@cdklabs/cdk-construct-connect-datalake 0.0.18 → 0.0.20

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/endpoint/bdd.js

@@ -1,52 +1,55 @@
 import { BinaryDecisionDiagram } from "@smithy/core/endpoints";
-const p = "ref";
-const a = -1, b = true, c = "isSet", d = "booleanEquals", e = "PartitionResult", f = "stringEquals", g = "getAttr", h = "https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}", i = { [p]: "Endpoint" }, j = { "fn": g, "argv": [{ [p]: e }, "name"] }, k = { [p]: e }, l = { [p]: "Region" }, m = { "authSchemes": [{ "name": "sigv4", "signingName": "signin", "signingRegion": "{Region}" }] }, n = {}, o = [l];
+const s = "ref";
+const a = -1, b = false, c = true, d = "isSet", e = "booleanEquals", f = "coalesce", g = "PartitionResult", h = "stringEquals", i = "getAttr", j = "https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}", k = { [s]: "Endpoint" }, l = { "fn": i, "argv": [{ [s]: g }, "name"] }, m = { [s]: "Region" }, n = { [s]: g }, o = { "authSchemes": [{ "name": "sigv4", "signingName": "signin", "signingRegion": "{Region}" }] }, p = {}, q = [m];
 const _data = {
     conditions: [
-        [c, o],
-        [d, [{ fn: "coalesce", argv: [{ [p]: "IsControlPlane" }, false] }, b]],
-        [c, [i]],
-        ["aws.partition", o, e],
-        [d, [{ [p]: "UseFIPS" }, b]],
-        [d, [{ [p]: "UseDualStack" }, b]],
-        [f, [j, "aws"]],
-        [f, [j, "aws-cn"]],
-        [d, [{ fn: g, argv: [k, "supportsDualStack"] }, b]],
-        [f, [l, "us-gov-west-1"]],
-        [f, [j, "aws-us-gov"]],
-        [d, [{ fn: g, argv: [k, "supportsFIPS"] }, b]],
-        [f, [j, "aws-iso"]],
-        [f, [j, "aws-iso-b"]],
-        [f, [j, "aws-iso-f"]],
-        [f, [j, "aws-iso-e"]],
-        [f, [j, "aws-eusc"]]
+        [d, q],
+        [e, [{ fn: f, argv: [{ [s]: "IsControlPlane" }, b] }, c]],
+        [d, [k]],
+        ["aws.partition", q, g],
+        [e, [{ [s]: "UseFIPS" }, c]],
+        [h, [l, "aws"]],
+        [e, [{ fn: f, argv: [{ [s]: "IsOAuthEndpoint" }, b] }, c]],
+        [e, [{ [s]: "UseDualStack" }, c]],
+        [h, [l, "aws-cn"]],
+        [h, [m, "us-gov-west-1"]],
+        [h, [l, "aws-us-gov"]],
+        [e, [{ fn: i, argv: [n, "supportsFIPS"] }, c]],
+        [h, [l, "aws-iso"]],
+        [h, [l, "aws-iso-b"]],
+        [h, [l, "aws-iso-f"]],
+        [h, [l, "aws-iso-e"]],
+        [h, [l, "aws-eusc"]],
+        [e, [{ fn: i, argv: [n, "supportsDualStack"] }, c]]
     ],
     results: [
         [a],
-        ["https://signin.{Region}.api.aws", m],
-        ["https://signin.{Region}.api.amazonwebservices.com.cn", m],
-        [h, m],
-        ["https://{Region}.signin.aws.amazon.com", n],
-        ["https://{Region}.signin.amazonaws.cn", n],
-        ["https://{Region}.signin.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin.c2shome.ic.gov", n],
-        ["https://{Region}.signin.sc2shome.sgov.gov", n],
-        ["https://{Region}.signin.csphome.hci.ic.gov", n],
-        ["https://{Region}.signin.csphome.adc-e.uk", n],
-        ["https://{Region}.signin.amazonaws-eusc.eu", n],
-        ["https://signin-fips.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin-fips.amazonaws-us-gov.com", n],
-        ["https://{Region}.signin.{PartitionResult#dnsSuffix}", n],
+        ["https://signin.{Region}.api.aws", o],
+        ["https://signin.{Region}.api.amazonwebservices.com.cn", o],
