@digipair/skill-s3 0.136.3 → 0.136.4

package/dist/index.esm4.js

@@ -1,18 +1,603 @@
-import { s as setCredentialFeature, C as CredentialsProviderError } from './index.esm3.js';
-import { readFileSync } from 'node:fs';
-import { e as externalDataInterceptor } from './externalDataInterceptor.esm.js';
-import 'node:crypto';
-import 'node:path';
-import 'node:os';
+import { parse } from 'url';
+import { Buffer } from 'buffer';
+import { request } from 'http';
+import { P as ProviderError, C as CredentialsProviderError, p as parseUrl, l as loadConfig } from './index.esm2.js';
+import 'path';
+import 'os';
 import 'node:fs/promises';
+import 'stream';
+import 'crypto';
 import 'node:stream';
-import 'node:process';
-import 'buffer';
-import 'node:https';
-import 'node:zlib';
-import './getSSOTokenFromFile.esm.js';
+import 'https';
+import 'process';
+import 'node:fs';
+import 'zlib';
 
-function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
+function _define_property$5(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$4(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$5(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$3(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$3(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$3(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function httpRequest(options) {
+    return new Promise(function(resolve, reject) {
+        var _options_hostname;
+        var req = request(_object_spread_props$3(_object_spread$4({
+            method: "GET"
+        }, options), {
+            hostname: (_options_hostname = options.hostname) === null || _options_hostname === void 0 ? void 0 : _options_hostname.replace(/^\[(.+)\]$/, "$1")
+        }));
+        req.on("error", function(err) {
+            reject(Object.assign(new ProviderError("Unable to connect to instance metadata service"), err));
+            req.destroy();
+        });
+        req.on("timeout", function() {
+            reject(new ProviderError("TimeoutError from instance metadata service"));
+            req.destroy();
+        });
+        req.on("response", function(res) {
+            var _res_statusCode = res.statusCode, statusCode = _res_statusCode === void 0 ? 400 : _res_statusCode;
+            if (statusCode < 200 || 300 <= statusCode) {
+                reject(Object.assign(new ProviderError("Error response received from instance metadata service"), {
+                    statusCode: statusCode
+                }));
+                req.destroy();
+            }
+            var chunks = [];
+            res.on("data", function(chunk) {
+                chunks.push(chunk);
+            });
+            res.on("end", function() {
+                resolve(Buffer.concat(chunks));
+                req.destroy();
+            });
+        });
+        req.end();
+    });
+}
+
+function _define_property$4(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$3(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$4(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function _type_of$1(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+var isImdsCredentials = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$1(arg)) === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string";
+};
+var fromImdsCredentials = function(creds) {
+    return _object_spread$3({
+        accessKeyId: creds.AccessKeyId,
+        secretAccessKey: creds.SecretAccessKey,
+        sessionToken: creds.Token,
+        expiration: new Date(creds.Expiration)
+    }, creds.AccountId && {
+        accountId: creds.AccountId
+    });
+};
+
+var DEFAULT_TIMEOUT = 1000;
+var DEFAULT_MAX_RETRIES = 0;
+var providerConfigFromInit = function(param) {
+    var _param_maxRetries = param.maxRetries, maxRetries = _param_maxRetries === void 0 ? DEFAULT_MAX_RETRIES : _param_maxRetries, _param_timeout = param.timeout, timeout = _param_timeout === void 0 ? DEFAULT_TIMEOUT : _param_timeout;
+    return {
+        maxRetries: maxRetries,
+        timeout: timeout
+    };
+};
+
+var retry = function(toRetry, maxRetries) {
+    var promise = toRetry();
+    for(var i = 0; i < maxRetries; i++){
+        promise = promise.catch(toRetry);
+    }
+    return promise;
+};
+
+function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$3(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$3(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$2(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$3(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$2(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$2(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$2(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _ts_generator$3(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+var ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+var ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+var fromContainerMetadata = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    var _providerConfigFromInit = providerConfigFromInit(init), timeout = _providerConfigFromInit.timeout, maxRetries = _providerConfigFromInit.maxRetries;
+    return function() {
+        return retry(/*#__PURE__*/ _async_to_generator$3(function() {
+            var requestOptions, credsResponse, _;
+            return _ts_generator$3(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        return [
+                            4,
+                            getCmdsUri({
+                                logger: init.logger
+                            })
+                        ];
+                    case 1:
+                        requestOptions = _state.sent();
+                        _ = JSON.parse;
+                        return [
