@cdk8s/awscdk-resolver 0.0.90 → 0.0.91
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +3 -3
- package/lib/resolve.js +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/package.json +2 -2
- package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js +2 -17
- package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js +1 -1
- package/node_modules/@aws-sdk/credential-provider-ini/dist-types/fromIni.d.ts +5 -2
- package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/fromIni.d.ts +1 -2
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +6 -4
- package/node_modules/@aws-sdk/credential-provider-node/package.json +4 -4
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +2 -2
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/fromWebToken.js +1 -1
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js +1 -1
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-types/fromWebToken.d.ts +2 -2
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-types/ts3.4/fromWebToken.d.ts +1 -2
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +4 -2
- package/node_modules/@aws-sdk/token-providers/dist-cjs/index.js +14 -20
- package/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js +1 -1
- package/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js +1 -1
- package/node_modules/@aws-sdk/token-providers/package.json +4 -2
- package/package.json +2 -2
- package/node_modules/@aws-sdk/client-sso-oidc/LICENSE +0 -201
- package/node_modules/@aws-sdk/client-sso-oidc/README.md +0 -274
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/auth/httpAuthSchemeProvider.js +0 -64
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/credentialDefaultProvider.js +0 -29
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/endpoint/endpointResolver.js +0 -14
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/endpoint/ruleset.js +0 -7
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/index.js +0 -1024
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/runtimeConfig.browser.js +0 -39
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/runtimeConfig.js +0 -49
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/runtimeConfig.native.js +0 -15
- package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/runtimeConfig.shared.js +0 -40
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/SSOOIDC.js +0 -15
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/SSOOIDCClient.js +0 -52
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/auth/httpAuthExtensionConfiguration.js +0 -38
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/auth/httpAuthSchemeProvider.js +0 -58
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/commands/CreateTokenCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/commands/CreateTokenWithIAMCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/commands/RegisterClientCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/commands/StartDeviceAuthorizationCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/commands/index.js +0 -4
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/credentialDefaultProvider.js +0 -3
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/endpoint/EndpointParameters.js +0 -14
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/endpoint/endpointResolver.js +0 -10
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/endpoint/ruleset.js +0 -4
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/extensionConfiguration.js +0 -1
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/index.js +0 -5
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/models/SSOOIDCServiceException.js +0 -8
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/models/index.js +0 -1
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/models/models_0.js +0 -217
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/protocols/Aws_restJson1.js +0 -409
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/runtimeConfig.browser.js +0 -34
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/runtimeConfig.js +0 -44
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/runtimeConfig.native.js +0 -11
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/runtimeConfig.shared.js +0 -36
- package/node_modules/@aws-sdk/client-sso-oidc/dist-es/runtimeExtensions.js +0 -21
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/SSOOIDC.d.ts +0 -75
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/SSOOIDCClient.d.ts +0 -212
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/auth/httpAuthExtensionConfiguration.d.ts +0 -29
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/auth/httpAuthSchemeProvider.d.ts +0 -61
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/CreateTokenCommand.d.ts +0 -162
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/CreateTokenWithIAMCommand.d.ts +0 -244
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/RegisterClientCommand.d.ts +0 -108
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/StartDeviceAuthorizationCommand.d.ts +0 -111
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/index.d.ts +0 -4
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/credentialDefaultProvider.d.ts +0 -4
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/endpoint/EndpointParameters.d.ts +0 -40
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/endpoint/endpointResolver.d.ts +0 -5
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/endpoint/ruleset.d.ts +0 -2
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/extensionConfiguration.d.ts +0 -9
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/index.d.ts +0 -50
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/models/SSOOIDCServiceException.d.ts +0 -13
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/models/index.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/models/models_0.d.ts +0 -734
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/protocols/Aws_restJson1.d.ts +0 -38
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.browser.d.ts +0 -53
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.d.ts +0 -53
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.native.d.ts +0 -52
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.shared.d.ts +0 -32
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeExtensions.d.ts +0 -17
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/SSOOIDC.d.ts +0 -73
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/SSOOIDCClient.d.ts +0 -144
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/auth/httpAuthExtensionConfiguration.d.ts +0 -32
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/auth/httpAuthSchemeProvider.d.ts +0 -44
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/commands/CreateTokenCommand.d.ts +0 -35
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/commands/CreateTokenWithIAMCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/commands/RegisterClientCommand.d.ts +0 -38