+        [j, o],
+        [a, "FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],
+        ["https://{Region}.oauth.signin.aws", o],
+        ["https://{Region}.signin.aws.amazon.com", p],
+        ["https://{Region}.signin.amazonaws.cn", p],
+        ["https://{Region}.signin.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin.c2shome.ic.gov", p],
+        ["https://{Region}.signin.sc2shome.sgov.gov", p],
+        ["https://{Region}.signin.csphome.hci.ic.gov", p],
+        ["https://{Region}.signin.csphome.adc-e.uk", p],
+        ["https://{Region}.signin.amazonaws-eusc.eu", p],
+        ["https://signin-fips.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin-fips.amazonaws-us-gov.com", p],
+        ["https://{Region}.signin.{PartitionResult#dnsSuffix}", p],
         [a, "Invalid Configuration: FIPS and custom endpoint are not supported"],
         [a, "Invalid Configuration: Dualstack and custom endpoint are not supported"],
-        [i, n],
-        ["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", n],
+        [k, p],
+        ["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", p],
         [a, "FIPS and DualStack are enabled, but this partition does not support one or both"],
-        ["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}", n],
+        ["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}", p],
         [a, "FIPS is enabled but this partition does not support FIPS"],
-        [h, n],
+        [j, p],
         [a, "DualStack is enabled but this partition does not support DualStack"],
-        ["https://signin.{Region}.{PartitionResult#dnsSuffix}", n],
+        ["https://signin.{Region}.{PartitionResult#dnsSuffix}", p],
         [a, "Invalid Configuration: Missing Region"]
     ]
 };
@@ -54,37 +57,44 @@ const root = 2;
 const r = 100_000_000;
 const nodes = new Int32Array([
     -1, 1, -1,
-    0, 4, 3,
-    2, 30, r + 25,
-    1, 24, 5,
-    2, 30, 6,
-    3, 7, 26,
-    4, 18, 8,
-    5, 17, 9,
-    6, r + 4, 10,
-    7, r + 5, 11,
-    10, r + 6, 12,
-    12, r + 7, 13,
-    13, r + 8, 14,
-    14, r + 9, 15,
-    15, r + 10, 16,
-    16, r + 11, r + 14,
-    8, r + 22, r + 23,
-    5, 22, 19,
-    9, r + 12, 20,
-    10, r + 13, 21,
-    11, r + 20, r + 21,
-    8, 23, r + 19,
-    11, r + 18, r + 19,
-    2, 29, 25,
-    3, 32, 26,
-    4, 27, r + 25,
-    5, r + 25, 28,
-    9, r + 12, r + 25,
-    3, 32, 30,
-    4, r + 15, 31,
-    5, r + 16, r + 17,
-    6, r + 1, 33,
-    7, r + 2, r + 3,
+    0, 6, 3,
+    2, 36, 4,
+    4, 5, r + 27,
+    6, r + 4, r + 27,
+    1, 29, 7,
+    2, 36, 8,
+    3, 9, 31,
+    4, 22, 10,
+    5, 19, 11,
+    7, 21, 12,
+    8, r + 7, 13,
+    10, r + 8, 14,
+    12, r + 9, 15,
+    13, r + 10, 16,
+    14, r + 11, 17,
+    15, r + 12, 18,
+    16, r + 13, r + 16,
+    6, r + 5, 20,
+    7, 21, r + 6,
+    17, r + 24, r + 25,
+    6, r + 4, 23,
+    7, 27, 24,
+    9, r + 14, 25,
+    10, r + 15, 26,
+    11, r + 22, r + 23,
+    11, 28, r + 21,
+    17, r + 20, r + 21,
+    2, 35, 30,
+    3, 39, 31,
+    4, 32, r + 27,
+    6, r + 4, 33,
+    7, r + 27, 34,
+    9, r + 14, r + 27,
+    3, 39, 36,
+    4, 38, 37,
+    7, r + 18, r + 19,
+    6, r + 4, r + 17,
+    5, r + 1, 40,
+    8, r + 2, r + 3,
 ]);
 export const bdd = BinaryDecisionDiagram.from(nodes, root, _data.conditions, _data.results);

