@jjrawlins/cdk-ami-builder 0.0.128 → 0.0.129

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js

@@ -0,0 +1,32 @@
+import { CredentialsProviderError } from "@smithy/property-provider";
+import { isAssumeRoleProfile, resolveAssumeRoleCredentials } from "./resolveAssumeRoleCredentials";
+import { isLoginProfile, resolveLoginCredentials } from "./resolveLoginCredentials";
+import { isProcessProfile, resolveProcessCredentials } from "./resolveProcessCredentials";
+import { isSsoProfile, resolveSsoCredentials } from "./resolveSsoCredentials";
+import { isStaticCredsProfile, resolveStaticCredentials } from "./resolveStaticCredentials";
+import { isWebIdentityProfile, resolveWebIdentityCredentials } from "./resolveWebIdentityCredentials";
+export const resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
+    const data = profiles[profileName];
+    if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
+        return resolveStaticCredentials(data, options);
+    }
+    if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, { profile: profileName, logger: options.logger })) {
+        return resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData);
+    }
+    if (isStaticCredsProfile(data)) {
+        return resolveStaticCredentials(data, options);
+    }
+    if (isWebIdentityProfile(data)) {
+        return resolveWebIdentityCredentials(data, options, callerClientConfig);
+    }
+    if (isProcessProfile(data)) {
+        return resolveProcessCredentials(options, profileName);
+    }
+    if (isSsoProfile(data)) {
+        return await resolveSsoCredentials(profileName, data, options, callerClientConfig);
+    }
+    if (isLoginProfile(data)) {
+        return resolveLoginCredentials(profileName, options, callerClientConfig);
+    }
+    throw new CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
+};

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js

@@ -0,0 +1,25 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
+export const resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {
+    const { fromSSO } = await import("@aws-sdk/credential-provider-sso");
+    return fromSSO({
+        profile,
+        logger: options.logger,
+        parentClientConfig: options.parentClientConfig,
+        clientConfig: options.clientConfig,
+    })({
+        callerClientConfig,
+    }).then((creds) => {
+        if (profileData.sso_session) {
+            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO", "r");
+        }
+        else {
+            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO_LEGACY", "t");
+        }
+    });
+};
+export const isSsoProfile = (arg) => arg &&
+    (typeof arg.sso_start_url === "string" ||
+        typeof arg.sso_account_id === "string" ||
+        typeof arg.sso_session === "string" ||
+        typeof arg.sso_region === "string" ||
+        typeof arg.sso_role_name === "string");

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js

@@ -0,0 +1,18 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
+export const isStaticCredsProfile = (arg) => Boolean(arg) &&
+    typeof arg === "object" &&
+    typeof arg.aws_access_key_id === "string" &&
+    typeof arg.aws_secret_access_key === "string" &&
+    ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 &&
+    ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1;
+export const resolveStaticCredentials = async (profile, options) => {
+    options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
+    const credentials = {
+        accessKeyId: profile.aws_access_key_id,
+        secretAccessKey: profile.aws_secret_access_key,
+        sessionToken: profile.aws_session_token,
+        ...(profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope }),
+        ...(profile.aws_account_id && { accountId: profile.aws_account_id }),
+    };
+    return setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n");
+};

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js

@@ -0,0 +1,16 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
+export const isWebIdentityProfile = (arg) => Boolean(arg) &&
+    typeof arg === "object" &&
+    typeof arg.web_identity_token_file === "string" &&
+    typeof arg.role_arn === "string" &&
+    ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1;
+export const resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => import("@aws-sdk/credential-provider-web-identity").then(({ fromTokenFile }) => fromTokenFile({
+    webIdentityTokenFile: profile.web_identity_token_file,
+    roleArn: profile.role_arn,
+    roleSessionName: profile.role_session_name,
+    roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
+    logger: options.logger,
+    parentClientConfig: options.parentClientConfig,
+})({
+    callerClientConfig,
+}).then((creds) => setCredentialFeature(creds, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q")));