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/commands/StartDeviceAuthorizationCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/commands/index.d.ts +0 -4
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/credentialDefaultProvider.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +0 -51
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/endpoint/endpointResolver.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/endpoint/ruleset.d.ts +0 -2
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/extensionConfiguration.d.ts +0 -9
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/index.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/models/SSOOIDCServiceException.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/models/index.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/models/models_0.d.ts +0 -201
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +0 -53
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.browser.d.ts +0 -110
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.d.ts +0 -108
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.native.d.ts +0 -104
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.shared.d.ts +0 -49
- package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeExtensions.d.ts +0 -11
- package/node_modules/@aws-sdk/client-sso-oidc/package.json +0 -102
- package/node_modules/@aws-sdk/client-sts/LICENSE +0 -201
- package/node_modules/@aws-sdk/client-sts/README.md +0 -273
- package/node_modules/@aws-sdk/client-sts/dist-cjs/STSClient.js +0 -56
- package/node_modules/@aws-sdk/client-sts/dist-cjs/auth/httpAuthExtensionConfiguration.js +0 -43
- package/node_modules/@aws-sdk/client-sts/dist-cjs/auth/httpAuthSchemeProvider.js +0 -67
- package/node_modules/@aws-sdk/client-sts/dist-cjs/credentialDefaultProvider.js +0 -29
- package/node_modules/@aws-sdk/client-sts/dist-cjs/endpoint/EndpointParameters.js +0 -20
- package/node_modules/@aws-sdk/client-sts/dist-cjs/endpoint/endpointResolver.js +0 -14
- package/node_modules/@aws-sdk/client-sts/dist-cjs/endpoint/ruleset.js +0 -7
- package/node_modules/@aws-sdk/client-sts/dist-cjs/index.js +0 -1457
- package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeConfig.browser.js +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeConfig.js +0 -63
- package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeConfig.native.js +0 -15
- package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeConfig.shared.js +0 -40
- package/node_modules/@aws-sdk/client-sts/dist-cjs/runtimeExtensions.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/STS.js +0 -23
- package/node_modules/@aws-sdk/client-sts/dist-es/STSClient.js +0 -52
- package/node_modules/@aws-sdk/client-sts/dist-es/auth/httpAuthExtensionConfiguration.js +0 -38
- package/node_modules/@aws-sdk/client-sts/dist-es/auth/httpAuthSchemeProvider.js +0 -60
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/AssumeRoleCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/AssumeRoleWithSAMLCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/AssumeRoleWithWebIdentityCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/DecodeAuthorizationMessageCommand.js +0 -24
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetAccessKeyInfoCommand.js +0 -24
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetCallerIdentityCommand.js +0 -24
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetFederationTokenCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetSessionTokenCommand.js +0 -25
- package/node_modules/@aws-sdk/client-sts/dist-es/commands/index.js +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-es/credentialDefaultProvider.js +0 -3
- package/node_modules/@aws-sdk/client-sts/dist-es/defaultRoleAssumers.js +0 -22
- package/node_modules/@aws-sdk/client-sts/dist-es/defaultStsRoleAssumers.js +0 -67
- package/node_modules/@aws-sdk/client-sts/dist-es/endpoint/EndpointParameters.js +0 -16
- package/node_modules/@aws-sdk/client-sts/dist-es/endpoint/endpointResolver.js +0 -10
- package/node_modules/@aws-sdk/client-sts/dist-es/endpoint/ruleset.js +0 -4
- package/node_modules/@aws-sdk/client-sts/dist-es/extensionConfiguration.js +0 -1
- package/node_modules/@aws-sdk/client-sts/dist-es/index.js +0 -6
- package/node_modules/@aws-sdk/client-sts/dist-es/models/STSServiceException.js +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-es/models/index.js +0 -1
- package/node_modules/@aws-sdk/client-sts/dist-es/models/models_0.js +0 -130
- package/node_modules/@aws-sdk/client-sts/dist-es/protocols/Aws_query.js +0 -885
- package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.browser.js +0 -34
- package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.js +0 -58
- package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.native.js +0 -11
- package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.shared.js +0 -36
- package/node_modules/@aws-sdk/client-sts/dist-es/runtimeExtensions.js +0 -21
- package/node_modules/@aws-sdk/client-sts/dist-types/STS.d.ts +0 -71
- package/node_modules/@aws-sdk/client-sts/dist-types/STSClient.d.ts +0 -182
- package/node_modules/@aws-sdk/client-sts/dist-types/auth/httpAuthExtensionConfiguration.d.ts +0 -29
- package/node_modules/@aws-sdk/client-sts/dist-types/auth/httpAuthSchemeProvider.d.ts +0 -71
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/AssumeRoleCommand.d.ts +0 -257
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/AssumeRoleWithSAMLCommand.d.ts +0 -282
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/AssumeRoleWithWebIdentityCommand.d.ts +0 -291
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/DecodeAuthorizationMessageCommand.d.ts +0 -115
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/GetAccessKeyInfoCommand.d.ts +0 -75
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/GetCallerIdentityCommand.d.ts +0 -116
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/GetFederationTokenCommand.d.ts +0 -230
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/GetSessionTokenCommand.d.ts +0 -154
- package/node_modules/@aws-sdk/client-sts/dist-types/commands/index.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-types/credentialDefaultProvider.d.ts +0 -4
- package/node_modules/@aws-sdk/client-sts/dist-types/defaultRoleAssumers.d.ts +0 -23
- package/node_modules/@aws-sdk/client-sts/dist-types/defaultStsRoleAssumers.d.ts +0 -43
- package/node_modules/@aws-sdk/client-sts/dist-types/endpoint/EndpointParameters.d.ts +0 -46
- package/node_modules/@aws-sdk/client-sts/dist-types/endpoint/endpointResolver.d.ts +0 -5
- package/node_modules/@aws-sdk/client-sts/dist-types/endpoint/ruleset.d.ts +0 -2
- package/node_modules/@aws-sdk/client-sts/dist-types/extensionConfiguration.d.ts +0 -9
- package/node_modules/@aws-sdk/client-sts/dist-types/index.d.ts +0 -17
- package/node_modules/@aws-sdk/client-sts/dist-types/models/STSServiceException.d.ts +0 -13
- package/node_modules/@aws-sdk/client-sts/dist-types/models/index.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sts/dist-types/models/models_0.d.ts +0 -1213
