@cdk8s/awscdk-resolver 0.0.54 → 0.0.56

package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeConfig.js

@@ -3,9 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getRuntimeConfig = void 0;
 const tslib_1 = require("tslib");
 const package_json_1 = tslib_1.__importDefault(require("../package.json"));
-const defaultStsRoleAssumers_1 = require("./defaultStsRoleAssumers");
+const credentialDefaultProvider_1 = require("./credentialDefaultProvider");
 const core_1 = require("@aws-sdk/core");
-const credential_provider_node_1 = require("@aws-sdk/credential-provider-node");
 const util_user_agent_node_1 = require("@aws-sdk/util-user-agent-node");
 const config_resolver_1 = require("@smithy/config-resolver");
 const core_2 = require("@smithy/core");
@@ -31,14 +30,14 @@ const getRuntimeConfig = (config) => {
         runtime: "node",
         defaultsMode,
         bodyLengthChecker: config?.bodyLengthChecker ?? util_body_length_node_1.calculateBodyLength,
-        credentialDefaultProvider: config?.credentialDefaultProvider ?? (0, defaultStsRoleAssumers_1.decorateDefaultCredentialProvider)(credential_provider_node_1.defaultProvider),
+        credentialDefaultProvider: config?.credentialDefaultProvider ?? credentialDefaultProvider_1.defaultProvider,
         defaultUserAgentProvider: config?.defaultUserAgentProvider ??
             (0, util_user_agent_node_1.defaultUserAgent)({ serviceId: clientSharedValues.serviceId, clientVersion: package_json_1.default.version }),
         httpAuthSchemes: config?.httpAuthSchemes ?? [
             {
                 schemeId: "aws.auth#sigv4",
                 identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4") ||
-                    (async (idProps) => await (0, defaultStsRoleAssumers_1.decorateDefaultCredentialProvider)(credential_provider_node_1.defaultProvider)(idProps?.__config || {})()),
+                    (async (idProps) => await (0, credentialDefaultProvider_1.defaultProvider)(idProps?.__config || {})()),
                 signer: new core_1.AwsSdkSigV4Signer(),
             },
             {

package/node_modules/@aws-sdk/client-sts/dist-es/credentialDefaultProvider.js

@@ -0,0 +1,3 @@
+export const defaultProvider = ((input) => {
+    return () => import("@aws-sdk/credential-provider-node").then(({ defaultProvider }) => defaultProvider(input)());
+});

package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.js

@@ -1,7 +1,6 @@
 import packageInfo from "../package.json";
-import { decorateDefaultCredentialProvider } from "./defaultStsRoleAssumers";
+import { defaultProvider as credentialDefaultProvider } from "./credentialDefaultProvider";
 import { AwsSdkSigV4Signer, emitWarningIfUnsupportedVersion as awsCheckVersion } from "@aws-sdk/core";
-import { defaultProvider as credentialDefaultProvider } from "@aws-sdk/credential-provider-node";
 import { defaultUserAgent } from "@aws-sdk/util-user-agent-node";
 import { NODE_REGION_CONFIG_FILE_OPTIONS, NODE_REGION_CONFIG_OPTIONS, NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, } from "@smithy/config-resolver";
 import { NoAuthSigner } from "@smithy/core";
@@ -27,14 +26,14 @@ export const getRuntimeConfig = (config) => {
         runtime: "node",
         defaultsMode,
         bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
-        credentialDefaultProvider: config?.credentialDefaultProvider ?? decorateDefaultCredentialProvider(credentialDefaultProvider),
+        credentialDefaultProvider: config?.credentialDefaultProvider ?? credentialDefaultProvider,
         defaultUserAgentProvider: config?.defaultUserAgentProvider ??
             defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
         httpAuthSchemes: config?.httpAuthSchemes ?? [
             {
                 schemeId: "aws.auth#sigv4",
                 identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4") ||
-                    (async (idProps) => await decorateDefaultCredentialProvider(credentialDefaultProvider)(idProps?.__config || {})()),
+                    (async (idProps) => await credentialDefaultProvider(idProps?.__config || {})()),
                 signer: new AwsSdkSigV4Signer(),
             },
             {

package/node_modules/@aws-sdk/client-sts/dist-types/credentialDefaultProvider.d.ts