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/endpoint/endpointResolver.js

@@ -3,7 +3,7 @@ import { customEndpointFunctions, decideEndpoint, EndpointCache } from "@smithy/
 import { bdd } from "./bdd";
 const cache = new EndpointCache({
     size: 50,
-    params: ["Endpoint", "IsControlPlane", "Region", "UseDualStack", "UseFIPS"],
+    params: ["Endpoint", "IsControlPlane", "IsOAuthEndpoint", "Region", "UseDualStack", "UseFIPS"],
 });
 export const defaultEndpointResolver = (endpointParams, context = {}) => {
     return cache.get(endpointParams, () => decideEndpoint(bdd, {

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/schemas/schemas_0.js

@@ -5,24 +5,32 @@ const _COATR = "CreateOAuth2TokenRequest";
 const _COATRB = "CreateOAuth2TokenRequestBody";
 const _COATRBr = "CreateOAuth2TokenResponseBody";
 const _COATRr = "CreateOAuth2TokenResponse";
+const _COATWIAM = "CreateOAuth2TokenWithIAM";
+const _COATWIAMR = "CreateOAuth2TokenWithIAMRequest";
+const _COATWIAMRr = "CreateOAuth2TokenWithIAMResponse";
 const _ISE = "InternalServerException";
+const _OAAT = "OAuthAccessToken";
 const _RT = "RefreshToken";
 const _TMRE = "TooManyRequestsError";
 const _VE = "ValidationException";
 const _aKI = "accessKeyId";
 const _aT = "accessToken";
+const _at = "access_token";
 const _c = "client";
 const _cI = "clientId";
 const _cV = "codeVerifier";
 const _co = "code";
 const _e = "error";
 const _eI = "expiresIn";
+const _ei = "expires_in";
 const _gT = "grantType";
+const _gt = "grant_type";
 const _h = "http";
 const _hE = "httpError";
 const _iT = "idToken";
 const _jN = "jsonName";
 const _m = "message";
+const _r = "resource";
 const _rT = "refreshToken";
 const _rU = "redirectUri";
 const _s = "smithy.ts.sdk.synthetic.com.amazonaws.signin";
@@ -32,6 +40,7 @@ const _se = "server";
 const _tI = "tokenInput";
 const _tO = "tokenOutput";
 const _tT = "tokenType";
+const _tt = "token_type";
 const n0 = "com.amazonaws.signin";
 import { TypeRegistry } from "@smithy/core/schema";
 import { AccessDeniedException, InternalServerException, TooManyRequestsError, ValidationException, } from "../models/errors";
@@ -68,6 +77,7 @@ export const errorTypeRegistries = [
     _s_registry,
     n0_registry,
 ];
+var OAuthAccessToken = [0, n0, _OAAT, 8, 0];
 var RefreshToken = [0, n0, _RT, 8, 0];
 export var AccessToken$ = [3, n0, _AT,
     8,
@@ -94,6 +104,19 @@ export var CreateOAuth2TokenResponseBody$ = [3, n0, _COATRBr,
     [_aT, _tT, _eI, _rT, _iT],
     [[() => AccessToken$, { [_jN]: _aT }], [0, { [_jN]: _tT }], [1, { [_jN]: _eI }], [() => RefreshToken, { [_jN]: _rT }], [0, { [_jN]: _iT }]], 4
 ];
+export var CreateOAuth2TokenWithIAMRequest$ = [3, n0, _COATWIAMR,
+    0,
+    [_gT, _r],
+    [[0, { [_jN]: _gt }], 0], 2
+];
+export var CreateOAuth2TokenWithIAMResponse$ = [3, n0, _COATWIAMRr,
+    0,
+    [_aT, _tT, _eI],
+    [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }]], 3
+];
 export var CreateOAuth2Token$ = [9, n0, _COAT,
     { [_h]: ["POST", "/v1/token", 200] }, () => CreateOAuth2TokenRequest$, () => CreateOAuth2TokenResponse$
 ];
+export var CreateOAuth2TokenWithIAM$ = [9, n0, _COATWIAM,
+    { [_h]: ["POST", "/v1/token?x-amz-client-auth-method=iam", 200] }, () => CreateOAuth2TokenWithIAMRequest$, () => CreateOAuth2TokenWithIAMResponse$
+];