+                            4,
+                            requestFromEcsImds(timeout, requestOptions)
+                        ];
+                    case 2:
+                        credsResponse = _.apply(JSON, [
+                            _state.sent()
+                        ]);
+                        if (!isImdsCredentials(credsResponse)) {
+                            throw new CredentialsProviderError("Invalid response received from instance metadata service.", {
+                                logger: init.logger
+                            });
+                        }
+                        return [
+                            2,
+                            fromImdsCredentials(credsResponse)
+                        ];
+                }
+            });
+        }), maxRetries);
+    };
+};
+var requestFromEcsImds = function() {
+    var _ref = _async_to_generator$3(function(timeout, options) {
+        var buffer;
+        return _ts_generator$3(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    if (process.env[ENV_CMDS_AUTH_TOKEN]) {
+                        options.headers = _object_spread_props$2(_object_spread$2({}, options.headers), {
+                            Authorization: process.env[ENV_CMDS_AUTH_TOKEN]
+                        });
+                    }
+                    return [
+                        4,
+                        httpRequest(_object_spread_props$2(_object_spread$2({}, options), {
+                            timeout: timeout
+                        }))
+                    ];
+                case 1:
+                    buffer = _state.sent();
+                    return [
+                        2,
+                        buffer.toString()
+                    ];
+            }
+        });
+    });
+    return function requestFromEcsImds(timeout, options) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var CMDS_IP = "169.254.170.2";
+var GREENGRASS_HOSTS = {
+    localhost: true,
+    "127.0.0.1": true
+};
+var GREENGRASS_PROTOCOLS = {
+    "http:": true,
+    "https:": true
+};
+var getCmdsUri = function() {
+    var _ref = _async_to_generator$3(function(param) {
+        var logger, parsed;
+        return _ts_generator$3(this, function(_state) {
+            logger = param.logger;
+            if (process.env[ENV_CMDS_RELATIVE_URI]) {
+                return [
+                    2,
+                    {
+                        hostname: CMDS_IP,
+                        path: process.env[ENV_CMDS_RELATIVE_URI]
+                    }
+                ];
+            }
+            if (process.env[ENV_CMDS_FULL_URI]) {
+                parsed = parse(process.env[ENV_CMDS_FULL_URI]);
+                if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
+                    throw new CredentialsProviderError("".concat(parsed.hostname, " is not a valid container metadata service hostname"), {
+                        tryNextLink: false,
+                        logger: logger
+                    });
+                }
+                if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
+                    throw new CredentialsProviderError("".concat(parsed.protocol, " is not a valid container metadata service protocol"), {
+                        tryNextLink: false,
+                        logger: logger
+                    });
+                }
+                return [
+                    2,
+                    _object_spread_props$2(_object_spread$2({}, parsed), {
+                        port: parsed.port ? parseInt(parsed.port, 10) : undefined
+                    })
+                ];
+            }
+            throw new CredentialsProviderError("The container metadata credential provider cannot be used unless" + " the ".concat(ENV_CMDS_RELATIVE_URI, " or ").concat(ENV_CMDS_FULL_URI, " environment") + " variable is set", {
+                tryNextLink: false,
+                logger: logger
+            });
+        });
+    });
+    return function getCmdsUri(_) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function _assert_this_initialized(self) {
+    if (self === void 0) {
+        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
+    }
+    return self;
+}
+function _class_call_check(instance, Constructor) {
+    if (!(instance instanceof Constructor)) {
+        throw new TypeError("Cannot call a class as a function");
+    }
+}
+function _define_property$2(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _get_prototype_of(o) {
+    _get_prototype_of = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
+        return o.__proto__ || Object.getPrototypeOf(o);
+    };
+    return _get_prototype_of(o);
+}
+function _inherits(subClass, superClass) {
+    if (typeof superClass !== "function" && superClass !== null) {
+        throw new TypeError("Super expression must either be null or a function");
+    }
+    subClass.prototype = Object.create(superClass && superClass.prototype, {
+        constructor: {
+            value: subClass,
+            writable: true,
+            configurable: true
+        }
+    });
+    if (superClass) _set_prototype_of(subClass, superClass);
+}
+function _possible_constructor_return(self, call) {
+    if (call && (_type_of(call) === "object" || typeof call === "function")) {
+        return call;
+    }
+    return _assert_this_initialized(self);
+}
+function _set_prototype_of(o, p) {
+    _set_prototype_of = Object.setPrototypeOf || function setPrototypeOf(o, p) {
+        o.__proto__ = p;
+        return o;
+    };
+    return _set_prototype_of(o, p);
+}
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _is_native_reflect_construct() {