@@ -0,0 +1,4 @@
+/**
+ * @internal
+ */
+export declare const defaultProvider: any;

package/node_modules/@aws-sdk/client-sts/dist-types/defaultRoleAssumers.d.ts

@@ -16,5 +16,8 @@ export declare const getDefaultRoleAssumerWithWebIdentity: (stsOptions?: Pick<ST
  * dependencies.
  *
  * @internal
+ *
+ * @deprecated this is no longer needed. Use the defaultProvider directly,
+ * which will load STS if needed.
  */
 export declare const decorateDefaultCredentialProvider: (provider: DefaultCredentialProvider) => DefaultCredentialProvider;

package/node_modules/@aws-sdk/client-sts/dist-types/runtimeConfig.d.ts

@@ -1,3 +1,4 @@
+import { AwsSdkSigV4Signer } from "@aws-sdk/core";
 import { NoAuthSigner } from "@smithy/core";
 import { NodeHttpHandler as RequestHandler } from "@smithy/node-http-handler";
 import { IdentityProviderConfig } from "@smithy/types";
@@ -9,13 +10,17 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
     runtime: string;
     defaultsMode: import("@smithy/types").Provider<import("@smithy/smithy-client").ResolvedDefaultsMode>;
     bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
-    credentialDefaultProvider: (input: any) => import("@smithy/types").AwsCredentialIdentityProvider;
+    credentialDefaultProvider: any;
     defaultUserAgentProvider: import("@smithy/types").Provider<import("@smithy/types").UserAgent>;
-    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | {
+    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
+        schemeId: string;
+        identityProvider: (ipc: IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | ((idProps: Record<string, any> | undefined) => Promise<any>);
+        signer: AwsSdkSigV4Signer;
+    } | {
         schemeId: string;
         identityProvider: (ipc: IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | (() => Promise<{}>);
         signer: NoAuthSigner;
-    }[];
+    })[];
     maxAttempts: number | import("@smithy/types").Provider<number>;
     region: string | import("@smithy/types").Provider<string>;
     requestHandler: (import("@smithy/types").RequestHandler<any, any, import("@smithy/types").HttpHandlerOptions> & import("@smithy/types").RequestHandler<import("@smithy/protocol-http").HttpRequest, import("@smithy/protocol-http").HttpResponse, import("@smithy/types").HttpHandlerOptions> & {

package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/credentialDefaultProvider.d.ts

@@ -0,0 +1 @@
+export declare const defaultProvider: any;

package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.d.ts

@@ -1,3 +1,4 @@
+import { AwsSdkSigV4Signer } from "@aws-sdk/core";
 import { NoAuthSigner } from "@smithy/core";
 import { NodeHttpHandler as RequestHandler } from "@smithy/node-http-handler";
 import { IdentityProviderConfig } from "@smithy/types";
@@ -8,25 +9,36 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
     import("@smithy/smithy-client").ResolvedDefaultsMode
   >;
   bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
-  credentialDefaultProvider: (
-    input: any
-  ) => import("@smithy/types").AwsCredentialIdentityProvider;
+  credentialDefaultProvider: any;
   defaultUserAgentProvider: import("@smithy/types").Provider<
     import("@smithy/types").UserAgent
   >;
   httpAuthSchemes:
     | import("@smithy/types").HttpAuthScheme[]
-    | {
-        schemeId: string;
-        identityProvider: (
-          ipc: IdentityProviderConfig
-        ) =>
-          | import("@smithy/types").IdentityProvider<
-              import("@smithy/types").Identity
-            >
-          | (() => Promise<{}>);
-        signer: NoAuthSigner;
-      }[];
+    | (
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | ((idProps: Record<string, any> | undefined) => Promise<any>);
+            signer: AwsSdkSigV4Signer;
+          }
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | (() => Promise<{}>);
+            signer: NoAuthSigner;
+          }
+      )[];
   maxAttempts: number | import("@smithy/types").Provider<number>;
   region: string | import("@smithy/types").Provider<string>;
   requestHandler:

