@jjrawlins/cdk-iam-policy-builder-helper 0.0.1 → 0.0.3

package/node_modules/@smithy/shared-ini-file-loader/dist-types/getSSOTokenFilepath.d.ts

@@ -1,4 +1,5 @@
 /**
  * Returns the filepath of the file where SSO token is stored.
+ * @internal
  */
 export declare const getSSOTokenFilepath: (id: string) => string;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/getSSOTokenFromFile.d.ts

@@ -1,5 +1,6 @@
 /**
  * Cached SSO token retrieved from SSO login flow.
+ * @public
  */
 export interface SSOToken {
     /**
@@ -38,6 +39,7 @@ export interface SSOToken {
     startUrl?: string;
 }
 /**
+ * @internal
  * @param id - can be either a start URL or the SSO session name.
  * Returns the SSO token from the file system.
  */

package/node_modules/@smithy/shared-ini-file-loader/dist-types/loadSharedConfigFiles.d.ts

@@ -1,4 +1,7 @@
-import { SharedConfigFiles } from "@smithy/types";
+import { Logger, SharedConfigFiles } from "@smithy/types";
+/**
+ * @public
+ */
 export interface SharedConfigInit {
     /**
      * The path at which to locate the ini credentials file. Defaults to the
@@ -17,6 +20,17 @@ export interface SharedConfigInit {
      * property is set, the provider will always reload any configuration files loaded before.
      */
     ignoreCache?: boolean;
+    /**
+     * For credential resolution trace logging.
+     */
+    logger?: Logger;
 }
+/**
+ * @internal
+ */
 export declare const CONFIG_PREFIX_SEPARATOR = ".";
+/**
+ * Loads the config and credentials files.
+ * @internal
+ */
 export declare const loadSharedConfigFiles: (init?: SharedConfigInit) => Promise<SharedConfigFiles>;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/loadSsoSessionData.d.ts

@@ -1,4 +1,8 @@
 import { ParsedIniData } from "@smithy/types";
+/**
+ * Subset of {@link SharedConfigInit}.
+ * @internal
+ */
 export interface SsoSessionInit {
     /**
      * The path at which to locate the ini config file. Defaults to the value of
@@ -7,4 +11,7 @@ export interface SsoSessionInit {
      */
     configFilepath?: string;
 }
+/**
+ * @internal
+ */
 export declare const loadSsoSessionData: (init?: SsoSessionInit) => Promise<ParsedIniData>;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/parseKnownFiles.d.ts

@@ -1,5 +1,8 @@
 import { ParsedIniData } from "@smithy/types";
 import { SharedConfigInit } from "./loadSharedConfigFiles";
+/**
+ * @public
+ */
 export interface SourceProfileInit extends SharedConfigInit {
     /**
      * The configuration profile to use.

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/getProfileName.d.ts

@@ -1,5 +1,15 @@
+/**
+ * @internal
+ */
 export declare const ENV_PROFILE = "AWS_PROFILE";
+/**
+ * @internal
+ */
 export declare const DEFAULT_PROFILE = "default";
+/**
+ * Returns profile with priority order code - ENV - default.
+ * @internal
+ */
 export declare const getProfileName: (init: {
     profile?: string;
 }) => string;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/getSSOTokenFilepath.d.ts

@@ -1,4 +1,5 @@
 /**
  * Returns the filepath of the file where SSO token is stored.
+ * @internal
  */
 export declare const getSSOTokenFilepath: (id: string) => string;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/getSSOTokenFromFile.d.ts

@@ -1,5 +1,6 @@
 /**
  * Cached SSO token retrieved from SSO login flow.
+ * @public
  */
 export interface SSOToken {
     /**
@@ -38,6 +39,7 @@ export interface SSOToken {
     startUrl?: string;
 }
 /**
+ * @internal
  * @param id - can be either a start URL or the SSO session name.
  * Returns the SSO token from the file system.
  */

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/loadSharedConfigFiles.d.ts

@@ -1,4 +1,7 @@
-import { SharedConfigFiles } from "@smithy/types";
+import { Logger, SharedConfigFiles } from "@smithy/types";
+/**
+ * @public
+ */
 export interface SharedConfigInit {
     /**
      * The path at which to locate the ini credentials file. Defaults to the
@@ -17,6 +20,17 @@ export interface SharedConfigInit {
      * property is set, the provider will always reload any configuration files loaded before.
      */
     ignoreCache?: boolean;
+    /**
+     * For credential resolution trace logging.
+     */
+    logger?: Logger;
 }
+/**
+ * @internal
+ */
 export declare const CONFIG_PREFIX_SEPARATOR = ".";
+/**
+ * Loads the config and credentials files.
+ * @internal
+ */
 export declare const loadSharedConfigFiles: (init?: SharedConfigInit) => Promise<SharedConfigFiles>;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/loadSsoSessionData.d.ts

