@cdk8s/awscdk-resolver 0.0.233 → 0.0.234

package/node_modules/@aws-sdk/{client-sts/dist-types → nested-clients/dist-types/submodules/sts}/models/models_0.d.ts

@@ -328,6 +328,10 @@ export interface Credentials {
      */
     Expiration: Date | undefined;
 }
+/**
+ * @internal
+ */
+export declare const CredentialsFilterSensitiveLog: (obj: Credentials) => any;
 /**
  * <p>Contains the response to a successful <a>AssumeRole</a> request, including
  *       temporary Amazon Web Services credentials that can be used to make Amazon Web Services requests. </p>
@@ -378,6 +382,10 @@ export interface AssumeRoleResponse {
      */
     SourceIdentity?: string | undefined;
 }
+/**
+ * @internal
+ */
+export declare const AssumeRoleResponseFilterSensitiveLog: (obj: AssumeRoleResponse) => any;
 /**
  * <p>The web identity token that was passed is expired or is not valid. Get a new identity
  *             token from the identity provider and then retry the request.</p>
@@ -440,208 +448,6 @@ export declare class RegionDisabledException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<RegionDisabledException, __BaseException>);
 }
-/**
- * @public
- */
-export interface AssumeRoleWithSAMLRequest {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the role that the caller is assuming.</p>
-     * @public
-     */
-    RoleArn: string | undefined;
-    /**
-     * <p>The Amazon Resource Name (ARN) of the SAML provider in IAM that describes the
-     *          IdP.</p>
-     * @public
-     */
-    PrincipalArn: string | undefined;
-    /**
-     * <p>The base64 encoded SAML authentication response provided by the IdP.</p>
-     *          <p>For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/create-role-saml-IdP-tasks.html">Configuring a Relying Party and
-     *             Adding Claims</a> in the <i>IAM User Guide</i>. </p>
-     * @public
-     */
-    SAMLAssertion: string | undefined;
-    /**
-     * <p>The Amazon Resource Names (ARNs) of the IAM managed policies that you want to use as
-     *          managed session policies. The policies must exist in the same account as the role.</p>
-     *          <p>This parameter is optional. You can provide up to 10 managed policy ARNs. However, the
-     *          plaintext that you use for both inline and managed session policies can't exceed 2,048
-     *          characters. For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs) and Amazon Web Services
-     *             Service Namespaces</a> in the Amazon Web Services General Reference.</p>
-     *          <note>
-     *             <p>An Amazon Web Services conversion compresses the passed inline session policy, managed policy ARNs,
-     *             and session tags into a packed binary format that has a separate limit. Your request can
-     *             fail for this limit even if your plaintext meets the other requirements. The
-     *                <code>PackedPolicySize</code> response element indicates by percentage how close the
-     *             policies and tags for your request are to the upper size limit.</p>
-     *          </note>
-     *          <p>Passing policies to this operation returns new
-     *          temporary credentials. The resulting session's permissions are the intersection of the
-     *          role's identity-based policy and the session policies. You can use the role's temporary
-     *          credentials in subsequent Amazon Web Services API calls to access resources in the account that owns
-     *          the role. You cannot use session policies to grant more permissions than those allowed
-     *          by the identity-based policy of the role that is being assumed. For more information, see
-     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
-     *             Policies</a> in the <i>IAM User Guide</i>.</p>
-     * @public
-     */
-    PolicyArns?: PolicyDescriptorType[] | undefined;
-    /**
-     * <p>An IAM policy in JSON format that you want to use as an inline session policy.</p>
-     *          <p>This parameter is optional. Passing policies to this operation returns new
-     *          temporary credentials. The resulting session's permissions are the intersection of the
-     *          role's identity-based policy and the session policies. You can use the role's temporary
-     *          credentials in subsequent Amazon Web Services API calls to access resources in the account that owns
-     *          the role. You cannot use session policies to grant more permissions than those allowed
-     *          by the identity-based policy of the role that is being assumed. For more information, see
-     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
-     *             Policies</a> in the <i>IAM User Guide</i>. </p>
-     *          <p>The plaintext that you use for both inline and managed session policies can't exceed
-     *          2,048 characters. The JSON policy characters can be any ASCII character from the space
-     *          character to the end of the valid character list (\u0020 through \u00FF). It can also
-     *          include the tab (\u0009), linefeed (\u000A), and carriage return (\u000D)
-     *          characters.</p>
-     *          <p>For more information about role session permissions, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
-     *             policies</a>.</p>
-     *          <note>
-     *             <p>An Amazon Web Services conversion compresses the passed inline session policy, managed policy ARNs,