package/node_modules/@aws-sdk/client-sts/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@aws-sdk/client-sts",
   "description": "AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native",
-  "version": "3.501.0",
+  "version": "3.504.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sts",
     "build:es": "tsc -p tsconfig.es.json",
     "build:include:deps": "lerna run --scope $npm_package_name --include-dependencies build",
-    "build:types": "tsc -p tsconfig.types.json",
+    "build:types": "rimraf ./dist-types tsconfig.types.tsbuildinfo && tsc -p tsconfig.types.json",
     "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
     "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo",
     "extract:docs": "api-extractor run --local",
@@ -23,16 +23,15 @@
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
     "@aws-sdk/core": "3.496.0",
-    "@aws-sdk/credential-provider-node": "3.501.0",
-    "@aws-sdk/middleware-host-header": "3.496.0",
-    "@aws-sdk/middleware-logger": "3.496.0",
-    "@aws-sdk/middleware-recursion-detection": "3.496.0",
-    "@aws-sdk/middleware-user-agent": "3.496.0",
-    "@aws-sdk/region-config-resolver": "3.496.0",
-    "@aws-sdk/types": "3.496.0",
-    "@aws-sdk/util-endpoints": "3.496.0",
-    "@aws-sdk/util-user-agent-browser": "3.496.0",
-    "@aws-sdk/util-user-agent-node": "3.496.0",
+    "@aws-sdk/middleware-host-header": "3.502.0",
+    "@aws-sdk/middleware-logger": "3.502.0",
+    "@aws-sdk/middleware-recursion-detection": "3.502.0",
+    "@aws-sdk/middleware-user-agent": "3.502.0",
+    "@aws-sdk/region-config-resolver": "3.502.0",
+    "@aws-sdk/types": "3.502.0",
+    "@aws-sdk/util-endpoints": "3.502.0",
+    "@aws-sdk/util-user-agent-browser": "3.502.0",
+    "@aws-sdk/util-user-agent-node": "3.502.0",
     "@smithy/config-resolver": "^2.1.1",
     "@smithy/core": "^1.3.1",
     "@smithy/fetch-http-handler": "^2.4.1",
@@ -88,6 +87,9 @@
     "url": "https://aws.amazon.com/javascript/"
   },
   "license": "Apache-2.0",
+  "peerDependencies": {
+    "@aws-sdk/credential-provider-node": "^3.504.0"
+  },
   "browser": {
     "./dist-es/runtimeConfig": "./dist-es/runtimeConfig.browser"
   },

package/node_modules/@aws-sdk/credential-provider-env/dist-cjs/index.js

@@ -36,7 +36,9 @@ var ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 var ENV_SESSION = "AWS_SESSION_TOKEN";
 var ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 var ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
-var fromEnv = /* @__PURE__ */ __name(() => async () => {
+var fromEnv = /* @__PURE__ */ __name((init) => async () => {
+  var _a;
+  (_a = init == null ? void 0 : init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-env", "fromEnv");
   const accessKeyId = process.env[ENV_KEY];
   const secretAccessKey = process.env[ENV_SECRET];
   const sessionToken = process.env[ENV_SESSION];
@@ -56,11 +58,11 @@ var fromEnv = /* @__PURE__ */ __name(() => async () => {
 // Annotate the CommonJS export names for ESM import in node:
 
 0 && (module.exports = {
-  ENV_CREDENTIAL_SCOPE,
-  ENV_EXPIRATION,
   ENV_KEY,
   ENV_SECRET,
   ENV_SESSION,
+  ENV_EXPIRATION,
+  ENV_CREDENTIAL_SCOPE,
   fromEnv
 });
 

package/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js

@@ -4,7 +4,8 @@ export const ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 export const ENV_SESSION = "AWS_SESSION_TOKEN";
 export const ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 export const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
-export const fromEnv = () => async () => {
+export const fromEnv = (init) => async () => {
+    init?.logger?.debug("@aws-sdk/credential-provider-env", "fromEnv");
     const accessKeyId = process.env[ENV_KEY];
     const secretAccessKey = process.env[ENV_SECRET];
     const sessionToken = process.env[ENV_SESSION];

package/node_modules/@aws-sdk/credential-provider-env/dist-types/fromEnv.d.ts

@@ -1,4 +1,7 @@
+import type { CredentialProviderOptions } from "@aws-sdk/types";
 import { AwsCredentialIdentityProvider } from "@smithy/types";
+export interface FromEnvInit extends CredentialProviderOptions {
+}
 /**
  * @internal
  */
@@ -26,4 +29,4 @@ export declare const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
  * `AWS_ACCESS_KEY_ID` or `AWS_SECRET_ACCESS_KEY` environment variable is not
  * set in this process, the provider will return a rejected promise.
  */
-export declare const fromEnv: () => AwsCredentialIdentityProvider;
+export declare const fromEnv: (init?: FromEnvInit) => AwsCredentialIdentityProvider;

package/node_modules/@aws-sdk/credential-provider-env/dist-types/ts3.4/fromEnv.d.ts