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso/auth/httpAuthSchemeProvider.js

@@ -31,10 +31,12 @@ function createSmithyApiNoAuthHttpAuthOption(authParameters) {
 export const defaultSSOHttpAuthSchemeProvider = (authParameters) => {
     const options = [];
     switch (authParameters.operation) {
-        case "GetRoleCredentials": {
-            options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
-            break;
-        }
+        case "GetRoleCredentials":
+            {
+                options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
+                break;
+            }
+            ;
         default: {
             options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
         }

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/auth/httpAuthSchemeProvider.js

@@ -31,10 +31,12 @@ function createSmithyApiNoAuthHttpAuthOption(authParameters) {
 export const defaultSSOOIDCHttpAuthSchemeProvider = (authParameters) => {
     const options = [];
     switch (authParameters.operation) {
-        case "CreateToken": {
-            options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
-            break;
-        }
+        case "CreateToken":
+            {
+                options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
+                break;
+            }
+            ;
         default: {
             options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
         }

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultRoleAssumers.js

@@ -1,4 +1,4 @@
-import { getDefaultRoleAssumer as StsGetDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity as StsGetDefaultRoleAssumerWithWebIdentity } from "./defaultStsRoleAssumers";
+import { getDefaultRoleAssumer as StsGetDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity as StsGetDefaultRoleAssumerWithWebIdentity, } from "./defaultStsRoleAssumers";
 import { STSClient } from "./STSClient";
 const getCustomizableStsClientCtor = (baseCtor, customizations) => {
     if (!customizations)

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js

@@ -1,6 +1,6 @@
 import { setCredentialFeature, stsRegionDefaultResolver } from "@aws-sdk/core/client";
 import { AssumeRoleCommand } from "./commands/AssumeRoleCommand";
-import { AssumeRoleWithWebIdentityCommand } from "./commands/AssumeRoleWithWebIdentityCommand";
+import { AssumeRoleWithWebIdentityCommand, } from "./commands/AssumeRoleWithWebIdentityCommand";
 const getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {
     if (typeof assumedRoleUser?.Arn === "string") {
         const arnComponents = assumedRoleUser.Arn.split(":");

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/cognito-identity/auth/httpAuthSchemeProvider.d.ts

@@ -1,4 +1,4 @@
-import type { AwsSdkSigV4AuthInputConfig, AwsSdkSigV4AuthResolvedConfig, AwsSdkSigV4PreviouslyResolved } from "@aws-sdk/core/httpAuthSchemes";
+import { AwsSdkSigV4AuthInputConfig, AwsSdkSigV4AuthResolvedConfig, AwsSdkSigV4PreviouslyResolved } from "@aws-sdk/core/httpAuthSchemes";
 import type { HandlerExecutionContext, HttpAuthScheme, HttpAuthSchemeParameters, HttpAuthSchemeParametersProvider, HttpAuthSchemeProvider, Provider } from "@smithy/types";
 import { type CognitoIdentityClientResolvedConfig } from "../CognitoIdentityClient";
 /**

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/cognito-identity/runtimeConfig.browser.d.ts

@@ -41,6 +41,7 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
         logger?: import("@smithy/types").Logger;
     }) => import("@smithy/types").EndpointV2;
     tls?: boolean;
+    ignoreConfiguredEndpointUrls?: boolean;
     serviceConfiguredEndpoint?: never;
     authSchemePreference?: string[] | import("@smithy/types").Provider<string[]>;
     httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
@@ -59,4 +60,5 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
     systemClockOffset?: number;
     signingRegion?: string;
     signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
+    disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
 };

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/cognito-identity/runtimeConfig.d.ts

@@ -42,6 +42,7 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
         logger?: import("@smithy/types").Logger;
     }) => import("@smithy/types").EndpointV2;
     tls?: boolean;
+    ignoreConfiguredEndpointUrls?: boolean;
     serviceConfiguredEndpoint?: never;
     httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
         schemeId: string;
@@ -59,4 +60,5 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
     systemClockOffset?: number;
     signingRegion?: string;
     signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
+    disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
 };

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/cognito-identity/runtimeConfig.native.d.ts