-     *             and session tags into a packed binary format that has a separate limit. Your request can
-     *             fail for this limit even if your plaintext meets the other requirements. The
-     *                <code>PackedPolicySize</code> response element indicates by percentage how close the
-     *             policies and tags for your request are to the upper size limit.</p>
-     *          </note>
-     * @public
-     */
-    Policy?: string | undefined;
-    /**
-     * <p>The duration, in seconds, of the role session. Your role session lasts for the duration
-     *          that you specify for the <code>DurationSeconds</code> parameter, or until the time
-     *          specified in the SAML authentication response's <code>SessionNotOnOrAfter</code> value,
-     *          whichever is shorter. You can provide a <code>DurationSeconds</code> value from 900 seconds
-     *          (15 minutes) up to the maximum session duration setting for the role. This setting can have
-     *          a value from 1 hour to 12 hours. If you specify a value higher than this setting, the
-     *          operation fails. For example, if you specify a session duration of 12 hours, but your
-     *          administrator set the maximum session duration to 6 hours, your operation fails. To learn
-     *          how to view the maximum value for your role, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session">View the
-     *             Maximum Session Duration Setting for a Role</a> in the
-     *             <i>IAM User Guide</i>.</p>
-     *          <p>By default, the value is set to <code>3600</code> seconds. </p>
-     *          <note>
-     *             <p>The <code>DurationSeconds</code> parameter is separate from the duration of a console
-     *             session that you might request using the returned credentials. The request to the
-     *             federation endpoint for a console sign-in token takes a <code>SessionDuration</code>
-     *             parameter that specifies the maximum length of the console session. For more
-     *             information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html">Creating a URL
-     *                that Enables Federated Users to Access the Amazon Web Services Management Console</a> in the
-     *                <i>IAM User Guide</i>.</p>
-     *          </note>
-     * @public
-     */
-    DurationSeconds?: number | undefined;
-}
-/**
- * <p>Contains the response to a successful <a>AssumeRoleWithSAML</a> request,
- *       including temporary Amazon Web Services credentials that can be used to make Amazon Web Services requests. </p>
- * @public
- */
-export interface AssumeRoleWithSAMLResponse {
-    /**
-     * <p>The temporary security credentials, which include an access key ID, a secret access key,
-     *          and a security (or session) token.</p>
-     *          <note>
-     *             <p>The size of the security token that STS API operations return is not fixed. We
-     *         strongly recommend that you make no assumptions about the maximum size.</p>
-     *          </note>
-     * @public
-     */
-    Credentials?: Credentials | undefined;
-    /**
-     * <p>The identifiers for the temporary security credentials that the operation
-     *          returns.</p>
-     * @public
-     */
-    AssumedRoleUser?: AssumedRoleUser | undefined;
-    /**
-     * <p>A percentage value that indicates the packed size of the session policies and session
-     *       tags combined passed in the request. The request fails if the packed size is greater than 100 percent,
-     *       which means the policies and tags exceeded the allowed space.</p>
-     * @public
-     */
-    PackedPolicySize?: number | undefined;
-    /**
-     * <p>The value of the <code>NameID</code> element in the <code>Subject</code> element of the
-     *          SAML assertion.</p>
-     * @public
-     */
-    Subject?: string | undefined;
-    /**
-     * <p> The format of the name ID, as defined by the <code>Format</code> attribute in the
-     *             <code>NameID</code> element of the SAML assertion. Typical examples of the format are
-     *             <code>transient</code> or <code>persistent</code>. </p>
-     *          <p> If the format includes the prefix
-     *             <code>urn:oasis:names:tc:SAML:2.0:nameid-format</code>, that prefix is removed. For
-     *          example, <code>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</code> is returned as
-     *             <code>transient</code>. If the format includes any other prefix, the format is returned
-     *          with no modifications.</p>
-     * @public
-     */
-    SubjectType?: string | undefined;
-    /**
-     * <p>The value of the <code>Issuer</code> element of the SAML assertion.</p>
-     * @public
-     */
-    Issuer?: string | undefined;
-    /**
-     * <p> The value of the <code>Recipient</code> attribute of the
-     *             <code>SubjectConfirmationData</code> element of the SAML assertion. </p>
-     * @public
-     */
-    Audience?: string | undefined;
-    /**
-     * <p>A hash value based on the concatenation of the following:</p>
-     *          <ul>
-     *             <li>
-     *                <p>The <code>Issuer</code> response value.</p>
-     *             </li>
-     *             <li>
-     *                <p>The Amazon Web Services account ID.</p>