- package/node_modules/@aws-sdk/client-sts/dist-types/protocols/Aws_query.d.ts +0 -74
- package/node_modules/@aws-sdk/client-sts/dist-types/runtimeConfig.browser.d.ts +0 -54
- package/node_modules/@aws-sdk/client-sts/dist-types/runtimeConfig.d.ts +0 -57
- package/node_modules/@aws-sdk/client-sts/dist-types/runtimeConfig.native.d.ts +0 -53
- package/node_modules/@aws-sdk/client-sts/dist-types/runtimeConfig.shared.d.ts +0 -32
- package/node_modules/@aws-sdk/client-sts/dist-types/runtimeExtensions.d.ts +0 -17
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/STS.d.ts +0 -143
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/STSClient.d.ts +0 -165
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/auth/httpAuthExtensionConfiguration.d.ts +0 -32
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/auth/httpAuthSchemeProvider.d.ts +0 -54
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/AssumeRoleCommand.d.ts +0 -35
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/AssumeRoleWithSAMLCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/AssumeRoleWithWebIdentityCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/DecodeAuthorizationMessageCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/GetAccessKeyInfoCommand.d.ts +0 -38
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/GetCallerIdentityCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/GetFederationTokenCommand.d.ts +0 -39
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/GetSessionTokenCommand.d.ts +0 -38
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/commands/index.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/credentialDefaultProvider.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/defaultRoleAssumers.d.ts +0 -19
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/defaultStsRoleAssumers.d.ts +0 -33
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +0 -57
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/endpoint/endpointResolver.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/endpoint/ruleset.d.ts +0 -2
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/extensionConfiguration.d.ts +0 -9
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/index.d.ts +0 -9
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/models/STSServiceException.d.ts +0 -8
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/models/index.d.ts +0 -1
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/models/models_0.d.ts +0 -206
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/protocols/Aws_query.d.ts +0 -101
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.browser.d.ts +0 -116
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.d.ts +0 -117
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.native.d.ts +0 -110
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.shared.d.ts +0 -51
- package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeExtensions.d.ts +0 -11
- package/node_modules/@aws-sdk/client-sts/package.json +0 -104
- package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/loadSts.js +0 -1
- package/node_modules/@aws-sdk/credential-provider-ini/dist-es/loadSts.js +0 -2
- package/node_modules/@aws-sdk/credential-provider-ini/dist-types/loadSts.d.ts +0 -3
- package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/loadSts.d.ts +0 -3
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/loadSts.js +0 -5
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/loadSts.js +0 -2
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-types/loadSts.d.ts +0 -3
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-types/ts3.4/loadSts.d.ts +0 -3
- package/node_modules/@aws-sdk/token-providers/dist-cjs/loadSsoOidc.js +0 -1
- package/node_modules/@aws-sdk/token-providers/dist-es/loadSsoOidc.js +0 -2
- package/node_modules/@aws-sdk/token-providers/dist-types/loadSsoOidc.d.ts +0 -2
- package/node_modules/@aws-sdk/token-providers/dist-types/ts3.4/loadSsoOidc.d.ts +0 -2
@@ -1,230 +0,0 @@
|
|
1
|
-
import { Command as $Command } from "@smithy/smithy-client";
|
2
|
-
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
3
|
-
import { GetFederationTokenRequest, GetFederationTokenResponse } from "../models/models_0";
|
4
|
-
import { ServiceInputTypes, ServiceOutputTypes, STSClientResolvedConfig } from "../STSClient";
|
5
|
-
/**
|
6
|
-
* @public
|
7
|
-
*/
|
8
|
-
export { __MetadataBearer, $Command };
|
9
|
-
/**
|
10
|
-
* @public
|
11
|
-
*
|
12
|
-
* The input for {@link GetFederationTokenCommand}.
|
13
|
-
*/
|
14
|
-
export interface GetFederationTokenCommandInput extends GetFederationTokenRequest {
|
15
|
-
}
|
16
|
-
/**
|
17
|
-
* @public
|
18
|
-
*
|
19
|
-
* The output of {@link GetFederationTokenCommand}.
|
20
|
-
*/
|
21
|
-
export interface GetFederationTokenCommandOutput extends GetFederationTokenResponse, __MetadataBearer {
|
22
|
-
}
|
23
|
-
declare const GetFederationTokenCommand_base: {
|
24
|
-
new (input: GetFederationTokenCommandInput): import("@smithy/smithy-client").CommandImpl<GetFederationTokenCommandInput, GetFederationTokenCommandOutput, STSClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
|
25
|
-
new (__0_0: GetFederationTokenCommandInput): import("@smithy/smithy-client").CommandImpl<GetFederationTokenCommandInput, GetFederationTokenCommandOutput, STSClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
|
26
|
-
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
27
|
-
};
|
28
|
-
/**
|
29
|
-
* <p>Returns a set of temporary security credentials (consisting of an access key ID, a
|
30
|
-
* secret access key, and a security token) for a user. A typical use is in a proxy
|
31
|
-
* application that gets temporary security credentials on behalf of distributed applications
|
32
|
-
* inside a corporate network.</p>
|
33
|
-
* <p>You must call the <code>GetFederationToken</code> operation using the long-term security
|
34
|
-
* credentials of an IAM user. As a result, this call is appropriate in
|
35
|
-
* contexts where those credentials can be safeguarded, usually in a server-based application.
|
36
|
-
* For a comparison of <code>GetFederationToken</code> with the other API operations that
|
37
|
-
* produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security
|
38
|
-
* Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
|
39
|
-
* Amazon Web Services STS API operations</a> in the <i>IAM User Guide</i>.</p>
|
40
|
-
* <p>Although it is possible to call <code>GetFederationToken</code> using the security
|
41
|
-
* credentials of an Amazon Web Services account root user rather than an IAM user that you
|
42
|
-
* create for the purpose of a proxy application, we do not recommend it. For more
|
43
|
-
* information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#lock-away-credentials">Safeguard your root user credentials and don't use them for everyday tasks</a> in the
|
44
|
-