+    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
+    if (Reflect.construct.sham) return false;
+    if (typeof Proxy === "function") return true;
+    try {
+        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
+        return true;
+    } catch (e) {
+        return false;
+    }
+}
+function _create_super(Derived) {
+    var hasNativeReflectConstruct = _is_native_reflect_construct();
+    return function _createSuperInternal() {
+        var Super = _get_prototype_of(Derived), result;
+        if (hasNativeReflectConstruct) {
+            var NewTarget = _get_prototype_of(this).constructor;
+            result = Reflect.construct(Super, arguments, NewTarget);
+        } else {
+            result = Super.apply(this, arguments);
+        }
+        return _possible_constructor_return(this, result);
+    };
+}
+var InstanceMetadataV1FallbackError = /*#__PURE__*/ function(CredentialsProviderError) {
+    _inherits(InstanceMetadataV1FallbackError, CredentialsProviderError);
+    var _super = _create_super(InstanceMetadataV1FallbackError);
+    function InstanceMetadataV1FallbackError(message) {
+        var tryNextLink = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : true;
+        _class_call_check(this, InstanceMetadataV1FallbackError);
+        var _this;
+        _this = _super.call(this, message, tryNextLink);
+        _define_property$2(_assert_this_initialized(_this), "tryNextLink", void 0);
+        _define_property$2(_assert_this_initialized(_this), "name", "InstanceMetadataV1FallbackError");
+        _this.tryNextLink = tryNextLink;
+        Object.setPrototypeOf(_assert_this_initialized(_this), InstanceMetadataV1FallbackError.prototype);
+        return _this;
+    }
+    return InstanceMetadataV1FallbackError;
+}(CredentialsProviderError);
+
+var Endpoint;
+(function(Endpoint) {
+    Endpoint["IPv4"] = "http://169.254.169.254";
+    Endpoint["IPv6"] = "http://[fd00:ec2::254]";
+})(Endpoint || (Endpoint = {}));
+
+var ENV_ENDPOINT_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT";
+var CONFIG_ENDPOINT_NAME = "ec2_metadata_service_endpoint";
+var ENDPOINT_CONFIG_OPTIONS = {
+    environmentVariableSelector: function(env) {
+        return env[ENV_ENDPOINT_NAME];
+    },
+    configFileSelector: function(profile) {
+        return profile[CONFIG_ENDPOINT_NAME];
+    },
+    default: undefined
+};
+
+var EndpointMode;
+(function(EndpointMode) {
+    EndpointMode["IPv4"] = "IPv4";
+    EndpointMode["IPv6"] = "IPv6";
+})(EndpointMode || (EndpointMode = {}));
+
+var ENV_ENDPOINT_MODE_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE";
+var CONFIG_ENDPOINT_MODE_NAME = "ec2_metadata_service_endpoint_mode";
+var ENDPOINT_MODE_CONFIG_OPTIONS = {
+    environmentVariableSelector: function(env) {
+        return env[ENV_ENDPOINT_MODE_NAME];
+    },
+    configFileSelector: function(profile) {
+        return profile[CONFIG_ENDPOINT_MODE_NAME];
+    },
+    default: EndpointMode.IPv4
+};
+
+function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -26,21 +611,200 @@ function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1(fn) {
+function _async_to_generator$2(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
+function _ts_generator$2(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var getInstanceMetadataEndpoint = function() {
+    var _ref = _async_to_generator$2(function() {
+        var _tmp;
+        return _ts_generator$2(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        getFromEndpointConfig()
+                    ];
+                case 1:
+                    _tmp = _state.sent();
+                    if (_tmp) return [
+                        3,
+                        3
+                    ];
+                    return [
+                        4,
+                        getFromEndpointModeConfig()
+                    ];
+                case 2:
+                    _tmp = _state.sent();
+                    _state.label = 3;
+                case 3:
+                    return [
+                        2,
+                        parseUrl.apply(void 0, [
+                            _tmp
+                        ])
+                    ];
+            }
+        });
+    });
+    return function getInstanceMetadataEndpoint() {
+        return _ref.apply(this, arguments);
+    };
+}();
+var getFromEndpointConfig = function() {
+    var _ref = _async_to_generator$2(function() {
+        return _ts_generator$2(this, function(_state) {
+            return [
+                2,
+                loadConfig(ENDPOINT_CONFIG_OPTIONS)()
+            ];
+        });
+    });
+    return function getFromEndpointConfig() {
+        return _ref.apply(this, arguments);
+    };
+}();
+var getFromEndpointModeConfig = function() {
+    var _ref = _async_to_generator$2(function() {
+        var endpointMode;
+        return _ts_generator$2(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        loadConfig(ENDPOINT_MODE_CONFIG_OPTIONS)()
+                    ];
+                case 1:
+                    endpointMode = _state.sent();
+                    switch(endpointMode){
+                        case EndpointMode.IPv4:
+                            return [
+                                2,
+                                Endpoint.IPv4
+                            ];
+                        case EndpointMode.IPv6:
+                            return [
+                                2,
+                                Endpoint.IPv6
+                            ];
+                        default:
+                            throw new Error("Unsupported endpoint mode: ".concat(endpointMode, ".") + " Select from ".concat(Object.values(EndpointMode)));
