@cdklabs/cdk-ecs-codedeploy 0.0.246 → 0.0.248

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.native.d.ts

@@ -21,9 +21,9 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     serviceId: string;
     useDualstackEndpoint: boolean | import("@smithy/types").Provider<boolean>;
     useFipsEndpoint: boolean | import("@smithy/types").Provider<boolean>;
-    region: string | import("@smithy/types").Provider<any>;
-    credentialDefaultProvider: (input: any) => import("@smithy/types").Provider<import("@aws-sdk/types").Credentials>;
     defaultUserAgentProvider: import("@smithy/types").Provider<import("@smithy/types").UserAgent>;
+    region: string | import("@smithy/types").Provider<any>;
+    credentialDefaultProvider: (input: any) => import("@smithy/types").AwsCredentialIdentityProvider;
     maxAttempts: number | import("@smithy/types").Provider<number>;
     retryMode: string | import("@smithy/types").Provider<string>;
     logger: import("@smithy/types").Logger;
@@ -35,11 +35,21 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     }) => import("@smithy/types").EndpointV2;
     tls?: boolean | undefined;
     retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2 | undefined;
-    credentials?: import("@smithy/types").AwsCredentialIdentity | import("@smithy/types").Provider<import("@smithy/types").AwsCredentialIdentity> | undefined;
+    customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
+        schemeId: string;
+        identityProvider: (ipc: import("@smithy/types").IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | undefined;
+        signer: import("@aws-sdk/core").AwsSdkSigV4Signer;
+    } | {
+        schemeId: string;
+        identityProvider: (ipc: import("@smithy/types").IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | (() => Promise<{}>);
+        signer: import("@smithy/core").NoAuthSigner;
+    })[];
+    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
+    credentials?: import("@smithy/types").AwsCredentialIdentity | import("@smithy/types").AwsCredentialIdentityProvider | undefined;
     signer?: import("@smithy/types").RequestSigner | ((authScheme?: import("@smithy/types").AuthScheme | undefined) => Promise<import("@smithy/types").RequestSigner>) | undefined;
     signingEscapePath?: boolean | undefined;
     systemClockOffset?: number | undefined;
     signingRegion?: string | undefined;
     signerConstructor?: (new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner) | undefined;
-    customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
 };

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/runtimeConfig.shared.d.ts

@@ -1,3 +1,6 @@
+import { AwsSdkSigV4Signer } from "@aws-sdk/core";
+import { NoAuthSigner } from "@smithy/core";
+import { IdentityProviderConfig } from "@smithy/types";
 import { SSOOIDCClientConfig } from "./SSOOIDCClient";
 /**
  * @internal
@@ -11,6 +14,16 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
         logger?: import("@smithy/types").Logger | undefined;
     }) => import("@smithy/types").EndpointV2;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
+    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
+        schemeId: string;
+        identityProvider: (ipc: IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | undefined;
+        signer: AwsSdkSigV4Signer;
+    } | {
+        schemeId: string;
+        identityProvider: (ipc: IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | (() => Promise<{}>);
+        signer: NoAuthSigner;
+    })[];
     logger: import("@smithy/types").Logger;
     serviceId: string;
     urlParser: import("@smithy/types").UrlParser;