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/fromIni.d.ts

@@ -0,0 +1,55 @@
+import type { FromLoginCredentialsInit } from "@aws-sdk/credential-provider-login";
+import type { AssumeRoleWithWebIdentityParams } from "@aws-sdk/credential-provider-web-identity";
+import type { CredentialProviderOptions, RuntimeConfigAwsCredentialIdentityProvider } from "@aws-sdk/types";
+import { SourceProfileInit } from "@smithy/shared-ini-file-loader";
+import type { AwsCredentialIdentity, Pluggable } from "@smithy/types";
+import { AssumeRoleParams } from "./resolveAssumeRoleCredentials";
+/**
+ * @public
+ */
+export interface FromIniInit extends SourceProfileInit, CredentialProviderOptions, FromLoginCredentialsInit {
+    /**
+     * A function that returns a promise fulfilled with an MFA token code for
+     * the provided MFA Serial code. If a profile requires an MFA code and
+     * `mfaCodeProvider` is not a valid function, the credential provider
+     * promise will be rejected.
+     *
+     * @param mfaSerial The serial code of the MFA device specified.
+     */
+    mfaCodeProvider?: (mfaSerial: string) => Promise<string>;
+    /**
+     * A function that assumes a role and returns a promise fulfilled with
+     * credentials for the assumed role.
+     *
+     * @param sourceCreds The credentials with which to assume a role.
+     * @param params
+     */
+    roleAssumer?: (sourceCreds: AwsCredentialIdentity, params: AssumeRoleParams) => Promise<AwsCredentialIdentity>;
+    /**
+     * A function that assumes a role with web identity and returns a promise fulfilled with
+     * credentials for the assumed role.
+     *
+     * @param sourceCreds The credentials with which to assume a role.
+     * @param params
+     */
+    roleAssumerWithWebIdentity?: (params: AssumeRoleWithWebIdentityParams) => Promise<AwsCredentialIdentity>;
+    /**
+     * AWS SDK Client configuration to be used for creating inner client
+     * for auth operations. Inner clients include STS, SSO, and Signin clients.
+     * @internal
+     */
+    clientConfig?: any;
+    clientPlugins?: Pluggable<any, any>[];
+    /**
+     * When true, always reload credentials from the file system instead of using cached values.
+     * This is useful when you need to detect changes to the credentials file.
+     */
+    ignoreCache?: boolean;
+}
+/**
+ * @internal
+ *
+ * Creates a credential provider that will read from ini files and supports
+ * role assumption and multi-factor authentication.
+ */
+export declare const fromIni: (init?: FromIniInit) => RuntimeConfigAwsCredentialIdentityProvider;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/index.d.ts

@@ -0,0 +1,4 @@
+/**
+ * @internal
+ */
+export * from "./fromIni";

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveAssumeRoleCredentials.d.ts

@@ -0,0 +1,48 @@
+import type { AwsIdentityProperties } from "@aws-sdk/types";
+import { Logger, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+import type { ResolveProfileData } from "./resolveProfileData";
+/**
+ * @internal
+ *
+ * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sts/command/AssumeRoleCommand/
+ */
+export interface AssumeRoleParams {
+    /**
+     * The identifier of the role to be assumed.
+     */
+    RoleArn: string;
+    /**
+     * A name for the assumed role session.
+     */
+    RoleSessionName: string;
+    /**
+     * A unique identifier that is used by third parties when assuming roles in
+     * their customers' accounts.
+     */
+    ExternalId?: string;
+    /**
+     * The identification number of the MFA device that is associated with the
+     * user who is making the `AssumeRole` call.
+     */
+    SerialNumber?: string;
+    /**
+     * The value provided by the MFA device.
+     */
+    TokenCode?: string;
+    /**
+     * The duration, in seconds, of the role session.
+     */
+    DurationSeconds?: number;
+}
+/**
+ * @internal
+ */
+export declare const isAssumeRoleProfile: (arg: any, { profile, logger }?: {
+    profile?: string;
+    logger?: Logger;
+}) => boolean;
+/**
+ * @internal
+ */
+export declare const resolveAssumeRoleCredentials: (profileName: string, profiles: ParsedIniData, options: FromIniInit, callerClientConfig: AwsIdentityProperties["callerClientConfig"] | undefined, visitedProfiles: Record<string, true> | undefined, resolveProfileData: ResolveProfileData) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveCredentialSource.d.ts

@@ -0,0 +1,12 @@
+import type { CredentialProviderOptions } from "@aws-sdk/types";
+import { AwsCredentialIdentityProvider, Logger } from "@smithy/types";
+/**
+ * @internal
+ *
+ * Resolve the `credential_source` entry from the profile, and return the
+ * credential providers respectively. No memoization is needed for the
+ * credential source providers because memoization should be added outside the
+ * fromIni() provider. The source credential needs to be refreshed every time
+ * fromIni() is called.
+ */
+export declare const resolveCredentialSource: (credentialSource: string, profileName: string, logger?: Logger) => ((options?: CredentialProviderOptions) => Promise<AwsCredentialIdentityProvider>);