+                    }
+            }
+        });
+    });
+    return function getFromEndpointModeConfig() {
+        return _ref.apply(this, arguments);
+    };
+}();
+
 function _define_property$1(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -88,6 +852,51 @@ function _object_spread_props$1(target, source) {
     }
     return target;
 }
+var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
+var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
+var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
+var getExtendedInstanceMetadataCredentials = function(credentials, logger) {
+    var refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
+    var newExpiration = new Date(Date.now() + refreshInterval * 1000);
+    logger.warn("Attempting credential expiration extension due to a credential service availability issue. A refresh of these " + "credentials will be attempted after ".concat(new Date(newExpiration), ".\nFor more information, please visit: ") + STATIC_STABILITY_DOC_URL);
+    var _credentials_originalExpiration;
+    var originalExpiration = (_credentials_originalExpiration = credentials.originalExpiration) !== null && _credentials_originalExpiration !== void 0 ? _credentials_originalExpiration : credentials.expiration;
+    return _object_spread_props$1(_object_spread$1({}, credentials, originalExpiration ? {
+        originalExpiration: originalExpiration
+    } : {}), {
+        expiration: newExpiration
+    });
+};
+
+function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$1(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
 function _ts_generator$1(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
@@ -183,51 +992,55 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var fromWebToken = function(init) {
-    return function() {
-        var _ref = _async_to_generator$1(function(awsIdentityProperties) {
-            var _init_logger, roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds, roleAssumerWithWebIdentity, getDefaultRoleAssumerWithWebIdentity;
-            return _ts_generator$1(this, function(_state) {
-                switch(_state.label){
-                    case 0:
-                        (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
-                        roleArn = init.roleArn, roleSessionName = init.roleSessionName, webIdentityToken = init.webIdentityToken, providerId = init.providerId, policyArns = init.policyArns, policy = init.policy, durationSeconds = init.durationSeconds;
-                        roleAssumerWithWebIdentity = init.roleAssumerWithWebIdentity;
-                        if (!!roleAssumerWithWebIdentity) return [
-                            3,
-                            2
-                        ];
-                        return [
-                            4,
-                            import('./index.esm5.js')
-                        ];
-                    case 1:
-                        getDefaultRoleAssumerWithWebIdentity = _state.sent().getDefaultRoleAssumerWithWebIdentity;
-                        roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity(_object_spread_props$1(_object_spread$1({}, init.clientConfig), {
-                            credentialProviderLogger: init.logger,
-                            parentClientConfig: _object_spread$1({}, awsIdentityProperties === null || awsIdentityProperties === void 0 ? void 0 : awsIdentityProperties.callerClientConfig, init.parentClientConfig)
-                        }), init.clientPlugins);
-                        _state.label = 2;
-                    case 2:
-                        return [
-                            2,
-                            roleAssumerWithWebIdentity({
-                                RoleArn: roleArn,
-                                RoleSessionName: roleSessionName !== null && roleSessionName !== void 0 ? roleSessionName : "aws-sdk-js-session-".concat(Date.now()),
-                                WebIdentityToken: webIdentityToken,
-                                ProviderId: providerId,
-                                PolicyArns: policyArns,
-                                Policy: policy,
-                                DurationSeconds: durationSeconds
-                            })
-                        ];
-                }
-            });
+var staticStabilityProvider = function(provider) {
+    var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
+    var logger = (options === null || options === void 0 ? void 0 : options.logger) || console;
+    var pastCredentials;
+    return /*#__PURE__*/ _async_to_generator$1(function() {
+        var credentials, e;
+        return _ts_generator$1(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    return [
+                        4,
+                        provider()
+                    ];
+                case 1:
+                    credentials = _state.sent();
+                    if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
+                        credentials = getExtendedInstanceMetadataCredentials(credentials, logger);
+                    }
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    e = _state.sent();
+                    if (pastCredentials) {
+                        logger.warn("Credential renew failed: ", e);
+                        credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger);
+                    } else {
+                        throw e;
+                    }
+                    return [
+                        3,
+                        3
+                    ];
+                case 3:
