-sdk/credential-provider-node - defaultProvider::fromEnv WARNING:
+    Multiple credential sources detected: 
+    Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
+    This SDK will proceed with the AWS_PROFILE value.
+    
+    However, a future version may change this behavior to prefer the ENV static credentials.
+    Please ensure that your environment only sets either the AWS_PROFILE or the
+    AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
+`
+            );
+            multipleCredentialSourceWarningEmitted = true;
+          }
+        }
+        throw new import_property_provider.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.", {
+          logger: init.logger,
+          tryNextLink: true
+        });
       }
-    ],
+      (_d = init.logger) == null ? void 0 : _d.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv");
+      return (0, import_credential_provider_env.fromEnv)(init)();
+    },
     async () => {
       var _a;
       (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");