@cdklabs/cdk-construct-connect-datalake 0.0.27 → 0.0.29

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/commands/AssumeRoleWithWebIdentityCommand.d.ts

@@ -162,6 +162,7 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  *   ],
  *   Policy: "STRING_VALUE",
  *   DurationSeconds: Number("int"),
+ *   MinimumSessionTokenSize: Number("int"),
  * };
  * const command = new AssumeRoleWithWebIdentityCommand(input);
  * const response = await client.send(command);
@@ -181,6 +182,8 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  * //   Provider: "STRING_VALUE",
  * //   Audience: "STRING_VALUE",
  * //   SourceIdentity: "STRING_VALUE",
+ * //   SessionTokenUtilization: Number("int"),
+ * //   SessionTokenSize: Number("int"),
  * // };
  *
  * ```

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/index.d.ts

@@ -1,8 +1,27 @@
 /**
  * <fullname>Security Token Service</fullname>
- *          <p>Security Token Service (STS) enables you to request temporary, limited-privilege
- *       credentials for users. This guide provides descriptions of the STS API. For
- *       more information about using this service, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary Security Credentials</a>.</p>
+ *          <p>Amazon Web Services provides Security Token Service (STS) as a web service that enables you to request temporary,
+ *          limited-privilege credentials for users. This guide describes the STS API. For more
+ *          information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary Security Credentials</a>
+ *          in the <i>IAM User Guide</i>.</p>
+ *          <note>
+ *             <p>As an alternative to using the API, you can use one of the Amazon Web Services SDKs, which consist of
+ *             libraries and sample code for various programming languages and platforms such as Java,
+ *             Ruby, .NET, iOS, Android, and others. The SDKs provide a convenient way to create
+ *             programmatic access to STS. For example, the SDKs can cryptographically sign requests,
+ *             manage errors, and retry requests automatically. For information about the Amazon Web Services SDKs, see
+ *                <a href="http://aws.amazon.com/tools/">Tools to Build on Amazon Web Services</a>.</p>
+ *          </note>
+ *          <p>For information about setting up signatures and authorization through the API, see <a href="https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html">Signing Amazon Web Services
+ *             API Requests</a> in the <i>Amazon Web Services General Reference</i>. For general information
+ *          about the Query API, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_UsingQueryAPI.html">Making Query Requests</a> in the
+ *             <i>IAM User Guide</i>. For information about using security tokens with
+ *          other Amazon Web Services products, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html">Amazon Web Services Services
+ *             That Work with IAM</a> in the <i>IAM User Guide</i>.</p>
+ *          <p>For information about STS endpoints, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_region-endpoints.html">STS Regions and
+ *             endpoints</a> in the <i>IAM User Guide</i>. For information about
+ *          logging STS API calls, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/cloudtrail-integration.html">Logging IAM and STS API calls
+ *             with CloudTrail</a> in the <i>IAM User Guide</i>.</p>
  *
  * @packageDocumentation
  */

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/models/models_0.d.ts

@@ -298,6 +298,13 @@ export interface AssumeRoleRequest {
      * @public
      */
     ProvidedContexts?: ProvidedContext[] | undefined;
+    /**
+     * The minimum size, in bytes, of the session token that STS issues for the request. STS increases
+     *     the session token to at least this size, regardless of its actual content. The value must not
+     *     exceed 4,096 bytes. When set to 0 or not specified, the session token size is unchanged.
+     * @public
+     */
+    MinimumSessionTokenSize?: number | undefined;
 }
 /**
  * <p>Amazon Web Services credentials for API authentication.</p>
@@ -355,6 +362,8 @@ export interface AssumeRoleResponse {
      * <p>A percentage value that indicates the packed size of the session policies and session
      *       tags combined passed in the request. The request fails if the packed size is greater than 100 percent,
      *       which means the policies and tags exceeded the allowed space.</p>
+     *
+     * @deprecated (since 2026-06-17) Deprecated. Replaced by SessionTokenUtilization.
      * @public
      */
     PackedPolicySize?: number | undefined;
@@ -375,6 +384,17 @@ export interface AssumeRoleResponse {
      * @public
      */
     SourceIdentity?: string | undefined;
+    /**
+     * The percentage (0-100) of the maximum allowed session token size that the returned session
+     *     token consumes.
+     * @public
+     */
+    SessionTokenUtilization?: number | undefined;
+    /**
+     * The size, in bytes, of the session token returned in the Credentials for this response.