* <i>IAM User Guide</i>. </p>
|
45
|
-
* <note>
|
46
|
-
* <p>You can create a mobile-based or browser-based app that can authenticate users using
|
47
|
-
* a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
|
48
|
-
* Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
|
49
|
-
* <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
|
50
|
-
* <i>IAM User Guide</i>.</p>
|
51
|
-
* </note>
|
52
|
-
* <p>
|
53
|
-
* <b>Session duration</b>
|
54
|
-
* </p>
|
55
|
-
* <p>The temporary credentials are valid for the specified duration, from 900 seconds (15
|
56
|
-
* minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is
|
57
|
-
* 43,200 seconds (12 hours). Temporary credentials obtained by using the root user
|
58
|
-
* credentials have a maximum duration of 3,600 seconds (1 hour).</p>
|
59
|
-
* <p>
|
60
|
-
* <b>Permissions</b>
|
61
|
-
* </p>
|
62
|
-
* <p>You can use the temporary credentials created by <code>GetFederationToken</code> in any
|
63
|
-
* Amazon Web Services service with the following exceptions:</p>
|
64
|
-
* <ul>
|
65
|
-
* <li>
|
66
|
-
* <p>You cannot call any IAM operations using the CLI or the Amazon Web Services API. This
|
67
|
-
* limitation does not apply to console sessions.</p>
|
68
|
-
* </li>
|
69
|
-
* <li>
|
70
|
-
* <p>You cannot call any STS operations except <code>GetCallerIdentity</code>.</p>
|
71
|
-
* </li>
|
72
|
-
* </ul>
|
73
|
-
* <p>You can use temporary credentials for single sign-on (SSO) to the console.</p>
|
74
|
-
* <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
|
75
|
-
* this operation. You can pass a single JSON policy document to use as an inline session
|
76
|
-
* policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as
|
77
|
-
* managed session policies. The plaintext that you use for both inline and managed session
|
78
|
-
* policies can't exceed 2,048 characters.</p>
|
79
|
-
* <p>Though the session policy parameters are optional, if you do not pass a policy, then the
|
80
|
-
* resulting federated user session has no permissions. When you pass session policies, the
|
81
|
-
* session permissions are the intersection of the IAM user policies and the
|
82
|
-
* session policies that you pass. This gives you a way to further restrict the permissions
|
83
|
-
* for a federated user. You cannot use session policies to grant more permissions than those
|
84
|
-
* that are defined in the permissions policy of the IAM user. For more
|
85
|
-
* information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in
|
86
|
-
* the <i>IAM User Guide</i>. For information about using
|
87
|
-
* <code>GetFederationToken</code> to create temporary security credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken">GetFederationToken—Federation Through a Custom Identity Broker</a>. </p>
|
88
|
-
* <p>You can use the credentials to access a resource that has a resource-based policy. If
|
89
|
-
* that policy specifically references the federated user session in the
|
90
|
-
* <code>Principal</code> element of the policy, the session has the permissions allowed by
|
91
|
-
* the policy. These permissions are granted in addition to the permissions granted by the
|
92
|
-
* session policies.</p>
|
93
|
-
* <p>
|
94
|
-
* <b>Tags</b>
|
95
|
-
* </p>
|
96
|
-
* <p>(Optional) You can pass tag key-value pairs to your session. These are called session
|
97
|
-
* tags. For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
|
98
|
-
* <i>IAM User Guide</i>.</p>
|
99
|
-
* <note>
|
100
|
-
* <p>You can create a mobile-based or browser-based app that can authenticate users using
|
101
|
-
* a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
|
102
|
-
* Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
|
103
|
-
* <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
|
104
|
-
* <i>IAM User Guide</i>.</p>
|
105
|
-
* </note>
|
106
|
-
* <p>An administrator must grant you the permissions necessary to pass session tags. The
|
107
|
-
* administrator can also create granular permissions to allow you to pass only specific
|
108
|
-
* session tags. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_attribute-based-access-control.html">Tutorial: Using Tags
|
109
|
-
* for Attribute-Based Access Control</a> in the
|
110
|
-
* <i>IAM User Guide</i>.</p>
|
111
|
-
* <p>Tag key–value pairs are not case sensitive, but case is preserved. This means that you
|
112
|
-
* cannot have separate <code>Department</code> and <code>department</code> tag keys. Assume
|
113
|
-
* that the user that you are federating has the
|
114
|
-
* <code>Department</code>=<code>Marketing</code> tag and you pass the
|
115
|
-
* <code>department</code>=<code>engineering</code> session tag. <code>Department</code>
|
116
|
-
* and <code>department</code> are not saved as separate tags, and the session tag passed in
|
117
|
-
* the request takes precedence over the user tag.</p>
|
118
|
-
* @example
|
119
|
-
* Use a bare-bones client and the command you need to make an API call.
|
120
|
-
* ```javascript
|
121
|
-
* import { STSClient, GetFederationTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
|
122
|
-
* // const { STSClient, GetFederationTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
|
123
|
-
* const client = new STSClient(config);
|
124
|
-
* const input = { // GetFederationTokenRequest
|
125
|
-
* Name: "STRING_VALUE", // required
|
126
|
-
* Policy: "STRING_VALUE",
|
127
|
-
* PolicyArns: [ // policyDescriptorListType
|
128
|
-
* { // PolicyDescriptorType
|
129
|
-
* arn: "STRING_VALUE",
|
130
|
-
* },
|
131
|
-
* ],
|
132
|
-
* DurationSeconds: Number("int"),
|
133
|
-
* Tags: [ // tagListType
|
134
|
-
* { // Tag
|
135
|
-
* Key: "STRING_VALUE", // required
|
136
|
-
* Value: "STRING_VALUE", // required
|
137
|
-
* },
|
138
|
-
* ],
|
139
|
-
* };
|
140
|
-
* const command = new GetFederationTokenCommand(input);
|
141
|
-
* const response = await client.send(command);
|
142
|
-
* // { // GetFederationTokenResponse
|
143
|
-
* // Credentials: { // Credentials
|
144
|
-
* // AccessKeyId: "STRING_VALUE", // required
|
145
|
-
* // SecretAccessKey: "STRING_VALUE", // required
|
146
|
-
* // SessionToken: "STRING_VALUE", // required
|
147
|
-
* // Expiration: new Date("TIMESTAMP"), // required
|
148
|
-
* // },
|
149
|
-
* // FederatedUser: { // FederatedUser
|
150
|
-
* // FederatedUserId: "STRING_VALUE", // required
|
151
|
-
* // Arn: "STRING_VALUE", // required
|
152
|
-
* // },
|
153
|
-
* // PackedPolicySize: Number("int"),
|
154
|
-
* // };
|
155
|
-
*
|
156
|
-
* ```
|
157
|
-
*
|
158
|
-
* @param GetFederationTokenCommandInput - {@link GetFederationTokenCommandInput}
|
159
|
-
* @returns {@link GetFederationTokenCommandOutput}
|
160
|
-
* @see {@link GetFederationTokenCommandInput} for command's `input` shape.
|
161
|
-
* @see {@link GetFederationTokenCommandOutput} for command's `response` shape.
|
162
|
-
* @see {@link STSClientResolvedConfig | config} for STSClient's `config` shape.