-     *             </li>
-     *             <li>
-     *                <p>The friendly name (the last part of the ARN) of the SAML provider in IAM.</p>
-     *             </li>
-     *          </ul>
-     *          <p>The combination of <code>NameQualifier</code> and <code>Subject</code> can be used to
-     *          uniquely identify a user.</p>
-     *          <p>The following pseudocode shows how the hash value is calculated:</p>
-     *          <p>
-     *             <code>BASE64 ( SHA1 ( "https://example.com/saml" + "123456789012" + "/MySAMLIdP" ) )</code>
-     *          </p>
-     * @public
-     */
-    NameQualifier?: string | undefined;
-    /**
-     * <p>The value in the <code>SourceIdentity</code> attribute in the SAML assertion. The source
-     *          identity value persists across <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#iam-term-role-chaining">chained role</a>
-     *          sessions.</p>
-     *          <p>You can require users to set a source identity value when they assume a role. You do
-     *          this by using the <code>sts:SourceIdentity</code> condition key in a role trust policy.
-     *          That way, actions that are taken with the role are associated with that user. After the
-     *          source identity is set, the value cannot be changed. It is present in the request for all
-     *          actions that are taken by the role and persists across <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#id_roles_terms-and-concepts">chained role</a>
-     *          sessions. You can configure your SAML identity provider to use an attribute associated with
-     *          your users, like user name or email, as the source identity when calling
-     *             <code>AssumeRoleWithSAML</code>. You do this by adding an attribute to the SAML
-     *          assertion. For more information about using source identity, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html">Monitor and control
-     *             actions taken with assumed roles</a> in the
-     *          <i>IAM User Guide</i>.</p>
-     *          <p>The regex used to validate this parameter is a string of characters
-     *     consisting of upper- and lower-case alphanumeric characters with no spaces. You can
-     *     also include underscores or any of the following characters: =,.@-</p>
-     * @public
-     */
-    SourceIdentity?: string | undefined;
-}
 /**
  * <p>The identity provider (IdP) reported that authentication failed. This might be because
  *             the claim is invalid.</p>
@@ -801,6 +607,10 @@ export interface AssumeRoleWithWebIdentityRequest {
      */
     DurationSeconds?: number | undefined;
 }
+/**
+ * @internal
+ */
+export declare const AssumeRoleWithWebIdentityRequestFilterSensitiveLog: (obj: AssumeRoleWithWebIdentityRequest) => any;
 /**
  * <p>Contains the response to a successful <a>AssumeRoleWithWebIdentity</a>
  *       request, including temporary Amazon Web Services credentials that can be used to make Amazon Web Services requests. </p>
@@ -880,6 +690,10 @@ export interface AssumeRoleWithWebIdentityResponse {
      */
     SourceIdentity?: string | undefined;
 }
+/**
+ * @internal
+ */
+export declare const AssumeRoleWithWebIdentityResponseFilterSensitiveLog: (obj: AssumeRoleWithWebIdentityResponse) => any;
 /**
  * <p>The request could not be fulfilled because the identity provider (IDP) that was asked
  *             to verify the incoming identity token could not be reached. This is often a transient
@@ -896,431 +710,3 @@ export declare class IDPCommunicationErrorException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<IDPCommunicationErrorException, __BaseException>);
 }
-/**
- * @public
- */
-export interface AssumeRootRequest {
-    /**
-     * <p>The member account principal ARN or account ID.</p>
-     * @public
-     */
-    TargetPrincipal: string | undefined;
-    /**
-     * <p>The identity based policy that scopes the session to the privileged tasks that can be
-     *          performed. You can use one of following Amazon Web Services managed policies to scope root session
-     *          actions.</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-IAMAuditRootUserCredentials">IAMAuditRootUserCredentials</a>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-IAMCreateRootUserPassword">IAMCreateRootUserPassword</a>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-IAMDeleteRootUserCredentials">IAMDeleteRootUserCredentials</a>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-S3UnlockBucketPolicy">S3UnlockBucketPolicy</a>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-SQSUnlockQueuePolicy">SQSUnlockQueuePolicy</a>
-     *                </p>
-     *             </li>
-     *          </ul>
-     * @public
-     */
-    TaskPolicyArn: PolicyDescriptorType | undefined;
-    /**
-     * <p>The duration, in seconds, of the privileged session. The value can range from 0 seconds
-     *          up to the maximum session duration of 900 seconds (15 minutes). If you specify a value
-     *          higher than this setting, the operation fails.</p>
-     *          <p>By default, the value is set to <code>900</code> seconds.</p>
-     * @public
-     */
-    DurationSeconds?: number | undefined;
-}
-/**
- * @public
- */
-export interface AssumeRootResponse {
-    /**
-     * <p>The temporary security credentials, which include an access key ID, a secret access key,