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/SSOOIDCClient.d.ts

@@ -2,15 +2,10 @@ import {
   HostHeaderInputConfig,
   HostHeaderResolvedConfig,
 } from "@aws-sdk/middleware-host-header";
-import {
-  AwsAuthInputConfig,
-  AwsAuthResolvedConfig,
-} from "@aws-sdk/middleware-signing";
 import {
   UserAgentInputConfig,
   UserAgentResolvedConfig,
 } from "@aws-sdk/middleware-user-agent";
-import { Credentials as __Credentials } from "@aws-sdk/types";
 import {
   RegionInputConfig,
   RegionResolvedConfig,
@@ -31,6 +26,7 @@ import {
   SmithyResolvedConfiguration as __SmithyResolvedConfiguration,
 } from "@smithy/smithy-client";
 import {
+  AwsCredentialIdentityProvider,
   BodyLengthCalculator as __BodyLengthCalculator,
   CheckOptionalClientConfig as __CheckOptionalClientConfig,
   ChecksumConstructor as __ChecksumConstructor,
@@ -45,6 +41,10 @@ import {
   UrlParser as __UrlParser,
   UserAgent as __UserAgent,
 } from "@smithy/types";
+import {
+  HttpAuthSchemeInputConfig,
+  HttpAuthSchemeResolvedConfig,
+} from "./auth/httpAuthSchemeProvider";
 import {
   CreateTokenCommandInput,
   CreateTokenCommandOutput,
@@ -94,9 +94,9 @@ export interface ClientDefaults
   serviceId?: string;
   useDualstackEndpoint?: boolean | __Provider<boolean>;
   useFipsEndpoint?: boolean | __Provider<boolean>;
-  region?: string | __Provider<string>;
-  credentialDefaultProvider?: (input: any) => __Provider<__Credentials>;
   defaultUserAgentProvider?: Provider<__UserAgent>;
+  region?: string | __Provider<string>;
+  credentialDefaultProvider?: (input: any) => AwsCredentialIdentityProvider;
   maxAttempts?: number | __Provider<number>;
   retryMode?: string | __Provider<string>;
   logger?: __Logger;
@@ -111,8 +111,8 @@ export type SSOOIDCClientConfigType = Partial<
   EndpointInputConfig<EndpointParameters> &
   RetryInputConfig &
   HostHeaderInputConfig &
-  AwsAuthInputConfig &
   UserAgentInputConfig &
+  HttpAuthSchemeInputConfig &
   ClientInputEndpointParameters;
 export interface SSOOIDCClientConfig extends SSOOIDCClientConfigType {}
 export type SSOOIDCClientResolvedConfigType =
@@ -123,8 +123,8 @@ export type SSOOIDCClientResolvedConfigType =
     EndpointResolvedConfig<EndpointParameters> &
     RetryResolvedConfig &
     HostHeaderResolvedConfig &
-    AwsAuthResolvedConfig &
     UserAgentResolvedConfig &
+    HttpAuthSchemeResolvedConfig &
     ClientResolvedEndpointParameters;
 export interface SSOOIDCClientResolvedConfig
   extends SSOOIDCClientResolvedConfigType {}
@@ -139,4 +139,6 @@ export declare class SSOOIDCClient extends __Client<
     ...[configuration]: __CheckOptionalClientConfig<SSOOIDCClientConfig>
   );
   destroy(): void;
+  private getDefaultHttpAuthSchemeParametersProvider;
+  private getIdentityProviderConfigProvider;
 }

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/auth/httpAuthExtensionConfiguration.d.ts

@@ -0,0 +1,32 @@
+import {
+  AwsCredentialIdentity,
+  AwsCredentialIdentityProvider,
+  HttpAuthScheme,
+} from "@smithy/types";
+import { SSOOIDCHttpAuthSchemeProvider } from "./httpAuthSchemeProvider";
+export interface HttpAuthExtensionConfiguration {
+  setHttpAuthScheme(httpAuthScheme: HttpAuthScheme): void;
+  httpAuthSchemes(): HttpAuthScheme[];
+  setHttpAuthSchemeProvider(
+    httpAuthSchemeProvider: SSOOIDCHttpAuthSchemeProvider
+  ): void;
+  httpAuthSchemeProvider(): SSOOIDCHttpAuthSchemeProvider;
+  setCredentials(
+    credentials: AwsCredentialIdentity | AwsCredentialIdentityProvider
+  ): void;
+  credentials():
+    | AwsCredentialIdentity
+    | AwsCredentialIdentityProvider
+    | undefined;
+}
+export type HttpAuthRuntimeConfig = Partial<{
+  httpAuthSchemes: HttpAuthScheme[];
+  httpAuthSchemeProvider: SSOOIDCHttpAuthSchemeProvider;
+  credentials: AwsCredentialIdentity | AwsCredentialIdentityProvider;
+}>;
+export declare const getHttpAuthExtensionConfiguration: (
+  runtimeConfig: HttpAuthRuntimeConfig
+) => HttpAuthExtensionConfiguration;
+export declare const resolveHttpAuthRuntimeConfig: (
+  config: HttpAuthExtensionConfiguration
+) => HttpAuthRuntimeConfig;