|
163
|
-
*
|
164
|
-
* @throws {@link MalformedPolicyDocumentException} (client fault)
|
165
|
-
* <p>The request was rejected because the policy document was malformed. The error message
|
166
|
-
* describes the specific error.</p>
|
167
|
-
*
|
168
|
-
* @throws {@link PackedPolicyTooLargeException} (client fault)
|
169
|
-
* <p>The request was rejected because the total packed size of the session policies and
|
170
|
-
* session tags combined was too large. An Amazon Web Services conversion compresses the session policy
|
171
|
-
* document, session policy ARNs, and session tags into a packed binary format that has a
|
172
|
-
* separate limit. The error message indicates by percentage how close the policies and
|
173
|
-
* tags are to the upper size limit. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in
|
174
|
-
* the <i>IAM User Guide</i>.</p>
|
175
|
-
* <p>You could receive this error even though you meet other defined session policy and
|
176
|
-
* session tag limits. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length">IAM and STS Entity
|
177
|
-
* Character Limits</a> in the <i>IAM User Guide</i>.</p>
|
178
|
-
*
|
179
|
-
* @throws {@link RegionDisabledException} (client fault)
|
180
|
-
* <p>STS is not activated in the requested region for the account that is being asked to
|
181
|
-
* generate credentials. The account administrator must use the IAM console to activate STS
|
182
|
-
* in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
|
183
|
-
* Deactivating Amazon Web Services STS in an Amazon Web Services Region</a> in the <i>IAM User
|
184
|
-
* Guide</i>.</p>
|
185
|
-
*
|
186
|
-
* @throws {@link STSServiceException}
|
187
|
-
* <p>Base exception class for all service exceptions from STS service.</p>
|
188
|
-
*
|
189
|
-
* @public
|
190
|
-
* @example To get temporary credentials for a role by using GetFederationToken
|
191
|
-
* ```javascript
|
192
|
-
* //
|
193
|
-
* const input = {
|
194
|
-
* "DurationSeconds": 3600,
|
195
|
-
* "Name": "testFedUserSession",
|
196
|
-
* "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:ListAllMyBuckets\",\"Resource\":\"*\"}]}",
|
197
|
-
* "Tags": [
|
198
|
-
* {
|
199
|
-
* "Key": "Project",
|
200
|
-
* "Value": "Pegasus"
|
201
|
-
* },
|
202
|
-
* {
|
203
|
-
* "Key": "Cost-Center",
|
204
|
-
* "Value": "98765"
|
205
|
-
* }
|
206
|
-
* ]
|
207
|
-
* };
|
208
|
-
* const command = new GetFederationTokenCommand(input);
|
209
|
-
* const response = await client.send(command);
|
210
|
-
* /* response ==
|
211
|
-
* {
|
212
|
-
* "Credentials": {
|
213
|
-
* "AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
214
|
-
* "Expiration": "2011-07-15T23:28:33.359Z",
|
215
|
-
* "SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
216
|
-
* "SessionToken": "AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQWLWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGdQrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz+scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA=="
|
217
|
-
* },
|
218
|
-
* "FederatedUser": {
|
219
|
-
* "Arn": "arn:aws:sts::123456789012:federated-user/Bob",
|
220
|
-
* "FederatedUserId": "123456789012:Bob"
|
221
|
-
* },
|
222
|
-
* "PackedPolicySize": 8
|
223
|
-
* }
|
224
|
-
* *\/
|
225
|
-
* // example id: to-get-temporary-credentials-for-a-role-by-using-getfederationtoken-1480540749900
|
226
|
-
* ```
|
227
|
-
*
|
228
|
-
*/
|
229
|
-
export declare class GetFederationTokenCommand extends GetFederationTokenCommand_base {
|
230
|
-
}
|
@@ -1,154 +0,0 @@
|
|
1
|
-
import { Command as $Command } from "@smithy/smithy-client";
|
2
|
-
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
3
|
-
import { GetSessionTokenRequest, GetSessionTokenResponse } from "../models/models_0";
|
4
|
-
import { ServiceInputTypes, ServiceOutputTypes, STSClientResolvedConfig } from "../STSClient";
|
5
|
-
/**
|
6
|
-
* @public
|
7
|
-
*/
|
8
|
-
export { __MetadataBearer, $Command };
|
9
|
-
/**
|
10
|
-
* @public
|
11
|
-
*
|
12
|
-
* The input for {@link GetSessionTokenCommand}.
|
13
|
-
*/
|
14
|
-
export interface GetSessionTokenCommandInput extends GetSessionTokenRequest {
|
15
|
-
}
|
16
|
-
/**
|
17
|
-
* @public
|
18
|
-
*
|
19
|
-
* The output of {@link GetSessionTokenCommand}.
|
20
|
-
*/
|
21
|
-
export interface GetSessionTokenCommandOutput extends GetSessionTokenResponse, __MetadataBearer {
|
22
|
-
}
|
23
|
-
declare const GetSessionTokenCommand_base: {
|
24
|
-
new (input: GetSessionTokenCommandInput): import("@smithy/smithy-client").CommandImpl<GetSessionTokenCommandInput, GetSessionTokenCommandOutput, STSClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
|
25
|
-
new (...[input]: [] | [GetSessionTokenCommandInput]): import("@smithy/smithy-client").CommandImpl<GetSessionTokenCommandInput, GetSessionTokenCommandOutput, STSClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
|
26
|
-
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
27
|
-
};
|
28
|
-
/**
|
29
|
-
* <p>Returns a set of temporary credentials for an Amazon Web Services account or IAM user.
|
30
|
-
* The credentials consist of an access key ID, a secret access key, and a security token.