@@ -40,6 +40,7 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
         logger?: import("@smithy/types").Logger;
     }) => import("@smithy/types").EndpointV2;
     tls?: boolean;
+    ignoreConfiguredEndpointUrls?: boolean;
     serviceConfiguredEndpoint?: never;
     authSchemePreference?: string[] | import("@smithy/types").Provider<string[]>;
     httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
@@ -58,4 +59,5 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
     systemClockOffset?: number;
     signingRegion?: string;
     signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
+    disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
 };

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/Signin.d.ts

@@ -1,5 +1,6 @@
 import type { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
 import { type CreateOAuth2TokenCommandInput, type CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
+import { type CreateOAuth2TokenWithIAMCommandInput, type CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
 import { SigninClient } from "./SigninClient";
 export interface Signin {
     /**
@@ -8,6 +9,12 @@ export interface Signin {
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, options?: __HttpHandlerOptions): Promise<CreateOAuth2TokenCommandOutput>;
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, cb: (err: any, data?: CreateOAuth2TokenCommandOutput) => void): void;
     createOAuth2Token(args: CreateOAuth2TokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOAuth2TokenCommandOutput) => void): void;
+    /**
+     * @see {@link CreateOAuth2TokenWithIAMCommand}
+     */
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options?: __HttpHandlerOptions): Promise<CreateOAuth2TokenWithIAMCommandOutput>;
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
+    createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
 }
 /**
  * AWS Sign-In manages authentication for AWS services. This service provides

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/SigninClient.d.ts

@@ -7,17 +7,18 @@ import { type RetryInputConfig, type RetryResolvedConfig } from "@smithy/core/re
 import type { AwsCredentialIdentityProvider, BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, Logger as __Logger, Provider as __Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
 import { type HttpAuthSchemeInputConfig, type HttpAuthSchemeResolvedConfig } from "./auth/httpAuthSchemeProvider";
 import type { CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
+import type { CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
 import { type ClientInputEndpointParameters, type ClientResolvedEndpointParameters, type EndpointParameters } from "./endpoint/EndpointParameters";
 import { type RuntimeExtension, type RuntimeExtensionsConfig } from "./runtimeExtensions";
 export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = CreateOAuth2TokenCommandInput;
+export type ServiceInputTypes = CreateOAuth2TokenCommandInput | CreateOAuth2TokenWithIAMCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput;
+export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput | CreateOAuth2TokenWithIAMCommandOutput;
 /**
  * @public
  */

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/auth/httpAuthSchemeProvider.d.ts

@@ -1,4 +1,4 @@
-import type { AwsSdkSigV4AuthInputConfig, AwsSdkSigV4AuthResolvedConfig, AwsSdkSigV4PreviouslyResolved } from "@aws-sdk/core/httpAuthSchemes";
+import { AwsSdkSigV4AuthInputConfig, AwsSdkSigV4AuthResolvedConfig, AwsSdkSigV4PreviouslyResolved } from "@aws-sdk/core/httpAuthSchemes";
 import type { HandlerExecutionContext, HttpAuthScheme, HttpAuthSchemeParameters, HttpAuthSchemeParametersProvider, HttpAuthSchemeProvider, Provider } from "@smithy/types";
 import { type SigninClientResolvedConfig } from "../SigninClient";
 /**

