@jjrawlins/cdk-diff-pr-github-action 0.0.17-beta → 0.0.18

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/models/models_0.d.ts

@@ -1,69 +1,3 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { SSOOIDCServiceException as __BaseException } from "./SSOOIDCServiceException";
-/**
- * @public
- * @enum
- */
-export declare const AccessDeniedExceptionReason: {
-    readonly KMS_ACCESS_DENIED: "KMS_AccessDeniedException";
-};
-/**
- * @public
- */
-export type AccessDeniedExceptionReason = (typeof AccessDeniedExceptionReason)[keyof typeof AccessDeniedExceptionReason];
-/**
- * <p>You do not have sufficient access to perform this action.</p>
- * @public
- */
-export declare class AccessDeniedException extends __BaseException {
-    readonly name: "AccessDeniedException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be <code>access_denied</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>A string that uniquely identifies a reason for the error.</p>
-     * @public
-     */
-    reason?: AccessDeniedExceptionReason | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
-}
-/**
- * <p>Indicates that a request to authorize a client with an access user session token is
- *       pending.</p>
- * @public
- */
-export declare class AuthorizationPendingException extends __BaseException {
-    readonly name: "AuthorizationPendingException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be
-     *       <code>authorization_pending</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<AuthorizationPendingException, __BaseException>);
-}
 /**
  * @public
  */
@@ -133,10 +67,6 @@ export interface CreateTokenRequest {
      */
     codeVerifier?: string | undefined;
 }
-/**
- * @internal
- */
-export declare const CreateTokenRequestFilterSensitiveLog: (obj: CreateTokenRequest) => any;
 /**
  * @public
  */
@@ -177,244 +107,3 @@ export interface CreateTokenResponse {
      */
     idToken?: string | undefined;
 }
-/**
- * @internal
- */
-export declare const CreateTokenResponseFilterSensitiveLog: (obj: CreateTokenResponse) => any;
-/**
- * <p>Indicates that the token issued by the service is expired and is no longer valid.</p>
- * @public
- */
-export declare class ExpiredTokenException extends __BaseException {
-    readonly name: "ExpiredTokenException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be <code>expired_token</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ExpiredTokenException, __BaseException>);
-}
-/**
- * <p>Indicates that an error from the service occurred while trying to process a
- *       request.</p>
- * @public
- */
-export declare class InternalServerException extends __BaseException {
-    readonly name: "InternalServerException";
-    readonly $fault: "server";
-    /**
-     * <p>Single error code. For this exception the value will be <code>server_error</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
-}
-/**
- * <p>Indicates that the <code>clientId</code> or <code>clientSecret</code> in the request is
- *       invalid. For example, this can occur when a client sends an incorrect <code>clientId</code> or
- *       an expired <code>clientSecret</code>.</p>
- * @public
- */
-export declare class InvalidClientException extends __BaseException {
-    readonly name: "InvalidClientException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be
-     *       <code>invalid_client</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidClientException, __BaseException>);
-}
-/**
- * <p>Indicates that a request contains an invalid grant. This can occur if a client makes a
- *         <a>CreateToken</a> request with an invalid grant type.</p>
- * @public
- */
-export declare class InvalidGrantException extends __BaseException {
-    readonly name: "InvalidGrantException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be <code>invalid_grant</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidGrantException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const InvalidRequestExceptionReason: {
-    readonly KMS_DISABLED_KEY: "KMS_DisabledException";
-    readonly KMS_INVALID_KEY_USAGE: "KMS_InvalidKeyUsageException";
-    readonly KMS_INVALID_STATE: "KMS_InvalidStateException";
-    readonly KMS_KEY_NOT_FOUND: "KMS_NotFoundException";
-};
-/**
- * @public
- */
-export type InvalidRequestExceptionReason = (typeof InvalidRequestExceptionReason)[keyof typeof InvalidRequestExceptionReason];
-/**
- * <p>Indicates that something is wrong with the input to the request. For example, a required
- *       parameter might be missing or out of range.</p>
- * @public
- */
-export declare class InvalidRequestException extends __BaseException {
-    readonly name: "InvalidRequestException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be
-     *       <code>invalid_request</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>A string that uniquely identifies a reason for the error.</p>
-     * @public
-     */
-    reason?: InvalidRequestExceptionReason | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
-}
-/**
- * <p>Indicates that the scope provided in the request is invalid.</p>
- * @public
- */
-export declare class InvalidScopeException extends __BaseException {
-    readonly name: "InvalidScopeException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be <code>invalid_scope</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidScopeException, __BaseException>);
-}
-/**
- * <p>Indicates that the client is making the request too frequently and is more than the
- *       service can handle. </p>
- * @public
- */
-export declare class SlowDownException extends __BaseException {
-    readonly name: "SlowDownException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be <code>slow_down</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<SlowDownException, __BaseException>);
-}
-/**
- * <p>Indicates that the client is not currently authorized to make the request. This can happen
- *       when a <code>clientId</code> is not issued for a public client.</p>
- * @public
- */
-export declare class UnauthorizedClientException extends __BaseException {
-    readonly name: "UnauthorizedClientException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be
-     *       <code>unauthorized_client</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<UnauthorizedClientException, __BaseException>);
-}
-/**
- * <p>Indicates that the grant type in the request is not supported by the service.</p>
- * @public
- */
-export declare class UnsupportedGrantTypeException extends __BaseException {
-    readonly name: "UnsupportedGrantTypeException";
-    readonly $fault: "client";
-    /**
-     * <p>Single error code. For this exception the value will be
-     *         <code>unsupported_grant_type</code>.</p>
-     * @public
-     */
-    error?: string | undefined;
-    /**
-     * <p>Human-readable text providing additional information, used to assist the client developer
-     *       in understanding the error that occurred.</p>
-     * @public
-     */
-    error_description?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<UnsupportedGrantTypeException, __BaseException>);
-}