-     *          and a security token.</p>
-     *          <note>
-     *             <p>The size of the security token that STS API operations return is not fixed. We
-     *         strongly recommend that you make no assumptions about the maximum size.</p>
-     *          </note>
-     * @public
-     */
-    Credentials?: Credentials | undefined;
-    /**
-     * <p>The source identity specified by the principal that is calling the
-     *             <code>AssumeRoot</code> operation.</p>
-     *          <p>You can use the <code>aws:SourceIdentity</code> condition key to control access based on
-     *          the value of source identity. For more information about using source identity, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html">Monitor and control
-     *             actions taken with assumed roles</a> in the
-     *          <i>IAM User Guide</i>.</p>
-     *          <p>The regex used to validate this parameter is a string of characters consisting of upper-
-     *          and lower-case alphanumeric characters with no spaces. You can also include underscores or
-     *          any of the following characters: =,.@-</p>
-     * @public
-     */
-    SourceIdentity?: string | undefined;
-}
-/**
- * @public
- */
-export interface DecodeAuthorizationMessageRequest {
-    /**
-     * <p>The encoded message that was returned with the response.</p>
-     * @public
-     */
-    EncodedMessage: string | undefined;
-}
-/**
- * <p>A document that contains additional information about the authorization status of a
- *       request from an encoded message that is returned in response to an Amazon Web Services request.</p>
- * @public
- */
-export interface DecodeAuthorizationMessageResponse {
-    /**
-     * <p>The API returns a response with the decoded message.</p>
-     * @public
-     */
-    DecodedMessage?: string | undefined;
-}
-/**
- * <p>The error returned if the message passed to <code>DecodeAuthorizationMessage</code>
- *             was invalid. This can happen if the token contains invalid characters, such as line
- *             breaks, or if the message has expired.</p>
- * @public
- */
-export declare class InvalidAuthorizationMessageException extends __BaseException {
-    readonly name: "InvalidAuthorizationMessageException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidAuthorizationMessageException, __BaseException>);
-}
-/**
- * @public
- */
-export interface GetAccessKeyInfoRequest {
-    /**
-     * <p>The identifier of an access key.</p>
-     *          <p>This parameter allows (through its regex pattern) a string of characters that can
-     *          consist of any upper- or lowercase letter or digit.</p>
-     * @public
-     */
-    AccessKeyId: string | undefined;
-}
-/**
- * @public
- */
-export interface GetAccessKeyInfoResponse {
-    /**
-     * <p>The number used to identify the Amazon Web Services account.</p>
-     * @public
-     */
-    Account?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetCallerIdentityRequest {
-}
-/**
- * <p>Contains the response to a successful <a>GetCallerIdentity</a> request,
- *          including information about the entity making the request.</p>
- * @public
- */
-export interface GetCallerIdentityResponse {
-    /**
-     * <p>The unique identifier of the calling entity. The exact value depends on the type of
-     *          entity that is making the call. The values returned are those listed in the <b>aws:userid</b> column in the <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_variables.html#principaltable">Principal
-     *             table</a> found on the <b>Policy Variables</b> reference
-     *          page in the <i>IAM User Guide</i>.</p>
-     * @public
-     */
-    UserId?: string | undefined;
-    /**
-     * <p>The Amazon Web Services account ID number of the account that owns or contains the calling
-     *          entity.</p>
-     * @public
-     */
-    Account?: string | undefined;
-    /**
-     * <p>The Amazon Web Services ARN associated with the calling entity.</p>
-     * @public
-     */
-    Arn?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetFederationTokenRequest {
-    /**
-     * <p>The name of the federated user. The name is used as an identifier for the temporary
-     *          security credentials (such as <code>Bob</code>). For example, you can reference the
-     *          federated user name in a resource-based policy, such as in an Amazon S3 bucket policy.</p>
-     *          <p>The regex used to validate this parameter is a string of characters
-     *     consisting of upper- and lower-case alphanumeric characters with no spaces. You can
-     *     also include underscores or any of the following characters: =,.@-</p>
-     * @public
-     */
-    Name: string | undefined;
-    /**
-     * <p>An IAM policy in JSON format that you want to use as an inline session policy.</p>
-     *          <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
-     *          this operation. You can pass a single JSON policy document to use as an inline session
-     *          policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as
-     *          managed session policies.</p>
-     *          <p>This parameter is optional. However, if you do not pass any session policies, then the
-     *          resulting federated user session has no permissions.</p>
-     *          <p>When you pass session policies, the session permissions are the intersection of the