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/auth/httpAuthSchemeProvider.d.ts

@@ -0,0 +1,44 @@
+import {
+  AwsSdkSigV4AuthInputConfig,
+  AwsSdkSigV4AuthResolvedConfig,
+  AwsSdkSigV4PreviouslyResolved,
+} from "@aws-sdk/core";
+import {
+  HandlerExecutionContext,
+  HttpAuthScheme,
+  HttpAuthSchemeParameters,
+  HttpAuthSchemeParametersProvider,
+  HttpAuthSchemeProvider,
+} from "@smithy/types";
+import { SSOOIDCClientResolvedConfig } from "../SSOOIDCClient";
+export interface SSOOIDCHttpAuthSchemeParameters
+  extends HttpAuthSchemeParameters {
+  region?: string;
+}
+export interface SSOOIDCHttpAuthSchemeParametersProvider
+  extends HttpAuthSchemeParametersProvider<
+    SSOOIDCClientResolvedConfig,
+    HandlerExecutionContext,
+    SSOOIDCHttpAuthSchemeParameters,
+    object
+  > {}
+export declare const defaultSSOOIDCHttpAuthSchemeParametersProvider: (
+  config: SSOOIDCClientResolvedConfig,
+  context: HandlerExecutionContext,
+  input: object
+) => Promise<SSOOIDCHttpAuthSchemeParameters>;
+export interface SSOOIDCHttpAuthSchemeProvider
+  extends HttpAuthSchemeProvider<SSOOIDCHttpAuthSchemeParameters> {}
+export declare const defaultSSOOIDCHttpAuthSchemeProvider: SSOOIDCHttpAuthSchemeProvider;
+export interface HttpAuthSchemeInputConfig extends AwsSdkSigV4AuthInputConfig {
+  httpAuthSchemes?: HttpAuthScheme[];
+  httpAuthSchemeProvider?: SSOOIDCHttpAuthSchemeProvider;
+}
+export interface HttpAuthSchemeResolvedConfig
+  extends AwsSdkSigV4AuthResolvedConfig {
+  readonly httpAuthSchemes: HttpAuthScheme[];
+  readonly httpAuthSchemeProvider: SSOOIDCHttpAuthSchemeProvider;
+}
+export declare const resolveHttpAuthSchemeConfig: <T>(
+  config: T & HttpAuthSchemeInputConfig & AwsSdkSigV4PreviouslyResolved
+) => T & HttpAuthSchemeResolvedConfig;

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/extensionConfiguration.d.ts

@@ -1,7 +1,9 @@
 import { AwsRegionExtensionConfiguration } from "@aws-sdk/types";
 import { HttpHandlerExtensionConfiguration } from "@smithy/protocol-http";
 import { DefaultExtensionConfiguration } from "@smithy/types";
+import { HttpAuthExtensionConfiguration } from "./auth/httpAuthExtensionConfiguration";
 export interface SSOOIDCExtensionConfiguration
   extends HttpHandlerExtensionConfiguration,
     DefaultExtensionConfiguration,
-    AwsRegionExtensionConfiguration {}
+    AwsRegionExtensionConfiguration,
+    HttpAuthExtensionConfiguration {}