+     * @public
+     */
+    SessionTokenSize?: number | undefined;
 }
 /**
  * @public
@@ -506,6 +526,13 @@ export interface AssumeRoleWithWebIdentityRequest {
      * @public
      */
     DurationSeconds?: number | undefined;
+    /**
+     * The minimum size, in bytes, of the session token that STS issues for the request. STS increases
+     *     the session token to at least this size, regardless of its actual content. The value must not
+     *     exceed 4,096 bytes. When set to 0 or not specified, the session token size is unchanged.
+     * @public
+     */
+    MinimumSessionTokenSize?: number | undefined;
 }
 /**
  * <p>Contains the response to a successful <a>AssumeRoleWithWebIdentity</a>
@@ -546,6 +573,8 @@ export interface AssumeRoleWithWebIdentityResponse {
      * <p>A percentage value that indicates the packed size of the session policies and session
      *       tags combined passed in the request. The request fails if the packed size is greater than 100 percent,
      *       which means the policies and tags exceeded the allowed space.</p>
+     *
+     * @deprecated (since 2026-06-17) Deprecated. Replaced by SessionTokenUtilization.
      * @public
      */
     PackedPolicySize?: number | undefined;
@@ -585,4 +614,15 @@ export interface AssumeRoleWithWebIdentityResponse {
      * @public
      */
     SourceIdentity?: string | undefined;
+    /**
+     * The percentage (0-100) of the maximum allowed session token size that the returned session
+     *     token consumes.
+     * @public
+     */
+    SessionTokenUtilization?: number | undefined;
+    /**
+     * The size, in bytes, of the session token returned in the Credentials for this response.
+     * @public
+     */
+    SessionTokenSize?: number | undefined;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/cognito-identity/CognitoIdentity.d.ts

@@ -1,14 +1,20 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import { CognitoIdentityClient } from "./CognitoIdentityClient";
 import {
   GetCredentialsForIdentityCommandInput,
   GetCredentialsForIdentityCommandOutput,
 } from "./commands/GetCredentialsForIdentityCommand";
 import { GetIdCommandInput, GetIdCommandOutput } from "./commands/GetIdCommand";
+export interface CognitoIdentityRequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface CognitoIdentity {
   getCredentialsForIdentity(
     args: GetCredentialsForIdentityCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: CognitoIdentityRequestOptions,
   ): Promise<GetCredentialsForIdentityCommandOutput>;
   getCredentialsForIdentity(
     args: GetCredentialsForIdentityCommandInput,
@@ -16,14 +22,17 @@ export interface CognitoIdentity {
   ): void;
   getCredentialsForIdentity(
     args: GetCredentialsForIdentityCommandInput,
-    options: __HttpHandlerOptions,
+    options: CognitoIdentityRequestOptions,
     cb: (err: any, data?: GetCredentialsForIdentityCommandOutput) => void,
   ): void;
-  getId(args: GetIdCommandInput, options?: __HttpHandlerOptions): Promise<GetIdCommandOutput>;
+  getId(
+    args: GetIdCommandInput,
+    options?: CognitoIdentityRequestOptions,
+  ): Promise<GetIdCommandOutput>;
   getId(args: GetIdCommandInput, cb: (err: any, data?: GetIdCommandOutput) => void): void;
   getId(
     args: GetIdCommandInput,
-    options: __HttpHandlerOptions,
+    options: CognitoIdentityRequestOptions,
     cb: (err: any, data?: GetIdCommandOutput) => void,
   ): void;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/signin/Signin.d.ts

@@ -1,4 +1,7 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import {
   CreateOAuth2TokenCommandInput,
   CreateOAuth2TokenCommandOutput,
@@ -8,10 +11,13 @@ import {
   CreateOAuth2TokenWithIAMCommandOutput,
 } from "./commands/CreateOAuth2TokenWithIAMCommand";
 import { SigninClient } from "./SigninClient";
+export interface SigninRequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface Signin {
   createOAuth2Token(
     args: CreateOAuth2TokenCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: SigninRequestOptions,
   ): Promise<CreateOAuth2TokenCommandOutput>;
   createOAuth2Token(
     args: CreateOAuth2TokenCommandInput,
@@ -19,12 +25,12 @@ export interface Signin {
   ): void;
   createOAuth2Token(
     args: CreateOAuth2TokenCommandInput,
-    options: __HttpHandlerOptions,
+    options: SigninRequestOptions,