+                    pastCredentials = credentials;
+                    return [
+                        2,
+                        credentials
+                    ];
+            }
         });
-        return function(awsIdentityProperties) {
-            return _ref.apply(this, arguments);
-        };
-    }();
+    });
 };
 
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
@@ -401,52 +1214,305 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE";
-var ENV_ROLE_ARN = "AWS_ROLE_ARN";
-var ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME";
-var fromTokenFile = function() {
+var IMDS_PATH = "/latest/meta-data/iam/security-credentials/";
+var IMDS_TOKEN_PATH = "/latest/api/token";
+var AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED";
+var PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled";
+var X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token";
+var fromInstanceMetadata = function() {
     var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
-    return function() {
-        var _ref = _async_to_generator(function(awsIdentityProperties) {
-            var _init_logger, _externalDataInterceptor_getTokenRecord, _init_webIdentityTokenFile, webIdentityTokenFile, _init_roleArn, roleArn, _init_roleSessionName, roleSessionName, _externalDataInterceptor_getTokenRecord_webIdentityTokenFile, credentials;
+    return staticStabilityProvider(getInstanceMetadataProvider(init), {
+        logger: init.logger
+    });
+};
+var getInstanceMetadataProvider = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    var disableFetchToken = false;
+    var logger = init.logger, profile = init.profile;
+    var _providerConfigFromInit = providerConfigFromInit(init), timeout = _providerConfigFromInit.timeout, maxRetries = _providerConfigFromInit.maxRetries;
+    var getCredentials = function() {
+        var _ref = _async_to_generator(function(maxRetries, options) {
+            var _options_headers, isImdsV1Fallback, fallbackBlockedFromProfile, fallbackBlockedFromProcessEnv, configValue, causes, imdsProfile;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
-                        (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
-                        webIdentityTokenFile = (_init_webIdentityTokenFile = init === null || init === void 0 ? void 0 : init.webIdentityTokenFile) !== null && _init_webIdentityTokenFile !== void 0 ? _init_webIdentityTokenFile : process.env[ENV_TOKEN_FILE];
-                        roleArn = (_init_roleArn = init === null || init === void 0 ? void 0 : init.roleArn) !== null && _init_roleArn !== void 0 ? _init_roleArn : process.env[ENV_ROLE_ARN];
-                        roleSessionName = (_init_roleSessionName = init === null || init === void 0 ? void 0 : init.roleSessionName) !== null && _init_roleSessionName !== void 0 ? _init_roleSessionName : process.env[ENV_ROLE_SESSION_NAME];
-                        if (!webIdentityTokenFile || !roleArn) {
-                            throw new CredentialsProviderError("Web identity configuration not specified", {
-                                logger: init.logger
-                            });
-                        }
+                        isImdsV1Fallback = disableFetchToken || ((_options_headers = options.headers) === null || _options_headers === void 0 ? void 0 : _options_headers[X_AWS_EC2_METADATA_TOKEN]) == null;
+                        if (!isImdsV1Fallback) return [
+                            3,
+                            2
+                        ];
+                        fallbackBlockedFromProfile = false;
+                        fallbackBlockedFromProcessEnv = false;
                         return [
                             4,
-                            fromWebToken(_object_spread_props(_object_spread({}, init), {
-                                webIdentityToken: (_externalDataInterceptor_getTokenRecord_webIdentityTokenFile = externalDataInterceptor === null || externalDataInterceptor === void 0 ? void 0 : (_externalDataInterceptor_getTokenRecord = externalDataInterceptor.getTokenRecord) === null || _externalDataInterceptor_getTokenRecord === void 0 ? void 0 : _externalDataInterceptor_getTokenRecord.call(externalDataInterceptor)[webIdentityTokenFile]) !== null && _externalDataInterceptor_getTokenRecord_webIdentityTokenFile !== void 0 ? _externalDataInterceptor_getTokenRecord_webIdentityTokenFile : readFileSync(webIdentityTokenFile, {
-                                    encoding: "ascii"
-                                }),
-                                roleArn: roleArn,
-                                roleSessionName: roleSessionName
-                            }))(awsIdentityProperties)
+                            loadConfig({
+                                environmentVariableSelector: function(env) {
+                                    var envValue = env[AWS_EC2_METADATA_V1_DISABLED];
+                                    fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
+                                    if (envValue === undefined) {
+                                        throw new CredentialsProviderError("".concat(AWS_EC2_METADATA_V1_DISABLED, " not set in env, checking config file next."), {
+                                            logger: init.logger
+                                        });
+                                    }
+                                    return fallbackBlockedFromProcessEnv;
+                                },
+                                configFileSelector: function(profile) {
+                                    var profileValue = profile[PROFILE_AWS_EC2_METADATA_V1_DISABLED];