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.browser.d.ts

@@ -8,7 +8,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
   credentialDefaultProvider: (
     input: any
-  ) => import("@smithy/types").Provider<import("@aws-sdk/types").Credentials>;
+  ) => import("@smithy/types").AwsCredentialIdentityProvider;
   defaultUserAgentProvider: import("@smithy/types").Provider<
     import("@smithy/types").UserAgent
   >;
@@ -72,11 +72,37 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     | import("@smithy/types").RetryStrategy
     | import("@smithy/types").RetryStrategyV2
     | undefined;
+  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+  httpAuthSchemes:
+    | import("@smithy/types").HttpAuthScheme[]
+    | (
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | undefined;
+            signer: import("@aws-sdk/core").AwsSdkSigV4Signer;
+          }
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | (() => Promise<{}>);
+            signer: import("@smithy/core").NoAuthSigner;
+          }
+      )[];
+  httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
   credentials?:
     | import("@smithy/types").AwsCredentialIdentity
-    | import("@smithy/types").Provider<
-        import("@smithy/types").AwsCredentialIdentity
-      >
+    | import("@smithy/types").AwsCredentialIdentityProvider
     | undefined;
   signer?:
     | import("@smithy/types").RequestSigner
@@ -93,5 +119,4 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
           import("@smithy/signature-v4").SignatureV4CryptoInit
       ) => import("@smithy/types").RequestSigner)
     | undefined;
-  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
 };

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.d.ts

@@ -70,11 +70,37 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     | import("@smithy/types").RetryStrategy
     | import("@smithy/types").RetryStrategyV2
     | undefined;
+  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+  httpAuthSchemes:
+    | import("@smithy/types").HttpAuthScheme[]
+    | (
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | undefined;
+            signer: import("@aws-sdk/core").AwsSdkSigV4Signer;
+          }
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | (() => Promise<{}>);
+            signer: import("@smithy/core").NoAuthSigner;
+          }
+      )[];
+  httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
   credentials?:
     | import("@smithy/types").AwsCredentialIdentity
-    | import("@smithy/types").Provider<
-        import("@smithy/types").AwsCredentialIdentity
-      >
+    | import("@smithy/types").AwsCredentialIdentityProvider
     | undefined;
   signer?:
     | import("@smithy/types").RequestSigner
@@ -91,5 +117,4 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
           import("@smithy/signature-v4").SignatureV4CryptoInit
       ) => import("@smithy/types").RequestSigner)
     | undefined;
-  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
 };

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.native.d.ts

@@ -29,13 +29,13 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   serviceId: string;
   useDualstackEndpoint: boolean | import("@smithy/types").Provider<boolean>;
   useFipsEndpoint: boolean | import("@smithy/types").Provider<boolean>;
-  region: string | import("@smithy/types").Provider<any>;
-  credentialDefaultProvider: (
-    input: any
-  ) => import("@smithy/types").Provider<import("@aws-sdk/types").Credentials>;
   defaultUserAgentProvider: import("@smithy/types").Provider<
     import("@smithy/types").UserAgent
   >;
+  region: string | import("@smithy/types").Provider<any>;
+  credentialDefaultProvider: (
+    input: any
+  ) => import("@smithy/types").AwsCredentialIdentityProvider;
   maxAttempts: number | import("@smithy/types").Provider<number>;
   retryMode: string | import("@smithy/types").Provider<string>;
   logger: import("@smithy/types").Logger;
@@ -63,11 +63,37 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     | import("@smithy/types").RetryStrategy
     | import("@smithy/types").RetryStrategyV2
     | undefined;
+  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+  httpAuthSchemes:
+    | import("@smithy/types").HttpAuthScheme[]
+    | (
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | undefined;
+            signer: import("@aws-sdk/core").AwsSdkSigV4Signer;
+          }
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: import("@smithy/types").IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | (() => Promise<{}>);
+            signer: import("@smithy/core").NoAuthSigner;
+          }
+      )[];
+  httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
   credentials?:
     | import("@smithy/types").AwsCredentialIdentity
-    | import("@smithy/types").Provider<
-        import("@smithy/types").AwsCredentialIdentity
-      >
+    | import("@smithy/types").AwsCredentialIdentityProvider
     | undefined;
   signer?:
     | import("@smithy/types").RequestSigner
@@ -84,5 +110,4 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
           import("@smithy/signature-v4").SignatureV4CryptoInit
       ) => import("@smithy/types").RequestSigner)
     | undefined;
-  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
 };