-     *             IAM user policies and the session policies that you pass. This gives you
-     *          a way to further restrict the permissions for a federated user. You cannot use session
-     *          policies to grant more permissions than those that are defined in the permissions policy of
-     *          the IAM user. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in
-     *          the <i>IAM User Guide</i>.</p>
-     *          <p>The resulting credentials can be used to access a resource that has a resource-based
-     *          policy. If that policy specifically references the federated user session in the
-     *             <code>Principal</code> element of the policy, the session has the permissions allowed by
-     *          the policy. These permissions are granted in addition to the permissions that are granted
-     *          by the session policies.</p>
-     *          <p>The plaintext that you use for both inline and managed session policies can't exceed
-     *          2,048 characters. The JSON policy characters can be any ASCII character from the space
-     *          character to the end of the valid character list (\u0020 through \u00FF). It can also
-     *          include the tab (\u0009), linefeed (\u000A), and carriage return (\u000D)
-     *          characters.</p>
-     *          <note>
-     *             <p>An Amazon Web Services conversion compresses the passed inline session policy, managed policy ARNs,
-     *             and session tags into a packed binary format that has a separate limit. Your request can
-     *             fail for this limit even if your plaintext meets the other requirements. The
-     *                <code>PackedPolicySize</code> response element indicates by percentage how close the
-     *             policies and tags for your request are to the upper size limit.</p>
-     *          </note>
-     * @public
-     */
-    Policy?: string | undefined;
-    /**
-     * <p>The Amazon Resource Names (ARNs) of the IAM managed policies that you want to use as a
-     *          managed session policy. The policies must exist in the same account as the IAM user that is requesting federated access.</p>
-     *          <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
-     *          this operation. You can pass a single JSON policy document to use as an inline session
-     *          policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as
-     *          managed session policies. The plaintext that you use for both inline and managed session
-     *          policies can't exceed 2,048 characters. You can provide up to 10 managed policy ARNs. For
-     *          more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs) and Amazon Web Services
-     *             Service Namespaces</a> in the Amazon Web Services General Reference.</p>
-     *          <p>This parameter is optional. However, if you do not pass any session policies, then the
-     *          resulting federated user session has no permissions.</p>
-     *          <p>When you pass session policies, the session permissions are the intersection of the
-     *             IAM user policies and the session policies that you pass. This gives you
-     *          a way to further restrict the permissions for a federated user. You cannot use session
-     *          policies to grant more permissions than those that are defined in the permissions policy of
-     *          the IAM user. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in
-     *          the <i>IAM User Guide</i>.</p>
-     *          <p>The resulting credentials can be used to access a resource that has a resource-based
-     *          policy. If that policy specifically references the federated user session in the
-     *             <code>Principal</code> element of the policy, the session has the permissions allowed by
-     *          the policy. These permissions are granted in addition to the permissions that are granted
-     *          by the session policies.</p>
-     *          <note>
-     *             <p>An Amazon Web Services conversion compresses the passed inline session policy, managed policy ARNs,
-     *             and session tags into a packed binary format that has a separate limit. Your request can
-     *             fail for this limit even if your plaintext meets the other requirements. The
-     *                <code>PackedPolicySize</code> response element indicates by percentage how close the
-     *             policies and tags for your request are to the upper size limit.</p>
-     *          </note>
-     * @public
-     */
-    PolicyArns?: PolicyDescriptorType[] | undefined;
-    /**
-     * <p>The duration, in seconds, that the session should last. Acceptable durations for
-     *          federation sessions range from 900 seconds (15 minutes) to 129,600 seconds (36 hours), with
-     *          43,200 seconds (12 hours) as the default. Sessions obtained using root user
-     *          credentials are restricted to a maximum of 3,600 seconds (one hour). If the specified
-     *          duration is longer than one hour, the session obtained by using root user
-     *          credentials defaults to one hour.</p>
-     * @public
-     */
-    DurationSeconds?: number | undefined;
-    /**
-     * <p>A list of session tags. Each session tag consists of a key name and an associated value.