@@ -1,7 +1,11 @@
+import { CredentialProviderOptions } from "@aws-sdk/types";
 import { AwsCredentialIdentityProvider } from "@smithy/types";
+export interface FromEnvInit extends CredentialProviderOptions {}
 export declare const ENV_KEY = "AWS_ACCESS_KEY_ID";
 export declare const ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
 export declare const ENV_SESSION = "AWS_SESSION_TOKEN";
 export declare const ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
 export declare const ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
-export declare const fromEnv: () => AwsCredentialIdentityProvider;
+export declare const fromEnv: (
+  init?: FromEnvInit
+) => AwsCredentialIdentityProvider;

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.496.0",
+  "version": "3.502.0",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -24,7 +24,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.496.0",
+    "@aws-sdk/types": "3.502.0",
     "@smithy/property-provider": "^2.1.1",
     "@smithy/types": "^2.9.1",
     "tslib": "^2.5.0"

package/node_modules/@aws-sdk/credential-provider-http/README.md

@@ -0,0 +1,10 @@
+# @aws-sdk/credential-provider-http
+
+[![NPM version](https://img.shields.io/npm/v/@aws-sdk/credential-provider-http/latest.svg)](https://www.npmjs.com/package/@aws-sdk/credential-provider-http)
+[![NPM downloads](https://img.shields.io/npm/dm/@aws-sdk/credential-provider-http.svg)](https://www.npmjs.com/package/@aws-sdk/credential-provider-http)
+
+> An internal transitively required package.
+
+## Usage
+
+See https://www.npmjs.com/package/@aws-sdk/credential-providers

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/checkUrl.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkUrl = void 0;
+const property_provider_1 = require("@smithy/property-provider");
+const LOOPBACK_CIDR_IPv4 = "127.0.0.0/8";
+const LOOPBACK_CIDR_IPv6 = "::1/128";
+const ECS_CONTAINER_HOST = "169.254.170.2";
+const EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
+const EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
+const checkUrl = (url) => {
+    if (url.protocol === "https:") {
+        return;
+    }
+    if (url.hostname === ECS_CONTAINER_HOST ||
+        url.hostname === EKS_CONTAINER_HOST_IPv4 ||
+        url.hostname === EKS_CONTAINER_HOST_IPv6) {
+        return;
+    }
+    if (url.hostname.includes("[")) {
+        if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
+            return;
+        }
+    }
+    else {
+        if (url.hostname === "localhost") {
+            return;
+        }
+        const ipComponents = url.hostname.split(".");
+        const inRange = (component) => {
+            const num = parseInt(component, 10);
+            return 0 <= num && num <= 255;
+        };
+        if (ipComponents[0] === "127" &&
+            inRange(ipComponents[1]) &&
+            inRange(ipComponents[2]) &&
+            inRange(ipComponents[3]) &&
+            ipComponents.length === 4) {
+            return;
+        }
+    }
+    throw new property_provider_1.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`);
+};
+exports.checkUrl = checkUrl;

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttp.browser.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fromHttp = void 0;
+const fetch_http_handler_1 = require("@smithy/fetch-http-handler");
+const property_provider_1 = require("@smithy/property-provider");
+const checkUrl_1 = require("./checkUrl");
+const requestHelpers_1 = require("./requestHelpers");
+const retry_wrapper_1 = require("./retry-wrapper");
+const fromHttp = (options) => {
+    var _a, _b, _c;
+    (_a = options.logger) === null || _a === void 0 ? void 0 : _a.debug("@aws-sdk/credential-provider-http", "fromHttp");
+    let host;
+    const full = options.credentialsFullUri;
+    if (full) {
+        host = full;
+    }
+    else {
+        throw new property_provider_1.CredentialsProviderError("No HTTP credential provider host provided.");
+    }
+    const url = new URL(host);
+    (0, checkUrl_1.checkUrl)(url);
+    const requestHandler = new fetch_http_handler_1.FetchHttpHandler();
+    return (0, retry_wrapper_1.retryWrapper)(async () => {
+        const request = (0, requestHelpers_1.createGetRequest)(url);
+        if (options.authorizationToken) {
+            request.headers.Authorization = options.authorizationToken;
+        }
+        const result = await requestHandler.handle(request);
+        return (0, requestHelpers_1.getCredentials)(result.response);
+    }, (_b = options.maxRetries) !== null && _b !== void 0 ? _b : 3, (_c = options.timeout) !== null && _c !== void 0 ? _c : 1000);
+};
+exports.fromHttp = fromHttp;