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/runtimeConfig.shared.d.ts

@@ -1,3 +1,6 @@
+import { AwsSdkSigV4Signer } from "@aws-sdk/core";
+import { NoAuthSigner } from "@smithy/core";
+import { IdentityProviderConfig } from "@smithy/types";
 import { SSOOIDCClientConfig } from "./SSOOIDCClient";
 export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   apiVersion: string;
@@ -11,6 +14,33 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     }
   ) => import("@smithy/types").EndpointV2;
   extensions: import("./runtimeExtensions").RuntimeExtension[];
+  httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").SSOOIDCHttpAuthSchemeProvider;
+  httpAuthSchemes:
+    | import("@smithy/types").HttpAuthScheme[]
+    | (
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | undefined;
+            signer: AwsSdkSigV4Signer;
+          }
+        | {
+            schemeId: string;
+            identityProvider: (
+              ipc: IdentityProviderConfig
+            ) =>
+              | import("@smithy/types").IdentityProvider<
+                  import("@smithy/types").Identity
+                >
+              | (() => Promise<{}>);
+            signer: NoAuthSigner;
+          }
+      )[];
   logger: import("@smithy/types").Logger;
   serviceId: string;
   urlParser: import("@smithy/types").UrlParser;

package/node_modules/@aws-sdk/client-sso-oidc/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso-oidc",
   "description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
-  "version": "3.507.0",
+  "version": "3.513.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sso-oidc",
@@ -20,20 +20,19 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.507.0",
-    "@aws-sdk/core": "3.496.0",
-    "@aws-sdk/middleware-host-header": "3.502.0",
-    "@aws-sdk/middleware-logger": "3.502.0",
-    "@aws-sdk/middleware-recursion-detection": "3.502.0",
-    "@aws-sdk/middleware-signing": "3.502.0",
-    "@aws-sdk/middleware-user-agent": "3.502.0",
-    "@aws-sdk/region-config-resolver": "3.502.0",
-    "@aws-sdk/types": "3.502.0",
-    "@aws-sdk/util-endpoints": "3.502.0",
-    "@aws-sdk/util-user-agent-browser": "3.502.0",
-    "@aws-sdk/util-user-agent-node": "3.502.0",
+    "@aws-sdk/client-sts": "3.513.0",
+    "@aws-sdk/core": "3.513.0",
+    "@aws-sdk/middleware-host-header": "3.511.0",
+    "@aws-sdk/middleware-logger": "3.511.0",
+    "@aws-sdk/middleware-recursion-detection": "3.511.0",
+    "@aws-sdk/middleware-user-agent": "3.511.0",
+    "@aws-sdk/region-config-resolver": "3.511.0",
+    "@aws-sdk/types": "3.511.0",
+    "@aws-sdk/util-endpoints": "3.511.0",
+    "@aws-sdk/util-user-agent-browser": "3.511.0",
+    "@aws-sdk/util-user-agent-node": "3.511.0",
     "@smithy/config-resolver": "^2.1.1",
-    "@smithy/core": "^1.3.1",
+    "@smithy/core": "^1.3.2",
     "@smithy/fetch-http-handler": "^2.4.1",
     "@smithy/hash-node": "^2.1.1",
     "@smithy/invalid-dependency": "^2.1.1",
@@ -52,8 +51,9 @@
     "@smithy/util-body-length-browser": "^2.1.1",
     "@smithy/util-body-length-node": "^2.2.1",
     "@smithy/util-defaults-mode-browser": "^2.1.1",
-    "@smithy/util-defaults-mode-node": "^2.1.1",
+    "@smithy/util-defaults-mode-node": "^2.2.0",
     "@smithy/util-endpoints": "^1.1.1",
+    "@smithy/util-middleware": "^2.1.1",
     "@smithy/util-retry": "^2.1.1",
     "@smithy/util-utf8": "^2.1.1",
     "tslib": "^2.5.0"
@@ -86,7 +86,7 @@
   },
   "license": "Apache-2.0",
   "peerDependencies": {
-    "@aws-sdk/credential-provider-node": "^3.507.0"
+    "@aws-sdk/credential-provider-node": "^3.513.0"
   },
   "browser": {
     "./dist-es/runtimeConfig": "./dist-es/runtimeConfig.browser"