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.browser.d.ts

@@ -28,6 +28,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     profile?: string;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;
     retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.d.ts

@@ -30,6 +30,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     profile?: string;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
     endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Provider<string> | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.native.d.ts

@@ -26,6 +26,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     retryMode: string | import("@smithy/types").Provider<string>;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     defaultsMode: import("@smithy/smithy-client").DefaultsMode | import("@smithy/types").Provider<import("@smithy/smithy-client").DefaultsMode>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.shared.d.ts

@@ -25,6 +25,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
         signer: NoAuthSigner;
     })[];
     logger: import("@smithy/types").Logger;
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     serviceId: string;
     urlParser: import("@smithy/types").UrlParser;
     utf8Decoder: import("@smithy/types").Decoder;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/schemas/schemas_0.d.ts

@@ -0,0 +1,23 @@
+import { StaticErrorSchema, StaticOperationSchema, StaticSimpleSchema, StaticStructureSchema } from "@smithy/types";
+export declare var AccessToken: StaticSimpleSchema;
+export declare var ClientSecret: StaticSimpleSchema;
+export declare var CodeVerifier: StaticSimpleSchema;
+export declare var IdToken: StaticSimpleSchema;
+export declare var RefreshToken: StaticSimpleSchema;
+export declare var AccessDeniedException: StaticErrorSchema;
+export declare var AuthorizationPendingException: StaticErrorSchema;
+export declare var CreateTokenRequest: StaticStructureSchema;
+export declare var CreateTokenResponse: StaticStructureSchema;
+export declare var ExpiredTokenException: StaticErrorSchema;
+export declare var InternalServerException: StaticErrorSchema;
+export declare var InvalidClientException: StaticErrorSchema;
+export declare var InvalidGrantException: StaticErrorSchema;
+export declare var InvalidRequestException: StaticErrorSchema;
+export declare var InvalidScopeException: StaticErrorSchema;
+export declare var SlowDownException: StaticErrorSchema;
+export declare var UnauthorizedClientException: StaticErrorSchema;
+export declare var UnsupportedGrantTypeException: StaticErrorSchema;
+export declare var __Unit: "unit";
+export declare var SSOOIDCServiceException: StaticErrorSchema;
+export declare var Scopes: number;
+export declare var CreateToken: StaticOperationSchema;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/STSClient.d.ts