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveLoginCredentials.d.ts

@@ -0,0 +1,11 @@
+import type { AwsIdentityProperties } from "@aws-sdk/types";
+import type { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import type { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export declare const isLoginProfile: (data: ParsedIniData[string]) => boolean;
+/**
+ * @internal
+ */
+export declare const resolveLoginCredentials: (profileName: string, options: FromIniInit, callerClientConfig?: AwsIdentityProperties["callerClientConfig"]) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveProcessCredentials.d.ts

@@ -0,0 +1,16 @@
+import { Credentials, Profile } from "@aws-sdk/types";
+import { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export interface ProcessProfile extends Profile {
+    credential_process: string;
+}
+/**
+ * @internal
+ */
+export declare const isProcessProfile: (arg: any) => arg is ProcessProfile;
+/**
+ * @internal
+ */
+export declare const resolveProcessCredentials: (options: FromIniInit, profile: string) => Promise<Credentials>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveProfileData.d.ts

@@ -0,0 +1,19 @@
+import type { AwsIdentityProperties } from "@aws-sdk/types";
+import type { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export type ResolveProfileData = typeof resolveProfileData;
+/**
+ * @internal
+ */
+export declare const resolveProfileData: (profileName: string, profiles: ParsedIniData, options: FromIniInit, callerClientConfig?: AwsIdentityProperties["callerClientConfig"], visitedProfiles?: Record<string, true>, 
+/**
+ * This override comes from recursive calls only.
+ * It is used to flag a recursive profile section
+ * that does not have a role_arn, e.g. a credential_source
+ * with no role_arn, as part of a larger recursive assume-role
+ * call stack, and to re-enter the assume-role resolver function.
+ */
+isAssumeRoleRecursiveCall?: boolean) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveSsoCredentials.d.ts

@@ -0,0 +1,13 @@
+import type { SsoProfile } from "@aws-sdk/credential-provider-sso";
+import type { AwsIdentityProperties } from "@aws-sdk/types";
+import type { IniSection, Profile } from "@smithy/types";
+import type { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export declare const resolveSsoCredentials: (profile: string, profileData: IniSection, options?: FromIniInit, callerClientConfig?: AwsIdentityProperties["callerClientConfig"]) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
+/**
+ * @internal
+ * duplicated from \@aws-sdk/credential-provider-sso to defer import.
+ */
+export declare const isSsoProfile: (arg: Profile) => arg is Partial<SsoProfile>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveStaticCredentials.d.ts

@@ -0,0 +1,20 @@
+import { AwsCredentialIdentity, Profile } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export interface StaticCredsProfile extends Profile {
+    aws_access_key_id: string;
+    aws_secret_access_key: string;
+    aws_session_token?: string;
+    aws_credential_scope?: string;
+    aws_account_id?: string;
+}
+/**
+ * @internal
+ */
+export declare const isStaticCredsProfile: (arg: any) => arg is StaticCredsProfile;
+/**
+ * @internal
+ */
+export declare const resolveStaticCredentials: (profile: StaticCredsProfile, options?: FromIniInit) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveWebIdentityCredentials.d.ts

@@ -0,0 +1,19 @@
+import type { AwsIdentityProperties } from "@aws-sdk/types";
+import { AwsCredentialIdentity, Profile } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export interface WebIdentityProfile extends Profile {
+    web_identity_token_file: string;
+    role_arn: string;
+    role_session_name?: string;
+}
+/**
+ * @internal
+ */
+export declare const isWebIdentityProfile: (arg: any) => arg is WebIdentityProfile;
+/**
+ * @internal
+ */
+export declare const resolveWebIdentityCredentials: (profile: WebIdentityProfile, options: FromIniInit, callerClientConfig?: AwsIdentityProperties["callerClientConfig"]) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/fromIni.d.ts