-     *          For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
-     *             <i>IAM User Guide</i>.</p>
-     *          <p>This parameter is optional. You can pass up to 50 session tags. The plaintext session
-     *          tag keys can’t exceed 128 characters and the values can’t exceed 256 characters. For these
-     *          and additional limits, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length">IAM
-     *             and STS Character Limits</a> in the <i>IAM User Guide</i>.</p>
-     *          <note>
-     *             <p>An Amazon Web Services conversion compresses the passed inline session policy, managed policy ARNs,
-     *             and session tags into a packed binary format that has a separate limit. Your request can
-     *             fail for this limit even if your plaintext meets the other requirements. The
-     *                <code>PackedPolicySize</code> response element indicates by percentage how close the
-     *             policies and tags for your request are to the upper size limit.</p>
-     *          </note>
-     *          <p>You can pass a session tag with the same key as a tag that is already attached to the
-     *          user you are federating. When you do, session tags override a user tag with the same key. </p>
-     *          <p>Tag key–value pairs are not case sensitive, but case is preserved. This means that you
-     *          cannot have separate <code>Department</code> and <code>department</code> tag keys. Assume
-     *          that the role has the <code>Department</code>=<code>Marketing</code> tag and you pass the
-     *             <code>department</code>=<code>engineering</code> session tag. <code>Department</code>
-     *          and <code>department</code> are not saved as separate tags, and the session tag passed in
-     *          the request takes precedence over the role tag.</p>
-     * @public
-     */
-    Tags?: Tag[] | undefined;
-}
-/**
- * <p>Identifiers for the federated user that is associated with the credentials.</p>
- * @public
- */
-export interface FederatedUser {
-    /**
-     * <p>The string that identifies the federated user associated with the credentials, similar
-     *          to the unique ID of an IAM user.</p>
-     * @public
-     */
-    FederatedUserId: string | undefined;
-    /**
-     * <p>The ARN that specifies the federated user that is associated with the credentials. For
-     *          more information about ARNs and how to use them in policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html">IAM
-     *             Identifiers</a> in the <i>IAM User Guide</i>. </p>
-     * @public
-     */
-    Arn: string | undefined;
-}
-/**
- * <p>Contains the response to a successful <a>GetFederationToken</a> request,
- *       including temporary Amazon Web Services credentials that can be used to make Amazon Web Services requests. </p>
- * @public
- */
-export interface GetFederationTokenResponse {
-    /**
-     * <p>The temporary security credentials, which include an access key ID, a secret access key,
-     *          and a security (or session) token.</p>
-     *          <note>
-     *             <p>The size of the security token that STS API operations return is not fixed. We
-     *         strongly recommend that you make no assumptions about the maximum size.</p>
-     *          </note>
-     * @public
-     */
-    Credentials?: Credentials | undefined;
-    /**
-     * <p>Identifiers for the federated user associated with the credentials (such as
-     *             <code>arn:aws:sts::123456789012:federated-user/Bob</code> or
-     *             <code>123456789012:Bob</code>). You can use the federated user's ARN in your
-     *          resource-based policies, such as an Amazon S3 bucket policy. </p>
-     * @public
-     */
-    FederatedUser?: FederatedUser | undefined;
-    /**
-     * <p>A percentage value that indicates the packed size of the session policies and session
-     *       tags combined passed in the request. The request fails if the packed size is greater than 100 percent,
-     *       which means the policies and tags exceeded the allowed space.</p>
-     * @public
-     */
-    PackedPolicySize?: number | undefined;