package/node_modules/@aws-sdk/client-sts/dist-cjs/index.js

@@ -1334,34 +1334,54 @@ var STS = _STS;
 // src/index.ts
 var import_EndpointParameters9 = require("./endpoint/EndpointParameters");
 var import_runtimeExtensions = require("././runtimeExtensions");
-var import_util_endpoints = require("@aws-sdk/util-endpoints");
+
 
 // src/defaultStsRoleAssumers.ts
+var import_util_endpoints = require("@aws-sdk/util-endpoints");
 var ASSUME_ROLE_DEFAULT_REGION = "us-east-1";
-var decorateDefaultRegion = /* @__PURE__ */ __name((region) => {
-  if (typeof region !== "function") {
-    return region === void 0 ? ASSUME_ROLE_DEFAULT_REGION : region;
-  }
-  return async () => {
-    try {
-      return await region();
-    } catch (e) {
-      return ASSUME_ROLE_DEFAULT_REGION;
-    }
-  };
-}, "decorateDefaultRegion");
+var resolveRegion = /* @__PURE__ */ __name(async (_region, _parentRegion, credentialProviderLogger) => {
+  var _a2, _b;
+  const region = typeof _region === "function" ? await _region() : _region;
+  const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
+  if (!parentRegion || (0, import_util_endpoints.partition)(parentRegion).name === "aws") {
+    (_a2 = credentialProviderLogger == null ? void 0 : credentialProviderLogger.debug) == null ? void 0 : _a2.call(
+      credentialProviderLogger,
+      "@aws-sdk/client-sts::resolveRegion",
+      "accepting first of:",
+      `${region} (provider)`,
+      `${ASSUME_ROLE_DEFAULT_REGION} (STS default)`
+    );
+    return region ?? ASSUME_ROLE_DEFAULT_REGION;
+  } else {
+    (_b = credentialProviderLogger == null ? void 0 : credentialProviderLogger.debug) == null ? void 0 : _b.call(
+      credentialProviderLogger,
+      "@aws-sdk/client-sts::resolveRegion",
+      "accepting first of:",
+      `${region} (provider)`,
+      `${parentRegion} (parent client)`,
+      `${ASSUME_ROLE_DEFAULT_REGION} (STS default)`
+    );
+    return region ?? parentRegion ?? ASSUME_ROLE_DEFAULT_REGION;
+  }
+}, "resolveRegion");
 var getDefaultRoleAssumer = /* @__PURE__ */ __name((stsOptions, stsClientCtor) => {
   let stsClient;
   let closureSourceCreds;
   return async (sourceCreds, params) => {
+    var _a2;
     closureSourceCreds = sourceCreds;
     if (!stsClient) {
-      const { logger, region, requestHandler } = stsOptions;
+      const { logger, region, requestHandler, credentialProviderLogger } = stsOptions;
+      const resolvedRegion = await resolveRegion(
+        region,
+        (_a2 = stsOptions == null ? void 0 : stsOptions.parentClientConfig) == null ? void 0 : _a2.region,
+        credentialProviderLogger
+      );
       stsClient = new stsClientCtor({
         logger,
         // A hack to make sts client uses the credential in current closure.
         credentialDefaultProvider: () => async () => closureSourceCreds,
-        region: decorateDefaultRegion(region || stsOptions.region),
+        region: resolvedRegion,
         ...requestHandler ? { requestHandler } : {}
       });
     }
@@ -1382,11 +1402,17 @@ var getDefaultRoleAssumer = /* @__PURE__ */ __name((stsOptions, stsClientCtor) =
 var getDefaultRoleAssumerWithWebIdentity = /* @__PURE__ */ __name((stsOptions, stsClientCtor) => {
   let stsClient;
   return async (params) => {
+    var _a2;
     if (!stsClient) {
-      const { logger, region, requestHandler } = stsOptions;
+      const { logger, region, requestHandler, credentialProviderLogger } = stsOptions;
+      const resolvedRegion = await resolveRegion(
+        region,
+        (_a2 = stsOptions == null ? void 0 : stsOptions.parentClientConfig) == null ? void 0 : _a2.region,
+        credentialProviderLogger
+      );
       stsClient = new stsClientCtor({
         logger,
-        region: decorateDefaultRegion(region || stsOptions.region),
+        region: resolvedRegion,
         ...requestHandler ? { requestHandler } : {}
       });
     }