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/commandBuilder.d.ts

@@ -1,17 +1,21 @@
 import type { EndpointParameterInstructions } from "@smithy/types";
-import type { SigninClientResolvedConfig } from "./SigninClient";
+import type { ServiceInputTypes, ServiceOutputTypes, SigninClientResolvedConfig } from "./SigninClient";
 /**
  * @internal
  */
-export declare const command: <I extends import("./commands").CreateOAuth2TokenCommandInput, O extends import("./commands").CreateOAuth2TokenCommandOutput>(added: EndpointParameterInstructions, plugins: (CommandCtor: any, clientStack: any, config: any, options: any) => import("@smithy/types").Pluggable<any, any>[], op: string, $: import("@smithy/types").StaticOperationSchema, smithyContext?: Record<string, unknown>) => {
-    new (input: I): import("@smithy/core/client").CommandImpl<I, O, SigninClientResolvedConfig, import("./commands").CreateOAuth2TokenCommandInput, import("./commands").CreateOAuth2TokenCommandOutput>;
-    new (...[input]: import("@smithy/types").OptionalParameter<I>): import("@smithy/core/client").CommandImpl<I, O, SigninClientResolvedConfig, import("./commands").CreateOAuth2TokenCommandInput, import("./commands").CreateOAuth2TokenCommandOutput>;
+export declare const command: <I extends ServiceInputTypes, O extends ServiceOutputTypes>(added: EndpointParameterInstructions, plugins: (CommandCtor: any, clientStack: any, config: any, options: any) => import("@smithy/types").Pluggable<any, any>[], op: string, $: import("@smithy/types").StaticOperationSchema, smithyContext?: Record<string, unknown>) => {
+    new (input: I): import("@smithy/core/client").CommandImpl<I, O, SigninClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (...[input]: import("@smithy/types").OptionalParameter<I>): import("@smithy/core/client").CommandImpl<I, O, SigninClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
     getEndpointParameterInstructions(): EndpointParameterInstructions;
 };
 /**
  * @internal
  */
 export declare const _ep0: EndpointParameterInstructions;
+/**
+ * @internal
+ */
+export declare const _ep1: EndpointParameterInstructions;
 /**
  * @internal
  */

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/commands/CreateOAuth2TokenCommand.d.ts

@@ -19,8 +19,8 @@ export interface CreateOAuth2TokenCommandInput extends CreateOAuth2TokenRequest
 export interface CreateOAuth2TokenCommandOutput extends CreateOAuth2TokenResponse, __MetadataBearer {
 }
 declare const CreateOAuth2TokenCommand_base: {
-    new (input: CreateOAuth2TokenCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput, import("..").SigninClientResolvedConfig, CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput>;
-    new (input: CreateOAuth2TokenCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput, import("..").SigninClientResolvedConfig, CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput>;
+    new (input: CreateOAuth2TokenCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: CreateOAuth2TokenCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/commands/CreateOAuth2TokenWithIAMCommand.d.ts

@@ -0,0 +1,114 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { CreateOAuth2TokenWithIAMRequest, CreateOAuth2TokenWithIAMResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link CreateOAuth2TokenWithIAMCommand}.
+ */
+export interface CreateOAuth2TokenWithIAMCommandInput extends CreateOAuth2TokenWithIAMRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link CreateOAuth2TokenWithIAMCommand}.
+ */
+export interface CreateOAuth2TokenWithIAMCommandOutput extends CreateOAuth2TokenWithIAMResponse, __MetadataBearer {
+}
+declare const CreateOAuth2TokenWithIAMCommand_base: {
+    new (input: CreateOAuth2TokenWithIAMCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: CreateOAuth2TokenWithIAMCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * Grants permission to exchange client credentials for an OAuth 2.0 access token
+ * scoped to a resource that can be used to access AWS services from applications
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SigninClient, CreateOAuth2TokenWithIAMCommand } from "@aws-sdk/client-signin"; // ES Modules import
+ * // const { SigninClient, CreateOAuth2TokenWithIAMCommand } = require("@aws-sdk/client-signin"); // CommonJS import
+ * // import type { SigninClientConfig } from "@aws-sdk/client-signin";
+ * const config = {}; // type is SigninClientConfig
+ * const client = new SigninClient(config);
+ * const input = { // CreateOAuth2TokenWithIAMRequest
+ *   grantType: "STRING_VALUE", // required
+ *   resource: "STRING_VALUE", // required
+ * };
+ * const command = new CreateOAuth2TokenWithIAMCommand(input);
+ * const response = await client.send(command);
+ * // { // CreateOAuth2TokenWithIAMResponse
+ * //   accessToken: "STRING_VALUE", // required
+ * //   tokenType: "STRING_VALUE", // required
+ * //   expiresIn: Number("int"), // required
+ * // };
+ *
+ * ```
+ *
+ * @param CreateOAuth2TokenWithIAMCommandInput - {@link CreateOAuth2TokenWithIAMCommandInput}
+ * @returns {@link CreateOAuth2TokenWithIAMCommandOutput}
+ * @see {@link CreateOAuth2TokenWithIAMCommandInput} for command's `input` shape.
+ * @see {@link CreateOAuth2TokenWithIAMCommandOutput} for command's `response` shape.
+ * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  Error thrown for access denied scenarios with flexible HTTP status mapping
+ *
+ * Runtime HTTP Status Code Mapping:
+ * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
+ * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
+ *
+ * The specific HTTP status code is determined at runtime based on the error enum value.
+ * Consumers should use the error field to determine the specific access denial reason.
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  Error thrown when an internal server error occurs
+ *
+ * HTTP Status Code: 500 Internal Server Error
+ *
+ * Used for unexpected server-side errors that prevent request processing.
+ *
+ * @throws {@link TooManyRequestsError} (client fault)
+ *  Error thrown when rate limit is exceeded
+ *
+ * HTTP Status Code: 429 Too Many Requests
+ *
+ * Possible OAuth2ErrorCode values:
+ * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
+ *
+ * Possible causes:
+ * - Too many token requests from the same client
+ * - Rate limiting based on client_id or IP address
+ * - Abuse prevention mechanisms triggered
+ * - Service protection against excessive token generation
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  Error thrown when request validation fails
+ *
+ * HTTP Status Code: 400 Bad Request
+ *
+ * Used for request validation errors such as malformed parameters,
+ * missing required fields, or invalid parameter values.
+ *
+ * @throws {@link SigninServiceException}
+ * <p>Base exception class for all service exceptions from Signin service.</p>
+ *
+ *
+ * @public
+ */
+export declare class CreateOAuth2TokenWithIAMCommand extends CreateOAuth2TokenWithIAMCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateOAuth2TokenWithIAMRequest;
+            output: CreateOAuth2TokenWithIAMResponse;
+        };
+        sdk: {
+            input: CreateOAuth2TokenWithIAMCommandInput;
+            output: CreateOAuth2TokenWithIAMCommandOutput;
+        };
+    };
+}