@@ -5,7 +5,7 @@ import { EndpointInputConfig, EndpointResolvedConfig } from "@smithy/middleware-
 import { RetryInputConfig, RetryResolvedConfig } from "@smithy/middleware-retry";
 import { HttpHandlerUserInput as __HttpHandlerUserInput } from "@smithy/protocol-http";
 import { Client as __Client, DefaultsMode as __DefaultsMode, SmithyConfiguration as __SmithyConfiguration, SmithyResolvedConfiguration as __SmithyResolvedConfiguration } from "@smithy/smithy-client";
-import { AwsCredentialIdentityProvider, BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, Logger as __Logger, Provider as __Provider, Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
+import { AwsCredentialIdentityProvider, BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, ClientProtocol, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, HttpRequest, HttpResponse, Logger as __Logger, Provider as __Provider, Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
 import { HttpAuthSchemeInputConfig, HttpAuthSchemeResolvedConfig } from "./auth/httpAuthSchemeProvider";
 import { AssumeRoleCommandInput, AssumeRoleCommandOutput } from "./commands/AssumeRoleCommand";
 import { AssumeRoleWithWebIdentityCommandInput, AssumeRoleWithWebIdentityCommandOutput } from "./commands/AssumeRoleWithWebIdentityCommand";
@@ -143,6 +143,15 @@ export interface ClientDefaults extends Partial<__SmithyConfiguration<__HttpHand
      * Optional extensions
      */
     extensions?: RuntimeExtension[];
+    /**
+     * The protocol controlling the message type (e.g. HTTP) and format (e.g. JSON)
+     * may be overridden. A default will always be set by the client.
+     * Available options depend on the service's supported protocols and will not be validated by
+     * the client.
+     * @alpha
+     *
+     */
+    protocol?: ClientProtocol<HttpRequest, HttpResponse>;
     /**
      * The {@link @smithy/smithy-client#DefaultsMode} that will be used to determine how certain default configuration options are resolved in the SDK.
      */

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/auth/httpAuthSchemeProvider.d.ts

@@ -36,7 +36,7 @@ export interface StsAuthResolvedConfig {
 }
 export declare const resolveStsAuthConfig: <T>(input: T & StsAuthInputConfig) => T & StsAuthResolvedConfig;
 /**
- * @internal
+ * @public
  */
 export interface HttpAuthSchemeInputConfig extends StsAuthInputConfig, AwsSdkSigV4AuthInputConfig {
     /**

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/commands/AssumeRoleCommand.d.ts

@@ -200,7 +200,7 @@ declare const AssumeRoleCommand_base: {
  * @throws {@link RegionDisabledException} (client fault)
  *  <p>STS is not activated in the requested region for the account that is being asked to
  *             generate credentials. The account administrator must use the IAM console to activate
- *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
  *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
  *                 Guide</i>.</p>
  *
@@ -213,7 +213,7 @@ declare const AssumeRoleCommand_base: {
  * //
  * const input = {
  *   ExternalId: "123ABC",
- *   Policy: `{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:ListAllMyBuckets","Resource":"*"}]}`,
+ *   Policy: "escaped-JSON-IAM-POLICY",
  *   RoleArn: "arn:aws:iam::123456789012:role/demo",
  *   RoleSessionName: "testAssumeRoleSession",
  *   Tags: [

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/commands/AssumeRoleWithWebIdentityCommand.d.ts

@@ -90,7 +90,8 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  *          </p>
  *          <p>(Optional) You can configure your IdP to pass attributes into your web identity token as
  *          session tags. Each session tag consists of a key name and an associated value. For more
- *          information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
+ *          information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_adding-assume-role-idp">Passing
+ *             session tags using AssumeRoleWithWebIdentity</a> in the
  *             <i>IAM User Guide</i>.</p>
  *          <p>You can pass up to 50 session tags. The plaintext session tag keys can’t exceed 128
  *          characters and the values can’t exceed 256 characters. For these and additional limits, see
@@ -232,7 +233,7 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  * @throws {@link RegionDisabledException} (client fault)
  *  <p>STS is not activated in the requested region for the account that is being asked to
  *             generate credentials. The account administrator must use the IAM console to activate
- *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
  *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
  *                 Guide</i>.</p>
  *
@@ -245,7 +246,7 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  * //
  * const input = {
  *   DurationSeconds: 3600,
- *   Policy: `{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:ListAllMyBuckets","Resource":"*"}]}`,
+ *   Policy: "escaped-JSON-IAM-POLICY",
  *   ProviderId: "www.amazon.com",
  *   RoleArn: "arn:aws:iam::123456789012:role/FederatedWebIdentityRole",
  *   RoleSessionName: "app1",