|
31
|
-
* Typically, you use <code>GetSessionToken</code> if you want to use MFA to protect
|
32
|
-
* programmatic calls to specific Amazon Web Services API operations like Amazon EC2
|
33
|
-
* <code>StopInstances</code>.</p>
|
34
|
-
* <p>MFA-enabled IAM users must call <code>GetSessionToken</code> and submit
|
35
|
-
* an MFA code that is associated with their MFA device. Using the temporary security
|
36
|
-
* credentials that the call returns, IAM users can then make programmatic
|
37
|
-
* calls to API operations that require MFA authentication. An incorrect MFA code causes the
|
38
|
-
* API to return an access denied error. For a comparison of <code>GetSessionToken</code> with
|
39
|
-
* the other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting
|
40
|
-
* Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
|
41
|
-
* Amazon Web Services STS API operations</a> in the <i>IAM User Guide</i>.</p>
|
42
|
-
* <note>
|
43
|
-
* <p>No permissions are required for users to perform this operation. The purpose of the
|
44
|
-
* <code>sts:GetSessionToken</code> operation is to authenticate the user using MFA. You
|
45
|
-
* cannot use policies to control authentication operations. For more information, see
|
46
|
-
* <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_getsessiontoken.html">Permissions for GetSessionToken</a> in the
|
47
|
-
* <i>IAM User Guide</i>.</p>
|
48
|
-
* </note>
|
49
|
-
* <p>
|
50
|
-
* <b>Session Duration</b>
|
51
|
-
* </p>
|
52
|
-
* <p>The <code>GetSessionToken</code> operation must be called by using the long-term Amazon Web Services
|
53
|
-
* security credentials of an IAM user. Credentials that are created by IAM users are valid for the duration that you specify. This duration can range
|
54
|
-
* from 900 seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours), with a default
|
55
|
-
* of 43,200 seconds (12 hours). Credentials based on account credentials can range from 900
|
56
|
-
* seconds (15 minutes) up to 3,600 seconds (1 hour), with a default of 1 hour. </p>
|
57
|
-
* <p>
|
58
|
-
* <b>Permissions</b>
|
59
|
-
* </p>
|
60
|
-
* <p>The temporary security credentials created by <code>GetSessionToken</code> can be used
|
61
|
-
* to make API calls to any Amazon Web Services service with the following exceptions:</p>
|
62
|
-
* <ul>
|
63
|
-
* <li>
|
64
|
-
* <p>You cannot call any IAM API operations unless MFA authentication information is
|
65
|
-
* included in the request.</p>
|
66
|
-
* </li>
|
67
|
-
* <li>
|
68
|
-
* <p>You cannot call any STS API <i>except</i>
|
69
|
-
* <code>AssumeRole</code> or <code>GetCallerIdentity</code>.</p>
|
70
|
-
* </li>
|
71
|
-
* </ul>
|
72
|
-
* <p>The credentials that <code>GetSessionToken</code> returns are based on permissions
|
73
|
-
* associated with the IAM user whose credentials were used to call the
|
74
|
-
* operation. The temporary credentials have the same permissions as the IAM user.</p>
|
75
|
-
* <note>
|
76
|
-
* <p>Although it is possible to call <code>GetSessionToken</code> using the security
|
77
|
-
* credentials of an Amazon Web Services account root user rather than an IAM user, we do
|
78
|
-
* not recommend it. If <code>GetSessionToken</code> is called using root user
|
79
|
-
* credentials, the temporary credentials have root user permissions. For more
|
80
|
-
* information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#lock-away-credentials">Safeguard your root user credentials and don't use them for everyday tasks</a> in the
|
81
|
-
* <i>IAM User Guide</i>
|
82
|
-
* </p>
|
83
|
-
* </note>
|
84
|
-
* <p>For more information about using <code>GetSessionToken</code> to create temporary
|
85
|
-
* credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getsessiontoken">Temporary
|
86
|
-
* Credentials for Users in Untrusted Environments</a> in the
|
87
|
-
* <i>IAM User Guide</i>. </p>
|
88
|
-
* @example
|
89
|
-
* Use a bare-bones client and the command you need to make an API call.
|
90
|
-
* ```javascript
|
91
|
-
* import { STSClient, GetSessionTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
|
92
|
-
* // const { STSClient, GetSessionTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
|
93
|
-
* const client = new STSClient(config);
|
94
|
-
* const input = { // GetSessionTokenRequest
|
95
|
-
* DurationSeconds: Number("int"),
|
96
|
-
* SerialNumber: "STRING_VALUE",
|
97
|
-
* TokenCode: "STRING_VALUE",
|
98
|
-
* };
|
99
|
-
* const command = new GetSessionTokenCommand(input);
|
100
|
-
* const response = await client.send(command);
|
101
|
-
* // { // GetSessionTokenResponse
|
102
|
-
* // Credentials: { // Credentials
|
103
|
-
* // AccessKeyId: "STRING_VALUE", // required
|
104
|
-
* // SecretAccessKey: "STRING_VALUE", // required
|
105
|
-
* // SessionToken: "STRING_VALUE", // required
|
106
|
-
* // Expiration: new Date("TIMESTAMP"), // required
|
107
|
-
* // },
|
108
|
-
* // };
|
109
|
-
*
|
110
|
-
* ```
|
111
|
-
*
|
112
|
-
* @param GetSessionTokenCommandInput - {@link GetSessionTokenCommandInput}
|
113
|
-
* @returns {@link GetSessionTokenCommandOutput}
|
114
|
-
* @see {@link GetSessionTokenCommandInput} for command's `input` shape.
|
115
|
-
* @see {@link GetSessionTokenCommandOutput} for command's `response` shape.
|
116
|
-
* @see {@link STSClientResolvedConfig | config} for STSClient's `config` shape.