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/commands/index.d.ts

@@ -1 +1,2 @@
 export * from "./CreateOAuth2TokenCommand";
+export * from "./CreateOAuth2TokenWithIAMCommand";

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/endpoint/EndpointParameters.d.ts

@@ -48,4 +48,5 @@ export interface EndpointParameters extends __EndpointParameters {
     Endpoint?: string | undefined;
     Region?: string | undefined;
     IsControlPlane?: boolean | undefined;
+    IsOAuthEndpoint?: boolean | undefined;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/models/models_0.d.ts

@@ -1,9 +1,7 @@
 /**
  * AWS credentials structure containing temporary access credentials
  *
- * The scoped-down, 15 minute duration AWS credentials.
- * Scoping down will be based on CLI policy (CLI team needs to create it).
- * Similar to cloud shell implementation.
+ * Scoped, temporary AWS credentials with a 15-minute duration.
  * @public
  */
 export interface AccessToken {
@@ -140,3 +138,43 @@ export interface CreateOAuth2TokenResponse {
      */
     tokenOutput: CreateOAuth2TokenResponseBody | undefined;
 }
+/**
+ * Input structure for CreateOAuth2TokenWithIAM operation
+ * @public
+ */
+export interface CreateOAuth2TokenWithIAMRequest {
+    /**
+     * OAuth 2.0 grant type. Must be "client_credentials".
+     * @public
+     */
+    grantType: string | undefined;
+    /**
+     * The OAuth resource for which the access token is requested.
+     * Example: "aws-mcp.amazonaws.com".
+     * @public
+     */
+    resource: string | undefined;
+}
+/**
+ * Output structure for CreateOAuth2TokenWithIAM operation
+ *
+ * Contains the JWT access token, token type, and expiration per RFC 6749 §5.1.
+ * @public
+ */
+export interface CreateOAuth2TokenWithIAMResponse {
+    /**
+     * JWT access token containing principal identity, resource scope, and session metadata
+     * @public
+     */
+    accessToken: string | undefined;
+    /**
+     * Always "Bearer" per OAuth 2.1 specification
+     * @public
+     */
+    tokenType: string | undefined;
+    /**
+     * Token lifetime in seconds. Value is the minimum of session validity and 1 hour.
+     * @public
+     */
+    expiresIn: number | undefined;
+}