     cb: (err: any, data?: CreateOAuth2TokenCommandOutput) => void,
   ): void;
   createOAuth2TokenWithIAM(
     args: CreateOAuth2TokenWithIAMCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: SigninRequestOptions,
   ): Promise<CreateOAuth2TokenWithIAMCommandOutput>;
   createOAuth2TokenWithIAM(
     args: CreateOAuth2TokenWithIAMCommandInput,
@@ -32,7 +38,7 @@ export interface Signin {
   ): void;
   createOAuth2TokenWithIAM(
     args: CreateOAuth2TokenWithIAMCommandInput,
-    options: __HttpHandlerOptions,
+    options: SigninRequestOptions,
     cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void,
   ): void;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso/SSO.d.ts

@@ -1,13 +1,19 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import {
   GetRoleCredentialsCommandInput,
   GetRoleCredentialsCommandOutput,
 } from "./commands/GetRoleCredentialsCommand";
 import { SSOClient } from "./SSOClient";
+export interface SSORequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface SSO {
   getRoleCredentials(
     args: GetRoleCredentialsCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: SSORequestOptions,
   ): Promise<GetRoleCredentialsCommandOutput>;
   getRoleCredentials(
     args: GetRoleCredentialsCommandInput,
@@ -15,7 +21,7 @@ export interface SSO {
   ): void;
   getRoleCredentials(
     args: GetRoleCredentialsCommandInput,
-    options: __HttpHandlerOptions,
+    options: SSORequestOptions,
     cb: (err: any, data?: GetRoleCredentialsCommandOutput) => void,
   ): void;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/SSOOIDC.d.ts

@@ -1,10 +1,16 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import { CreateTokenCommandInput, CreateTokenCommandOutput } from "./commands/CreateTokenCommand";
 import { SSOOIDCClient } from "./SSOOIDCClient";
+export interface SSOOIDCRequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface SSOOIDC {
   createToken(
     args: CreateTokenCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: SSOOIDCRequestOptions,
   ): Promise<CreateTokenCommandOutput>;
   createToken(
     args: CreateTokenCommandInput,
@@ -12,7 +18,7 @@ export interface SSOOIDC {
   ): void;
   createToken(
     args: CreateTokenCommandInput,
-    options: __HttpHandlerOptions,
+    options: SSOOIDCRequestOptions,
     cb: (err: any, data?: CreateTokenCommandOutput) => void,
   ): void;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/STS.d.ts

@@ -1,14 +1,20 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import { AssumeRoleCommandInput, AssumeRoleCommandOutput } from "./commands/AssumeRoleCommand";
 import {
   AssumeRoleWithWebIdentityCommandInput,
   AssumeRoleWithWebIdentityCommandOutput,
 } from "./commands/AssumeRoleWithWebIdentityCommand";
 import { STSClient } from "./STSClient";
+export interface STSRequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface STS {
   assumeRole(
     args: AssumeRoleCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: STSRequestOptions,
   ): Promise<AssumeRoleCommandOutput>;
   assumeRole(
     args: AssumeRoleCommandInput,
@@ -16,12 +22,12 @@ export interface STS {
   ): void;
   assumeRole(
     args: AssumeRoleCommandInput,
-    options: __HttpHandlerOptions,
+    options: STSRequestOptions,
     cb: (err: any, data?: AssumeRoleCommandOutput) => void,
   ): void;
   assumeRoleWithWebIdentity(
     args: AssumeRoleWithWebIdentityCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: STSRequestOptions,
   ): Promise<AssumeRoleWithWebIdentityCommandOutput>;
   assumeRoleWithWebIdentity(
     args: AssumeRoleWithWebIdentityCommandInput,
@@ -29,7 +35,7 @@ export interface STS {
   ): void;
   assumeRoleWithWebIdentity(
     args: AssumeRoleWithWebIdentityCommandInput,
-    options: __HttpHandlerOptions,
+    options: STSRequestOptions,
     cb: (err: any, data?: AssumeRoleWithWebIdentityCommandOutput) => void,
   ): void;
 }

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/models/models_0.d.ts

@@ -26,6 +26,7 @@ export interface AssumeRoleRequest {
   TokenCode?: string | undefined;
   SourceIdentity?: string | undefined;
   ProvidedContexts?: ProvidedContext[] | undefined;
+  MinimumSessionTokenSize?: number | undefined;
 }
 export interface Credentials {
   AccessKeyId: string | undefined;
@@ -38,6 +39,8 @@ export interface AssumeRoleResponse {
   AssumedRoleUser?: AssumedRoleUser | undefined;