|
117
|
-
*
|
118
|
-
* @throws {@link RegionDisabledException} (client fault)
|
119
|
-
* <p>STS is not activated in the requested region for the account that is being asked to
|
120
|
-
* generate credentials. The account administrator must use the IAM console to activate STS
|
121
|
-
* in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
|
122
|
-
* Deactivating Amazon Web Services STS in an Amazon Web Services Region</a> in the <i>IAM User
|
123
|
-
* Guide</i>.</p>
|
124
|
-
*
|
125
|
-
* @throws {@link STSServiceException}
|
126
|
-
* <p>Base exception class for all service exceptions from STS service.</p>
|
127
|
-
*
|
128
|
-
* @public
|
129
|
-
* @example To get temporary credentials for an IAM user or an AWS account
|
130
|
-
* ```javascript
|
131
|
-
* //
|
132
|
-
* const input = {
|
133
|
-
* "DurationSeconds": 3600,
|
134
|
-
* "SerialNumber": "YourMFASerialNumber",
|
135
|
-
* "TokenCode": "123456"
|
136
|
-
* };
|
137
|
-
* const command = new GetSessionTokenCommand(input);
|
138
|
-
* const response = await client.send(command);
|
139
|
-
* /* response ==
|
140
|
-
* {
|
141
|
-
* "Credentials": {
|
142
|
-
* "AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
143
|
-
* "Expiration": "2011-07-11T19:55:29.611Z",
|
144
|
-
* "SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
145
|
-
* "SessionToken": "AQoEXAMPLEH4aoAH0gNCAPyJxz4BlCFFxWNE1OPTgk5TthT+FvwqnKwRcOIfrRh3c/LTo6UDdyJwOOvEVPvLXCrrrUtdnniCEXAMPLE/IvU1dYUg2RVAJBanLiHb4IgRmpRV3zrkuWJOgQs8IZZaIv2BXIa2R4OlgkBN9bkUDNCJiBeb/AXlzBBko7b15fjrBs2+cTQtpZ3CYWFXG8C5zqx37wnOE49mRl/+OtkIKGO7fAE"
|
146
|
-
* }
|
147
|
-
* }
|
148
|
-
* *\/
|
149
|
-
* // example id: to-get-temporary-credentials-for-an-iam-user-or-an-aws-account-1480540814038
|
150
|
-
* ```
|
151
|
-
*
|
152
|
-
*/
|
153
|
-
export declare class GetSessionTokenCommand extends GetSessionTokenCommand_base {
|
154
|
-
}
|
@@ -1,8 +0,0 @@
|
|
1
|
-
export * from "./AssumeRoleCommand";
|
2
|
-
export * from "./AssumeRoleWithSAMLCommand";
|
3
|
-
export * from "./AssumeRoleWithWebIdentityCommand";
|
4
|
-
export * from "./DecodeAuthorizationMessageCommand";
|
5
|
-
export * from "./GetAccessKeyInfoCommand";
|
6
|
-
export * from "./GetCallerIdentityCommand";
|
7
|
-
export * from "./GetFederationTokenCommand";
|
8
|
-
export * from "./GetSessionTokenCommand";
|
@@ -1,23 +0,0 @@
|
|
1
|
-
import { Pluggable } from "@smithy/types";
|
2
|
-
import { DefaultCredentialProvider, RoleAssumer, RoleAssumerWithWebIdentity, STSRoleAssumerOptions } from "./defaultStsRoleAssumers";
|
3
|
-
import { ServiceInputTypes, ServiceOutputTypes } from "./STSClient";
|
4
|
-
/**
|
5
|
-
* The default role assumer that used by credential providers when sts:AssumeRole API is needed.
|
6
|
-
*/
|
7
|
-
export declare const getDefaultRoleAssumer: (stsOptions?: STSRoleAssumerOptions, stsPlugins?: Pluggable<ServiceInputTypes, ServiceOutputTypes>[]) => RoleAssumer;
|
8
|
-
/**
|
9
|
-
* The default role assumer that used by credential providers when sts:AssumeRoleWithWebIdentity API is needed.
|
10
|
-
*/
|
11
|
-
export declare const getDefaultRoleAssumerWithWebIdentity: (stsOptions?: STSRoleAssumerOptions, stsPlugins?: Pluggable<ServiceInputTypes, ServiceOutputTypes>[]) => RoleAssumerWithWebIdentity;
|
12
|
-
/**
|
13
|
-
* The default credential providers depend STS client to assume role with desired API: sts:assumeRole,
|
14
|
-
* sts:assumeRoleWithWebIdentity, etc. This function decorates the default credential provider with role assumers which
|
15
|
-
* encapsulates the process of calling STS commands. This can only be imported by AWS client packages to avoid circular
|
16
|
-
* dependencies.
|
17
|
-
*
|
18
|
-
* @internal
|
19
|
-
*
|
20
|
-
* @deprecated this is no longer needed. Use the defaultProvider directly,
|
21
|
-
* which will load STS if needed.
|
22
|
-
*/
|
23
|
-
export declare const decorateDefaultCredentialProvider: (provider: DefaultCredentialProvider) => DefaultCredentialProvider;
|
@@ -1,43 +0,0 @@
|
|
1
|
-
import type { CredentialProviderOptions } from "@aws-sdk/types";
|
2
|
-
import { AwsCredentialIdentity, Logger, Provider } from "@smithy/types";
|
3
|
-
import { AssumeRoleCommandInput } from "./commands/AssumeRoleCommand";
|
4
|
-
import { AssumeRoleWithWebIdentityCommandInput } from "./commands/AssumeRoleWithWebIdentityCommand";
|
5
|
-
import type { STSClient, STSClientConfig } from "./STSClient";
|
6
|
-
/**
|
7
|
-
* @public
|
8
|
-
*/
|
9
|
-
export type STSRoleAssumerOptions = Pick<STSClientConfig, "logger" | "region" | "requestHandler"> & {
|
10
|
-
credentialProviderLogger?: Logger;
|
11
|
-
parentClientConfig?: CredentialProviderOptions["parentClientConfig"];
|
12
|
-
};
|
13
|
-
/**
|
14
|
-
* @internal
|
15
|
-
*/
|
16
|
-
export type RoleAssumer = (sourceCreds: AwsCredentialIdentity, params: AssumeRoleCommandInput) => Promise<AwsCredentialIdentity>;
|
17
|
-
/**
|
18
|
-
* The default role assumer that used by credential providers when sts:AssumeRole API is needed.
|
19
|
-
* @internal
|
20
|
-
*/
|
21
|
-
export declare const getDefaultRoleAssumer: (stsOptions: STSRoleAssumerOptions, stsClientCtor: new (options: STSClientConfig) => STSClient) => RoleAssumer;
|
22
|
-
/**
|
23
|
-
* @internal
|
24
|
-
*/
|
25
|
-
export type RoleAssumerWithWebIdentity = (params: AssumeRoleWithWebIdentityCommandInput) => Promise<AwsCredentialIdentity>;
|
26
|
-
/**
|
27
|
-
* The default role assumer that used by credential providers when sts:AssumeRoleWithWebIdentity API is needed.