package/node_modules/@aws-sdk/client-sts/dist-es/defaultStsRoleAssumers.js

@@ -1,18 +1,18 @@
+import { partition } from "@aws-sdk/util-endpoints";
 import { AssumeRoleCommand } from "./commands/AssumeRoleCommand";
 import { AssumeRoleWithWebIdentityCommand, } from "./commands/AssumeRoleWithWebIdentityCommand";
 const ASSUME_ROLE_DEFAULT_REGION = "us-east-1";
-const decorateDefaultRegion = (region) => {
-    if (typeof region !== "function") {
-        return region === undefined ? ASSUME_ROLE_DEFAULT_REGION : region;
+const resolveRegion = async (_region, _parentRegion, credentialProviderLogger) => {
+    const region = typeof _region === "function" ? await _region() : _region;
+    const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
+    if (!parentRegion || partition(parentRegion).name === "aws") {
+        credentialProviderLogger?.debug?.("@aws-sdk/client-sts::resolveRegion", "accepting first of:", `${region} (provider)`, `${ASSUME_ROLE_DEFAULT_REGION} (STS default)`);
+        return region ?? ASSUME_ROLE_DEFAULT_REGION;
+    }
+    else {
+        credentialProviderLogger?.debug?.("@aws-sdk/client-sts::resolveRegion", "accepting first of:", `${region} (provider)`, `${parentRegion} (parent client)`, `${ASSUME_ROLE_DEFAULT_REGION} (STS default)`);
+        return region ?? parentRegion ?? ASSUME_ROLE_DEFAULT_REGION;
     }
-    return async () => {
-        try {
-            return await region();
-        }
-        catch (e) {
-            return ASSUME_ROLE_DEFAULT_REGION;
-        }
-    };
 };
 export const getDefaultRoleAssumer = (stsOptions, stsClientCtor) => {
     let stsClient;
@@ -20,11 +20,12 @@ export const getDefaultRoleAssumer = (stsOptions, stsClientCtor) => {
     return async (sourceCreds, params) => {
         closureSourceCreds = sourceCreds;
         if (!stsClient) {
-            const { logger, region, requestHandler } = stsOptions;
+            const { logger, region, requestHandler, credentialProviderLogger } = stsOptions;
+            const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger);
             stsClient = new stsClientCtor({
                 logger,
                 credentialDefaultProvider: () => async () => closureSourceCreds,
-                region: decorateDefaultRegion(region || stsOptions.region),
+                region: resolvedRegion,
                 ...(requestHandler ? { requestHandler } : {}),
             });
         }
@@ -45,10 +46,11 @@ export const getDefaultRoleAssumerWithWebIdentity = (stsOptions, stsClientCtor)
     let stsClient;
     return async (params) => {
         if (!stsClient) {
-            const { logger, region, requestHandler } = stsOptions;
+            const { logger, region, requestHandler, credentialProviderLogger } = stsOptions;
+            const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger);
             stsClient = new stsClientCtor({
                 logger,
-                region: decorateDefaultRegion(region || stsOptions.region),
+                region: resolvedRegion,
                 ...(requestHandler ? { requestHandler } : {}),
             });
         }