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/index.d.ts

@@ -12,6 +12,7 @@ export { ClientInputEndpointParameters } from "./endpoint/EndpointParameters";
 export type { RuntimeExtension } from "./runtimeExtensions";
 export type { STSExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
-export * from "./models";
+export * from "./models/errors";
+export type * from "./models/models_0";
 export * from "./defaultRoleAssumers";
 export { STSServiceException } from "./models/STSServiceException";

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/models/errors.d.ts

@@ -0,0 +1,108 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { STSServiceException as __BaseException } from "./STSServiceException";
+/**
+ * <p>The web identity token that was passed is expired or is not valid. Get a new identity
+ *             token from the identity provider and then retry the request.</p>
+ * @public
+ */
+export declare class ExpiredTokenException extends __BaseException {
+    readonly name: "ExpiredTokenException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ExpiredTokenException, __BaseException>);
+}
+/**
+ * <p>The request was rejected because the policy document was malformed. The error message
+ *             describes the specific error.</p>
+ * @public
+ */
+export declare class MalformedPolicyDocumentException extends __BaseException {
+    readonly name: "MalformedPolicyDocumentException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<MalformedPolicyDocumentException, __BaseException>);
+}
+/**
+ * <p>The request was rejected because the total packed size of the session policies and
+ *             session tags combined was too large. An Amazon Web Services conversion compresses the session policy
+ *             document, session policy ARNs, and session tags into a packed binary format that has a
+ *             separate limit. The error message indicates by percentage how close the policies and
+ *             tags are to the upper size limit. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in
+ *             the <i>IAM User Guide</i>.</p>
+ *          <p>You could receive this error even though you meet other defined session policy and
+ *             session tag limits. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length">IAM and STS Entity Character Limits</a> in the <i>IAM User
+ *                 Guide</i>.</p>
+ * @public
+ */
+export declare class PackedPolicyTooLargeException extends __BaseException {
+    readonly name: "PackedPolicyTooLargeException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<PackedPolicyTooLargeException, __BaseException>);
+}
+/**
+ * <p>STS is not activated in the requested region for the account that is being asked to
+ *             generate credentials. The account administrator must use the IAM console to activate
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
+ *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
+ *                 Guide</i>.</p>
+ * @public
+ */
+export declare class RegionDisabledException extends __BaseException {
+    readonly name: "RegionDisabledException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<RegionDisabledException, __BaseException>);
+}
+/**
+ * <p>The identity provider (IdP) reported that authentication failed. This might be because
+ *             the claim is invalid.</p>
+ *          <p>If this error is returned for the <code>AssumeRoleWithWebIdentity</code> operation, it
+ *             can also mean that the claim has expired or has been explicitly revoked. </p>
+ * @public
+ */
+export declare class IDPRejectedClaimException extends __BaseException {
+    readonly name: "IDPRejectedClaimException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<IDPRejectedClaimException, __BaseException>);
+}
+/**
+ * <p>The web identity token that was passed could not be validated by Amazon Web Services. Get a new
+ *             identity token from the identity provider and then retry the request.</p>
+ * @public
+ */
+export declare class InvalidIdentityTokenException extends __BaseException {
+    readonly name: "InvalidIdentityTokenException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidIdentityTokenException, __BaseException>);
+}
+/**
+ * <p>The request could not be fulfilled because the identity provider (IDP) that was asked
+ *             to verify the incoming identity token could not be reached. This is often a transient
+ *             error caused by network conditions. Retry the request a limited number of times so that
+ *             you don't exceed the request rate. If the error persists, the identity provider might be
+ *             down or not responding.</p>
+ * @public
+ */
+export declare class IDPCommunicationErrorException extends __BaseException {
+    readonly name: "IDPCommunicationErrorException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<IDPCommunicationErrorException, __BaseException>);
+}