@@ -0,0 +1,28 @@
+import { FromLoginCredentialsInit } from "@aws-sdk/credential-provider-login";
+import { AssumeRoleWithWebIdentityParams } from "@aws-sdk/credential-provider-web-identity";
+import {
+  CredentialProviderOptions,
+  RuntimeConfigAwsCredentialIdentityProvider,
+} from "@aws-sdk/types";
+import { SourceProfileInit } from "@smithy/shared-ini-file-loader";
+import { AwsCredentialIdentity, Pluggable } from "@smithy/types";
+import { AssumeRoleParams } from "./resolveAssumeRoleCredentials";
+export interface FromIniInit
+  extends SourceProfileInit,
+    CredentialProviderOptions,
+    FromLoginCredentialsInit {
+  mfaCodeProvider?: (mfaSerial: string) => Promise<string>;
+  roleAssumer?: (
+    sourceCreds: AwsCredentialIdentity,
+    params: AssumeRoleParams
+  ) => Promise<AwsCredentialIdentity>;
+  roleAssumerWithWebIdentity?: (
+    params: AssumeRoleWithWebIdentityParams
+  ) => Promise<AwsCredentialIdentity>;
+  clientConfig?: any;
+  clientPlugins?: Pluggable<any, any>[];
+  ignoreCache?: boolean;
+}
+export declare const fromIni: (
+  init?: FromIniInit
+) => RuntimeConfigAwsCredentialIdentityProvider;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/index.d.ts

@@ -0,0 +1 @@
+export * from "./fromIni";

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveAssumeRoleCredentials.d.ts

@@ -0,0 +1,30 @@
+import { AwsIdentityProperties } from "@aws-sdk/types";
+import { Logger, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+import { ResolveProfileData } from "./resolveProfileData";
+export interface AssumeRoleParams {
+  RoleArn: string;
+  RoleSessionName: string;
+  ExternalId?: string;
+  SerialNumber?: string;
+  TokenCode?: string;
+  DurationSeconds?: number;
+}
+export declare const isAssumeRoleProfile: (
+  arg: any,
+  {
+    profile,
+    logger,
+  }?: {
+    profile?: string;
+    logger?: Logger;
+  }
+) => boolean;
+export declare const resolveAssumeRoleCredentials: (
+  profileName: string,
+  profiles: ParsedIniData,
+  options: FromIniInit,
+  callerClientConfig: AwsIdentityProperties["callerClientConfig"] | undefined,
+  visitedProfiles: Record<string, true> | undefined,
+  resolveProfileData: ResolveProfileData
+) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveCredentialSource.d.ts

@@ -0,0 +1,9 @@
+import { CredentialProviderOptions } from "@aws-sdk/types";
+import { AwsCredentialIdentityProvider, Logger } from "@smithy/types";
+export declare const resolveCredentialSource: (
+  credentialSource: string,
+  profileName: string,
+  logger?: Logger
+) => (
+  options?: CredentialProviderOptions
+) => Promise<AwsCredentialIdentityProvider>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveLoginCredentials.d.ts

@@ -0,0 +1,9 @@
+import { AwsIdentityProperties } from "@aws-sdk/types";
+import { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export declare const isLoginProfile: (data: ParsedIniData[string]) => boolean;
+export declare const resolveLoginCredentials: (
+  profileName: string,
+  options: FromIniInit,
+  callerClientConfig?: AwsIdentityProperties["callerClientConfig"]
+) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveProcessCredentials.d.ts

@@ -0,0 +1,10 @@
+import { Credentials, Profile } from "@aws-sdk/types";
+import { FromIniInit } from "./fromIni";
+export interface ProcessProfile extends Profile {
+  credential_process: string;
+}
+export declare const isProcessProfile: (arg: any) => arg is ProcessProfile;
+export declare const resolveProcessCredentials: (
+  options: FromIniInit,
+  profile: string
+) => Promise<Credentials>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveProfileData.d.ts

@@ -0,0 +1,12 @@
+import { AwsIdentityProperties } from "@aws-sdk/types";
+import { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export type ResolveProfileData = typeof resolveProfileData;
+export declare const resolveProfileData: (
+  profileName: string,
+  profiles: ParsedIniData,
+  options: FromIniInit,
+  callerClientConfig?: AwsIdentityProperties["callerClientConfig"],
+  visitedProfiles?: Record<string, true>,
+  isAssumeRoleRecursiveCall?: boolean
+) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveSsoCredentials.d.ts