   PackedPolicySize?: number | undefined;
   SourceIdentity?: string | undefined;
+  SessionTokenUtilization?: number | undefined;
+  SessionTokenSize?: number | undefined;
 }
 export interface AssumeRoleWithWebIdentityRequest {
   RoleArn: string | undefined;
@@ -47,6 +50,7 @@ export interface AssumeRoleWithWebIdentityRequest {
   PolicyArns?: PolicyDescriptorType[] | undefined;
   Policy?: string | undefined;
   DurationSeconds?: number | undefined;
+  MinimumSessionTokenSize?: number | undefined;
 }
 export interface AssumeRoleWithWebIdentityResponse {
   Credentials?: Credentials | undefined;
@@ -56,4 +60,6 @@ export interface AssumeRoleWithWebIdentityResponse {
   Provider?: string | undefined;
   Audience?: string | undefined;
   SourceIdentity?: string | undefined;
+  SessionTokenUtilization?: number | undefined;
+  SessionTokenSize?: number | undefined;
 }

package/node_modules/@aws-sdk/nested-clients/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/nested-clients",
-  "version": "3.997.45",
+  "version": "3.997.46",
   "description": "Nested clients for AWS SDK packages.",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",
   "license": "Apache-2.0",
@@ -100,13 +100,13 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.0",
-    "@aws-sdk/signature-v4-multi-region": "^3.996.46",
-    "@aws-sdk/types": "^3.974.5",
-    "@smithy/core": "^3.33.3",
-    "@smithy/fetch-http-handler": "^5.7.2",
-    "@smithy/node-http-handler": "^4.11.3",
-    "@smithy/types": "^4.17.2",
+    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/signature-v4-multi-region": "^3.996.47",
+    "@aws-sdk/types": "^3.974.6",
+    "@smithy/core": "^3.35.0",
+    "@smithy/fetch-http-handler": "^5.8.0",
+    "@smithy/node-http-handler": "^4.12.1",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/signature-v4-multi-region/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/signature-v4-multi-region",
-  "version": "3.996.46",
+  "version": "3.996.47",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/signature-v4-multi-region",
   "license": "Apache-2.0",
   "author": {
@@ -42,9 +42,9 @@
     "test:browser": "yarn build:browser && yarn g:vitest run -c vitest.config.browser.mts"
   },
   "dependencies": {
-    "@aws-sdk/types": "^3.974.5",
-    "@smithy/signature-v4": "^5.6.12",
-    "@smithy/types": "^4.17.2",
+    "@aws-sdk/types": "^3.974.6",
+    "@smithy/signature-v4": "^5.7.3",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/token-providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/token-providers",
-  "version": "3.1129.0",
+  "version": "3.1138.0",
   "description": "A collection of token providers",
   "keywords": [
     "aws",
@@ -48,11 +48,11 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.0",
-    "@aws-sdk/nested-clients": "^3.997.45",
-    "@aws-sdk/types": "^3.974.5",
-    "@smithy/core": "^3.33.3",
-    "@smithy/types": "^4.17.2",
+    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/nested-clients": "^3.997.46",
+    "@aws-sdk/types": "^3.974.6",
+    "@smithy/core": "^3.35.0",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/types/dist-types/feature-ids.d.ts

@@ -28,6 +28,7 @@ export type AwsSdkFeatures = Partial<{
     FLEXIBLE_CHECKSUMS_RES_WHEN_SUPPORTED: "b";
     FLEXIBLE_CHECKSUMS_RES_WHEN_REQUIRED: "c";
     DDB_MAPPER: "d";
+    S3_REGION_REDIRECT: "Ah";
 }> & AwsSdkCredentialsFeatures & AwsSdkTokenFeatures;
 /**
  * @internal

package/node_modules/@aws-sdk/types/dist-types/ts3.4/feature-ids.d.ts

@@ -25,6 +25,7 @@ export type AwsSdkFeatures = Partial<{
   FLEXIBLE_CHECKSUMS_RES_WHEN_SUPPORTED: "b";
   FLEXIBLE_CHECKSUMS_RES_WHEN_REQUIRED: "c";
   DDB_MAPPER: "d";
+  S3_REGION_REDIRECT: "Ah";
 }> &
   AwsSdkCredentialsFeatures &
   AwsSdkTokenFeatures;

package/node_modules/@aws-sdk/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/types",
-  "version": "3.974.5",
+  "version": "3.974.6",
   "description": "Types for the AWS SDK",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages-internal/types",
   "license": "Apache-2.0",
@@ -41,7 +41,7 @@
     "test": "tsc -p tsconfig.test.json"
   },
   "dependencies": {
-    "@smithy/types": "^4.17.2",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/xml-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/xml-builder",
-  "version": "3.972.40",
+  "version": "3.972.41",