+                                    fallbackBlockedFromProfile = !!profileValue && profileValue !== "false";
+                                    return fallbackBlockedFromProfile;
+                                },
+                                default: false
+                            }, {
+                                profile: profile
+                            })()
                         ];
                     case 1:
-                        credentials = _state.sent();
-                        if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
-                            setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
+                        configValue = _state.sent();
+                        if (init.ec2MetadataV1Disabled || configValue) {
+                            causes = [];
+                            if (init.ec2MetadataV1Disabled) causes.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");
+                            if (fallbackBlockedFromProfile) causes.push("config file profile (".concat(PROFILE_AWS_EC2_METADATA_V1_DISABLED, ")"));
+                            if (fallbackBlockedFromProcessEnv) causes.push("process environment variable (".concat(AWS_EC2_METADATA_V1_DISABLED, ")"));
+                            throw new InstanceMetadataV1FallbackError("AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [".concat(causes.join(", "), "]."));
                         }
+                        _state.label = 2;
+                    case 2:
+                        return [
+                            4,
+                            retry(/*#__PURE__*/ _async_to_generator(function() {
+                                var profile, err;
+                                return _ts_generator(this, function(_state) {
+                                    switch(_state.label){
+                                        case 0:
+                                            _state.trys.push([
+                                                0,
+                                                2,
+                                                ,
+                                                3
+                                            ]);
+                                            return [
+                                                4,
+                                                getProfile(options)
+                                            ];
+                                        case 1:
+                                            profile = _state.sent();
+                                            return [
+                                                3,
+                                                3
+                                            ];
+                                        case 2:
+                                            err = _state.sent();
+                                            if (err.statusCode === 401) {
+                                                disableFetchToken = false;
+                                            }
+                                            throw err;
+                                        case 3:
+                                            return [
+                                                2,
+                                                profile
+                                            ];
+                                    }
+                                });
+                            }), maxRetries)
+                        ];
+                    case 3:
+                        imdsProfile = _state.sent().trim();
                         return [
                             2,
-                            credentials
+                            retry(/*#__PURE__*/ _async_to_generator(function() {
+                                var creds, err;
+                                return _ts_generator(this, function(_state) {
+                                    switch(_state.label){
+                                        case 0:
+                                            _state.trys.push([
+                                                0,
+                                                2,
+                                                ,
+                                                3
+                                            ]);
+                                            return [
+                                                4,
+                                                getCredentialsFromProfile(imdsProfile, options, init)
+                                            ];
+                                        case 1:
+                                            creds = _state.sent();
+                                            return [
+                                                3,
+                                                3
+                                            ];
+                                        case 2:
+                                            err = _state.sent();
+                                            if (err.statusCode === 401) {
+                                                disableFetchToken = false;
+                                            }
+                                            throw err;
+                                        case 3:
+                                            return [
+                                                2,
+                                                creds
+                                            ];
+                                    }
+                                });
+                            }), maxRetries)