@@ -0,0 +1,11 @@
+import { SsoProfile } from "@aws-sdk/credential-provider-sso";
+import { AwsIdentityProperties } from "@aws-sdk/types";
+import { IniSection, Profile } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export declare const resolveSsoCredentials: (
+  profile: string,
+  profileData: IniSection,
+  options?: FromIniInit,
+  callerClientConfig?: AwsIdentityProperties["callerClientConfig"]
+) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
+export declare const isSsoProfile: (arg: Profile) => arg is Partial<SsoProfile>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveStaticCredentials.d.ts

@@ -0,0 +1,16 @@
+import { AwsCredentialIdentity, Profile } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export interface StaticCredsProfile extends Profile {
+  aws_access_key_id: string;
+  aws_secret_access_key: string;
+  aws_session_token?: string;
+  aws_credential_scope?: string;
+  aws_account_id?: string;
+}
+export declare const isStaticCredsProfile: (
+  arg: any
+) => arg is StaticCredsProfile;
+export declare const resolveStaticCredentials: (
+  profile: StaticCredsProfile,
+  options?: FromIniInit
+) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveWebIdentityCredentials.d.ts

@@ -0,0 +1,16 @@
+import { AwsIdentityProperties } from "@aws-sdk/types";
+import { AwsCredentialIdentity, Profile } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export interface WebIdentityProfile extends Profile {
+  web_identity_token_file: string;
+  role_arn: string;
+  role_session_name?: string;
+}
+export declare const isWebIdentityProfile: (
+  arg: any
+) => arg is WebIdentityProfile;
+export declare const resolveWebIdentityCredentials: (
+  profile: WebIdentityProfile,
+  options: FromIniInit,
+  callerClientConfig?: AwsIdentityProperties["callerClientConfig"]
+) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "@aws-sdk/credential-provider-ini",
+  "version": "3.967.0",
+  "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
+  "main": "./dist-cjs/index.js",
+  "module": "./dist-es/index.js",
+  "scripts": {
+    "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
+    "build:cjs": "node ../../scripts/compilation/inline credential-provider-ini",
+    "build:es": "tsc -p tsconfig.es.json",
+    "build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
+    "build:types": "tsc -p tsconfig.types.json",
+    "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
+    "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo",
+    "test": "yarn g:vitest run",
+    "test:watch": "yarn g:vitest watch",
+    "test:integration": "yarn g:vitest run -c vitest.config.integ.mts",
+    "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
+  },
+  "keywords": [
+    "aws",
+    "credentials"
+  ],
+  "sideEffects": false,
+  "author": {
+    "name": "AWS SDK for JavaScript Team",
+    "url": "https://aws.amazon.com/javascript/"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@aws-sdk/core": "3.967.0",
+    "@aws-sdk/credential-provider-env": "3.967.0",
+    "@aws-sdk/credential-provider-http": "3.967.0",
+    "@aws-sdk/credential-provider-login": "3.967.0",
+    "@aws-sdk/credential-provider-process": "3.967.0",
+    "@aws-sdk/credential-provider-sso": "3.967.0",
+    "@aws-sdk/credential-provider-web-identity": "3.967.0",
+    "@aws-sdk/nested-clients": "3.967.0",
+    "@aws-sdk/types": "3.965.0",
+    "@smithy/credential-provider-imds": "^4.2.7",
+    "@smithy/property-provider": "^4.2.7",
+    "@smithy/shared-ini-file-loader": "^4.4.2",
+    "@smithy/types": "^4.11.0",
+    "tslib": "^2.6.2"
+  },
+  "devDependencies": {
+    "@tsconfig/recommended": "1.0.1",
+    "@types/node": "^18.19.69",
+    "concurrently": "7.0.0",
+    "downlevel-dts": "0.10.1",
+    "rimraf": "5.0.10",
+    "typescript": "~5.8.3"
+  },
+  "types": "./dist-types/index.d.ts",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "typesVersions": {
+    "<4.0": {
+      "dist-types/*": [
+        "dist-types/ts3.4/*"
+      ]
+    }
+  },
+  "files": [
+    "dist-*/**"
+  ],
+  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/credential-provider-ini",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-sdk-js-v3.git",
+    "directory": "packages/credential-provider-ini"
+  }
+}

package/node_modules/@aws-sdk/client-kms/node_modules/@aws-sdk/credential-provider-login/README.md

@@ -0,0 +1,7 @@
+# @aws-sdk/credential-provider-login
+
+> An internal package
+
+## Usage
+
+You probably shouldn't, at least directly. Please use [@aws-sdk/credential-providers](https://www.npmjs.com/package/@aws-sdk/credential-providers) instead.