   "description": "XML utilities for the AWS SDK",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages-internal/xml-builder",
   "license": "Apache-2.0",
@@ -47,7 +47,7 @@
     "test:fuzz": "jazzer tests/xml-parser.fuzz.js corpus --sync -i xml-parser -- -max_total_time=300"
   },
   "dependencies": {
-    "@smithy/types": "^4.17.2",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js

@@ -902,26 +902,11 @@ const loadSmithyRpcV2CborErrorCode = (output, data) => {
         if (cleanValue.indexOf(":") >= 0) {
             cleanValue = cleanValue.split(":")[0];
         }
-        if (cleanValue.indexOf("#") >= 0) {
-            cleanValue = cleanValue.split("#")[1];
-        }
         return cleanValue;
     };
     if (data["__type"] !== undefined) {
         return sanitizeErrorCode(data["__type"]);
     }
-    let codeKey;
-    for (const key in data) {
-        if (!hasOwn(data, key))
-            continue;
-        if (key.toLowerCase() === "code") {
-            codeKey = key;
-            break;
-        }
-    }
-    if (codeKey && data[codeKey] !== undefined) {
-        return sanitizeErrorCode(data[codeKey]);
-    }
 };
 const checkCborResponse = (response) => {
     if (String(response.headers["smithy-protocol"]).toLowerCase() !== "rpc-v2-cbor") {
@@ -2278,37 +2263,37 @@ class SmithyRpcV2CborProtocol extends RpcProtocol {
         return super.deserializeResponse(operationSchema, context, response);
     }
     async handleError(operationSchema, context, response, dataObject, metadata) {
-        const errorName = loadSmithyRpcV2CborErrorCode(response, dataObject) ?? "Unknown";
+        const errorIdentifier = loadSmithyRpcV2CborErrorCode(response, dataObject) ?? "Unknown";
+        const preferredNamespaces = ["*"];
+        const { defaultNamespace } = this.options;
+        preferredNamespaces.unshift(defaultNamespace);
+        const [namespace, errorShapeName] = (() => {
+            if (errorIdentifier.includes("#")) {
+                return errorIdentifier.split("#");
+            }
+            return [undefined, errorIdentifier];
+        })();
+        if (namespace) {
+            preferredNamespaces.unshift(namespace);
+        }
         const errorMetadata = {
             $metadata: metadata,
-            $fault: response.statusCode <= 500 ? "client" : "server",
+            $fault: response.statusCode < 500 ? "client" : "server",
         };
-        let namespace = this.options.defaultNamespace;
-        if (errorName.includes("#")) {
-            [namespace] = errorName.split("#");
-        }
-        const registry = this.compositeErrorRegistry;
-        const nsRegistry = TypeRegistry.for(namespace);
-        registry.copyFrom(nsRegistry);
-        let errorSchema;
-        try {
-            errorSchema = registry.getSchema(errorName);
+        const preferredRegistries = [this.compositeErrorRegistry];
+        if (namespace) {
+            preferredRegistries.push(TypeRegistry.for(namespace));
         }
-        catch (ignored) {
+        preferredRegistries.push(TypeRegistry.for(defaultNamespace));
+        const [errorSchema, ErrorCtor, errorMode] = this.resolveError(errorShapeName, preferredNamespaces, preferredRegistries);
+        if (errorMode === "native" || errorMode === "synthetic") {
             if (dataObject.Message) {
                 dataObject.message = dataObject.Message;
             }
-            const syntheticRegistry = TypeRegistry.for("smithy.ts.sdk.synthetic." + namespace);
-            registry.copyFrom(syntheticRegistry);
-            const baseExceptionSchema = registry.getBaseException();
-            if (baseExceptionSchema) {
-                const ErrorCtor = registry.getErrorCtor(baseExceptionSchema);
-                throw Object.assign(new ErrorCtor({ name: errorName }), errorMetadata, dataObject);
-            }
-            throw Object.assign(new Error(errorName), errorMetadata, dataObject);
+            const error = errorMode === "synthetic" ? new ErrorCtor({ name: errorShapeName }) : new Error(errorShapeName);
+            throw Object.assign(error, errorMetadata, dataObject);
         }
         const ns = NormalizedSchema.of(errorSchema);
-        const ErrorCtor = registry.getErrorCtor(errorSchema);
         const message = dataObject.message ?? dataObject.Message ?? "Unknown";
         const exception = new ErrorCtor({});
         const output = {};