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttp.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fromHttp = void 0;
+const tslib_1 = require("tslib");
+const node_http_handler_1 = require("@smithy/node-http-handler");
+const property_provider_1 = require("@smithy/property-provider");
+const promises_1 = tslib_1.__importDefault(require("fs/promises"));
+const checkUrl_1 = require("./checkUrl");
+const requestHelpers_1 = require("./requestHelpers");
+const retry_wrapper_1 = require("./retry-wrapper");
+const AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+const DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
+const AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+const AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
+const AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+const fromHttp = (options) => {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+    (_a = options.logger) === null || _a === void 0 ? void 0 : _a.debug("@aws-sdk/credential-provider-http", "fromHttp");
+    let host;
+    const relative = (_b = options.awsContainerCredentialsRelativeUri) !== null && _b !== void 0 ? _b : process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
+    const full = (_c = options.awsContainerCredentialsFullUri) !== null && _c !== void 0 ? _c : process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
+    const token = (_d = options.awsContainerAuthorizationToken) !== null && _d !== void 0 ? _d : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
+    const tokenFile = (_e = options.awsContainerAuthorizationTokenFile) !== null && _e !== void 0 ? _e : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
+    if (relative && full) {
+        console.warn("AWS SDK HTTP credentials provider:", "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
+        console.warn("awsContainerCredentialsFullUri will take precedence.");
+    }
+    if (token && tokenFile) {
+        console.warn("AWS SDK HTTP credentials provider:", "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
+        console.warn("awsContainerAuthorizationToken will take precedence.");
+    }
+    if (full) {
+        host = full;
+    }
+    else if (relative) {
+        host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;
+    }
+    else {
+        throw new property_provider_1.CredentialsProviderError(`No HTTP credential provider host provided.
+Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`);
+    }
+    const url = new URL(host);
+    (0, checkUrl_1.checkUrl)(url);
+    const requestHandler = new node_http_handler_1.NodeHttpHandler({
+        requestTimeout: (_f = options.timeout) !== null && _f !== void 0 ? _f : 1000,
+        connectionTimeout: (_g = options.timeout) !== null && _g !== void 0 ? _g : 1000,
+    });
+    return (0, retry_wrapper_1.retryWrapper)(async () => {
+        const request = (0, requestHelpers_1.createGetRequest)(url);
+        if (token) {
+            request.headers.Authorization = token;
+        }
+        else if (tokenFile) {
+            request.headers.Authorization = (await promises_1.default.readFile(tokenFile)).toString();
+        }
+        try {
+            const result = await requestHandler.handle(request);
+            return (0, requestHelpers_1.getCredentials)(result.response);
+        }
+        catch (e) {
+            throw new property_provider_1.CredentialsProviderError(String(e));
+        }
+    }, (_h = options.maxRetries) !== null && _h !== void 0 ? _h : 3, (_j = options.timeout) !== null && _j !== void 0 ? _j : 1000);
+};
+exports.fromHttp = fromHttp;

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttpTypes.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/requestHelpers.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCredentials = exports.createGetRequest = void 0;
+const property_provider_1 = require("@smithy/property-provider");
+const protocol_http_1 = require("@smithy/protocol-http");
+const smithy_client_1 = require("@smithy/smithy-client");
+const util_stream_1 = require("@smithy/util-stream");
+function createGetRequest(url) {
+    return new protocol_http_1.HttpRequest({
+        protocol: url.protocol,
+        hostname: url.hostname,
+        port: Number(url.port),
+        path: url.pathname,
+        query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {
+            acc[k] = v;
+            return acc;
+        }, {}),
+        fragment: url.hash,
+    });
+}
+exports.createGetRequest = createGetRequest;
+async function getCredentials(response) {
+    var _a, _b;
+    const contentType = (_b = (_a = response === null || response === void 0 ? void 0 : response.headers["content-type"]) !== null && _a !== void 0 ? _a : response === null || response === void 0 ? void 0 : response.headers["Content-Type"]) !== null && _b !== void 0 ? _b : "";
+    if (!contentType.includes("json")) {
+        console.warn("HTTP credential provider response header content-type was not application/json. Observed: " + contentType + ".");
+    }
+    const stream = (0, util_stream_1.sdkStreamMixin)(response.body);
+    const str = await stream.transformToString();
+    if (response.statusCode === 200) {
+        const parsed = JSON.parse(str);
+        if (typeof parsed.AccessKeyId !== "string" ||
+            typeof parsed.SecretAccessKey !== "string" ||
+            typeof parsed.Token !== "string" ||
+            typeof parsed.Expiration !== "string") {
+            throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: " +
+                "{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }");
+        }
+        return {
+            accessKeyId: parsed.AccessKeyId,
+            secretAccessKey: parsed.SecretAccessKey,
+            sessionToken: parsed.Token,
+            expiration: (0, smithy_client_1.parseRfc3339DateTime)(parsed.Expiration),
+        };
+    }
+    if (response.statusCode >= 400 && response.statusCode < 500) {
+        let parsedBody = {};
+        try {
+            parsedBody = JSON.parse(str);
+        }
+        catch (e) { }
+        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`), {
+            Code: parsedBody.Code,
+            Message: parsedBody.Message,
+        });
+    }
+    throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`);
+}
+exports.getCredentials = getCredentials;