-}
-/**
- * @public
- */
-export interface GetSessionTokenRequest {
-    /**
-     * <p>The duration, in seconds, that the credentials should remain valid. Acceptable durations
-     *          for IAM user sessions range from 900 seconds (15 minutes) to 129,600 seconds
-     *          (36 hours), with 43,200 seconds (12 hours) as the default. Sessions for Amazon Web Services account
-     *          owners are restricted to a maximum of 3,600 seconds (one hour). If the duration is longer
-     *          than one hour, the session for Amazon Web Services account owners defaults to one hour.</p>
-     * @public
-     */
-    DurationSeconds?: number | undefined;
-    /**
-     * <p>The identification number of the MFA device that is associated with the IAM user who is making the <code>GetSessionToken</code> call. Specify this value
-     *          if the IAM user has a policy that requires MFA authentication. The value is
-     *          either the serial number for a hardware device (such as <code>GAHT12345678</code>) or an
-     *          Amazon Resource Name (ARN) for a virtual device (such as
-     *             <code>arn:aws:iam::123456789012:mfa/user</code>). You can find the device for an IAM user by going to the Amazon Web Services Management Console and viewing the user's security credentials. </p>
-     *          <p>The regex used to validate this parameter is a string of
-     *     characters consisting of upper- and lower-case alphanumeric characters with no spaces.
-     *     You can also include underscores or any of the following characters: =,.@:/-</p>
-     * @public
-     */
-    SerialNumber?: string | undefined;
-    /**
-     * <p>The value provided by the MFA device, if MFA is required. If any policy requires the
-     *             IAM user to submit an MFA code, specify this value. If MFA authentication
-     *          is required, the user must provide a code when requesting a set of temporary security
-     *          credentials. A user who fails to provide the code receives an "access denied" response when
-     *          requesting resources that require MFA authentication.</p>
-     *          <p>The format for this parameter, as described by its regex pattern, is a sequence of six
-     *          numeric digits.</p>
-     * @public
-     */
-    TokenCode?: string | undefined;
-}
-/**
- * <p>Contains the response to a successful <a>GetSessionToken</a> request,
- *       including temporary Amazon Web Services credentials that can be used to make Amazon Web Services requests. </p>
- * @public
- */
-export interface GetSessionTokenResponse {
-    /**
-     * <p>The temporary security credentials, which include an access key ID, a secret access key,
-     *          and a security (or session) token.</p>
-     *          <note>
-     *             <p>The size of the security token that STS API operations return is not fixed. We
-     *         strongly recommend that you make no assumptions about the maximum size.</p>
-     *          </note>
-     * @public
-     */
-    Credentials?: Credentials | undefined;
-}
-/**
- * @internal
- */
-export declare const CredentialsFilterSensitiveLog: (obj: Credentials) => any;
-/**
- * @internal
- */
-export declare const AssumeRoleResponseFilterSensitiveLog: (obj: AssumeRoleResponse) => any;
-/**
- * @internal
- */
-export declare const AssumeRoleWithSAMLRequestFilterSensitiveLog: (obj: AssumeRoleWithSAMLRequest) => any;
-/**
- * @internal
- */
-export declare const AssumeRoleWithSAMLResponseFilterSensitiveLog: (obj: AssumeRoleWithSAMLResponse) => any;
-/**
- * @internal
- */
-export declare const AssumeRoleWithWebIdentityRequestFilterSensitiveLog: (obj: AssumeRoleWithWebIdentityRequest) => any;
-/**
- * @internal
- */
-export declare const AssumeRoleWithWebIdentityResponseFilterSensitiveLog: (obj: AssumeRoleWithWebIdentityResponse) => any;
-/**
- * @internal
- */
-export declare const AssumeRootResponseFilterSensitiveLog: (obj: AssumeRootResponse) => any;
-/**
- * @internal
- */
-export declare const GetFederationTokenResponseFilterSensitiveLog: (obj: GetFederationTokenResponse) => any;
-/**
- * @internal
- */
-export declare const GetSessionTokenResponseFilterSensitiveLog: (obj: GetSessionTokenResponse) => any;