                         ];
                 }
             });
         });
-        return function(awsIdentityProperties) {
+        return function getCredentials(maxRetries, options) {
             return _ref.apply(this, arguments);
         };
     }();
+    return /*#__PURE__*/ _async_to_generator(function() {
+        var endpoint, token, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        getInstanceMetadataEndpoint()
+                    ];
+                case 1:
+                    endpoint = _state.sent();
+                    if (!disableFetchToken) return [
+                        3,
+                        2
+                    ];
+                    logger === null || logger === void 0 ? void 0 : logger.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+                    return [
+                        2,
+                        getCredentials(maxRetries, _object_spread_props(_object_spread({}, endpoint), {
+                            timeout: timeout
+                        }))
+                    ];
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        getMetadataToken(_object_spread_props(_object_spread({}, endpoint), {
+                            timeout: timeout
+                        }))
+                    ];
+                case 3:
+                    token = _state.sent().toString();
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    error = _state.sent();
+                    if ((error === null || error === void 0 ? void 0 : error.statusCode) === 400) {
+                        throw Object.assign(error, {
+                            message: "EC2 Metadata token request returned error"
+                        });
+                    } else if (error.message === "TimeoutError" || [
+                        403,
+                        404,
+                        405
+                    ].includes(error.statusCode)) {
+                        disableFetchToken = true;
+                    }
+                    logger === null || logger === void 0 ? void 0 : logger.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+                    return [
+                        2,
+                        getCredentials(maxRetries, _object_spread_props(_object_spread({}, endpoint), {
+                            timeout: timeout
+                        }))
+                    ];
+                case 5:
+                    return [
+                        2,
+                        getCredentials(maxRetries, _object_spread_props(_object_spread({}, endpoint), {
+                            headers: _define_property({}, X_AWS_EC2_METADATA_TOKEN, token),
+                            timeout: timeout
+                        }))
+                    ];
+                case 6:
+                    return [
+                        2
+                    ];
+            }
+        });
+    });
 };
+var getMetadataToken = function() {
+    var _ref = _async_to_generator(function(options) {
+        return _ts_generator(this, function(_state) {
+            return [
+                2,
+                httpRequest(_object_spread_props(_object_spread({}, options), {
+                    path: IMDS_TOKEN_PATH,
+                    method: "PUT",
+                    headers: {
+                        "x-aws-ec2-metadata-token-ttl-seconds": "21600"
+                    }
+                }))
+            ];
+        });
+    });
+    return function getMetadataToken(options) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var getProfile = function() {
+    var _ref = _async_to_generator(function(options) {
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        httpRequest(_object_spread_props(_object_spread({}, options), {
+                            path: IMDS_PATH
+                        }))
+                    ];
+                case 1:
+                    return [
+                        2,
+                        _state.sent().toString()
+                    ];
+            }
+        });
+    });
+    return function getProfile(options) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var getCredentialsFromProfile = function() {
+    var _ref = _async_to_generator(function(profile, options, init) {
+        var credentialsResponse, _;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _ = JSON.parse;
+                    return [
+                        4,
+                        httpRequest(_object_spread_props(_object_spread({}, options), {
+                            path: IMDS_PATH + profile
+                        }))
+                    ];
+                case 1:
+                    credentialsResponse = _.apply(JSON, [
+                        _state.sent().toString()
+                    ]);
+                    if (!isImdsCredentials(credentialsResponse)) {
+                        throw new CredentialsProviderError("Invalid response received from instance metadata service.", {
+                            logger: init.logger
+                        });
+                    }
+                    return [
+                        2,
+                        fromImdsCredentials(credentialsResponse)
+                    ];
+            }
+        });
+    });
+    return function getCredentialsFromProfile(profile, options, init) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
-export { fromTokenFile, fromWebToken };
+export { DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT, ENV_CMDS_AUTH_TOKEN, ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, Endpoint, fromContainerMetadata, fromInstanceMetadata, getInstanceMetadataEndpoint, httpRequest, providerConfigFromInit };