|
28
|
-
* @internal
|
29
|
-
*/
|
30
|
-
export declare const getDefaultRoleAssumerWithWebIdentity: (stsOptions: STSRoleAssumerOptions, stsClientCtor: new (options: STSClientConfig) => STSClient) => RoleAssumerWithWebIdentity;
|
31
|
-
/**
|
32
|
-
* @internal
|
33
|
-
*/
|
34
|
-
export type DefaultCredentialProvider = (input: any) => Provider<AwsCredentialIdentity>;
|
35
|
-
/**
|
36
|
-
* The default credential providers depend STS client to assume role with desired API: sts:assumeRole,
|
37
|
-
* sts:assumeRoleWithWebIdentity, etc. This function decorates the default credential provider with role assumers which
|
38
|
-
* encapsulates the process of calling STS commands. This can only be imported by AWS client packages to avoid circular
|
39
|
-
* dependencies.
|
40
|
-
*
|
41
|
-
* @internal
|
42
|
-
*/
|
43
|
-
export declare const decorateDefaultCredentialProvider: (provider: DefaultCredentialProvider) => DefaultCredentialProvider;
|
@@ -1,46 +0,0 @@
|
|
1
|
-
import { Endpoint, EndpointParameters as __EndpointParameters, EndpointV2, Provider } from "@smithy/types";
|
2
|
-
/**
|
3
|
-
* @public
|
4
|
-
*/
|
5
|
-
export interface ClientInputEndpointParameters {
|
6
|
-
region?: string | Provider<string>;
|
7
|
-
useDualstackEndpoint?: boolean | Provider<boolean>;
|
8
|
-
useFipsEndpoint?: boolean | Provider<boolean>;
|
9
|
-
endpoint?: string | Provider<string> | Endpoint | Provider<Endpoint> | EndpointV2 | Provider<EndpointV2>;
|
10
|
-
useGlobalEndpoint?: boolean | Provider<boolean>;
|
11
|
-
}
|
12
|
-
export type ClientResolvedEndpointParameters = ClientInputEndpointParameters & {
|
13
|
-
defaultSigningName: string;
|
14
|
-
};
|
15
|
-
export declare const resolveClientEndpointParameters: <T>(options: T & ClientInputEndpointParameters) => T & ClientInputEndpointParameters & {
|
16
|
-
defaultSigningName: string;
|
17
|
-
};
|
18
|
-
export declare const commonParams: {
|
19
|
-
readonly UseGlobalEndpoint: {
|
20
|
-
readonly type: "builtInParams";
|
21
|
-
readonly name: "useGlobalEndpoint";
|
22
|
-
};
|
23
|
-
readonly UseFIPS: {
|
24
|
-
readonly type: "builtInParams";
|
25
|
-
readonly name: "useFipsEndpoint";
|
26
|
-
};
|
27
|
-
readonly Endpoint: {
|
28
|
-
readonly type: "builtInParams";
|
29
|
-
readonly name: "endpoint";
|
30
|
-
};
|
31
|
-
readonly Region: {
|
32
|
-
readonly type: "builtInParams";
|
33
|
-
readonly name: "region";
|
34
|
-
};
|
35
|
-
readonly UseDualStack: {
|
36
|
-
readonly type: "builtInParams";
|
37
|
-
readonly name: "useDualstackEndpoint";
|
38
|
-
};
|
39
|
-
};
|
40
|
-
export interface EndpointParameters extends __EndpointParameters {
|
41
|
-
Region?: string;
|
42
|
-
UseDualStack?: boolean;
|
43
|
-
UseFIPS?: boolean;
|
44
|
-
Endpoint?: string;
|
45
|
-
UseGlobalEndpoint?: boolean;
|
46
|
-
}
|
@@ -1,9 +0,0 @@
|
|
1
|
-
import { AwsRegionExtensionConfiguration } from "@aws-sdk/types";
|
2
|
-
import { HttpHandlerExtensionConfiguration } from "@smithy/protocol-http";
|
3
|
-
import { DefaultExtensionConfiguration } from "@smithy/types";
|
4
|
-
import { HttpAuthExtensionConfiguration } from "./auth/httpAuthExtensionConfiguration";
|
5
|
-
/**
|
6
|
-
* @internal
|
7
|
-
*/
|
8
|
-
export interface STSExtensionConfiguration extends HttpHandlerExtensionConfiguration, DefaultExtensionConfiguration, AwsRegionExtensionConfiguration, HttpAuthExtensionConfiguration {
|
9
|
-
}
|
@@ -1,17 +0,0 @@
|
|
1
|
-
/**
|
2
|
-
* <fullname>Security Token Service</fullname>
|
3
|
-
* <p>Security Token Service (STS) enables you to request temporary, limited-privilege
|
4
|
-
* credentials for users. This guide provides descriptions of the STS API. For
|
5
|
-
* more information about using this service, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary Security Credentials</a>.</p>
|
6
|
-
*
|
7
|
-
* @packageDocumentation
|
8
|
-
*/
|
9
|
-
export * from "./STSClient";
|
10
|
-
export * from "./STS";
|
11
|
-
export { ClientInputEndpointParameters } from "./endpoint/EndpointParameters";
|
12
|
-
export { RuntimeExtension } from "./runtimeExtensions";
|
13
|
-
export { STSExtensionConfiguration } from "./extensionConfiguration";
|
14
|
-
export * from "./commands";
|
15
|
-
export * from "./models";
|
16
|
-
export * from "./defaultRoleAssumers";
|
17
|
-
export { STSServiceException } from "./models/STSServiceException";
|
@@ -1,13 +0,0 @@
|
|
1
|
-
import { ServiceException as __ServiceException, ServiceExceptionOptions as __ServiceExceptionOptions } from "@smithy/smithy-client";
|
2
|
-
export { __ServiceException, __ServiceExceptionOptions };
|
3
|
-
/**
|
4
|
-
* @public
|
5
|
-
*
|
6
|
-
* Base exception class for all service exceptions from STS service.
|
7
|
-
*/
|
8
|
-
export declare class STSServiceException extends __ServiceException {
|
9
|
-
/**
|
10
|
-
* @internal
|
11
|
-
*/
|
12
|
-
constructor(options: __ServiceExceptionOptions);
|
13
|
-
}
|
@@ -1 +0,0 @@
|
|
1
|
-
export * from "./models_0";
|