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/retry-wrapper.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retryWrapper = void 0;
+const retryWrapper = (toRetry, maxRetries, delayMs) => {
+    return async () => {
+        for (let i = 0; i < maxRetries; ++i) {
+            try {
+                return await toRetry();
+            }
+            catch (e) {
+                await new Promise((resolve) => setTimeout(resolve, delayMs));
+            }
+        }
+        return await toRetry();
+    };
+};
+exports.retryWrapper = retryWrapper;

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/index.browser.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fromHttp = void 0;
+var fromHttp_browser_1 = require("./fromHttp/fromHttp.browser");
+Object.defineProperty(exports, "fromHttp", { enumerable: true, get: function () { return fromHttp_browser_1.fromHttp; } });

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fromHttp = void 0;
+var fromHttp_1 = require("./fromHttp/fromHttp");
+Object.defineProperty(exports, "fromHttp", { enumerable: true, get: function () { return fromHttp_1.fromHttp; } });

package/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js

@@ -0,0 +1,42 @@
+import { CredentialsProviderError } from "@smithy/property-provider";
+const LOOPBACK_CIDR_IPv4 = "127.0.0.0/8";
+const LOOPBACK_CIDR_IPv6 = "::1/128";
+const ECS_CONTAINER_HOST = "169.254.170.2";
+const EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
+const EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
+export const checkUrl = (url) => {
+    if (url.protocol === "https:") {
+        return;
+    }
+    if (url.hostname === ECS_CONTAINER_HOST ||
+        url.hostname === EKS_CONTAINER_HOST_IPv4 ||
+        url.hostname === EKS_CONTAINER_HOST_IPv6) {
+        return;
+    }
+    if (url.hostname.includes("[")) {
+        if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
+            return;
+        }
+    }
+    else {
+        if (url.hostname === "localhost") {
+            return;
+        }
+        const ipComponents = url.hostname.split(".");
+        const inRange = (component) => {
+            const num = parseInt(component, 10);
+            return 0 <= num && num <= 255;
+        };
+        if (ipComponents[0] === "127" &&
+            inRange(ipComponents[1]) &&
+            inRange(ipComponents[2]) &&
+            inRange(ipComponents[3]) &&
+            ipComponents.length === 4) {
+            return;
+        }
+    }
+    throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`);
+};

package/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.browser.js

@@ -0,0 +1,27 @@
+import { FetchHttpHandler } from "@smithy/fetch-http-handler";
+import { CredentialsProviderError } from "@smithy/property-provider";
+import { checkUrl } from "./checkUrl";
+import { createGetRequest, getCredentials } from "./requestHelpers";
+import { retryWrapper } from "./retry-wrapper";
+export const fromHttp = (options) => {
+    options.logger?.debug("@aws-sdk/credential-provider-http", "fromHttp");
+    let host;
+    const full = options.credentialsFullUri;
+    if (full) {
+        host = full;
+    }
+    else {
+        throw new CredentialsProviderError("No HTTP credential provider host provided.");
+    }
+    const url = new URL(host);
+    checkUrl(url);
+    const requestHandler = new FetchHttpHandler();
+    return retryWrapper(async () => {
+        const request = createGetRequest(url);
+        if (options.authorizationToken) {
+            request.headers.Authorization = options.authorizationToken;
+        }
+        const result = await requestHandler.handle(request);
+        return getCredentials(result.response);
+    }, options.maxRetries ?? 3, options.timeout ?? 1000);
+};