@@ -1,4 +1,8 @@
 import { ParsedIniData } from "@smithy/types";
+/**
+ * Subset of {@link SharedConfigInit}.
+ * @internal
+ */
 export interface SsoSessionInit {
     /**
      * The path at which to locate the ini config file. Defaults to the value of
@@ -7,4 +11,7 @@ export interface SsoSessionInit {
      */
     configFilepath?: string;
 }
+/**
+ * @internal
+ */
 export declare const loadSsoSessionData: (init?: SsoSessionInit) => Promise<ParsedIniData>;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/parseKnownFiles.d.ts

@@ -1,5 +1,8 @@
 import { ParsedIniData } from "@smithy/types";
 import { SharedConfigInit } from "./loadSharedConfigFiles";
+/**
+ * @public
+ */
 export interface SourceProfileInit extends SharedConfigInit {
     /**
      * The configuration profile to use.

package/node_modules/@smithy/shared-ini-file-loader/dist-types/ts3.4/types.d.ts

@@ -1,13 +1,16 @@
 import { ParsedIniData as __ParsedIniData, Profile as __Profile, SharedConfigFiles as __SharedConfigFiles } from "@smithy/types";
 /**
- * @deprecated Use Profile from "@smithy/types" instead
+ * @internal
+ * @deprecated Use Profile from "\@smithy/types" instead
  */
 export type Profile = __Profile;
 /**
- * @deprecated Use ParsedIniData from "@smithy/types" instead
+ * @internal
+ * @deprecated Use ParsedIniData from "\@smithy/types" instead
  */
 export type ParsedIniData = __ParsedIniData;
 /**
- * @deprecated Use SharedConfigFiles from "@smithy/types" instead
+ * @internal
+ * @deprecated Use SharedConfigFiles from "\@smithy/types" instead
  */
 export type SharedConfigFiles = __SharedConfigFiles;

package/node_modules/@smithy/shared-ini-file-loader/dist-types/types.d.ts

@@ -1,13 +1,16 @@
 import { ParsedIniData as __ParsedIniData, Profile as __Profile, SharedConfigFiles as __SharedConfigFiles } from "@smithy/types";
 /**
- * @deprecated Use Profile from "@smithy/types" instead
+ * @internal
+ * @deprecated Use Profile from "\@smithy/types" instead
  */
 export type Profile = __Profile;
 /**
- * @deprecated Use ParsedIniData from "@smithy/types" instead
+ * @internal
+ * @deprecated Use ParsedIniData from "\@smithy/types" instead
  */
 export type ParsedIniData = __ParsedIniData;
 /**
- * @deprecated Use SharedConfigFiles from "@smithy/types" instead
+ * @internal
+ * @deprecated Use SharedConfigFiles from "\@smithy/types" instead
  */
 export type SharedConfigFiles = __SharedConfigFiles;

package/node_modules/@smithy/shared-ini-file-loader/package.json

@@ -1,13 +1,12 @@
 {
   "name": "@smithy/shared-ini-file-loader",
-  "version": "2.4.0",
+  "version": "4.0.1",
   "dependencies": {
-    "@smithy/types": "^2.12.0",
+    "@smithy/types": "^4.1.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
-    "@tsconfig/recommended": "1.0.1",
-    "@types/node": "^14.14.31",
+    "@types/node": "^18.11.9",
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "rimraf": "3.0.2",
@@ -18,13 +17,14 @@
     "build:cjs": "node ../../scripts/inline shared-ini-file-loader",
     "build:es": "yarn g:tsc -p tsconfig.es.json",
     "build:types": "yarn g:tsc -p tsconfig.types.json",
-    "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
+    "build:types:downlevel": "rimraf dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4",
     "stage-release": "rimraf ./.release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
     "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo || exit 0",
     "lint": "eslint -c ../../.eslintrc.js \"src/**/*.ts\"",
     "format": "prettier --config ../../prettier.config.js --ignore-path ../.prettierignore --write \"**/*.{ts,md,json}\"",
     "extract:docs": "api-extractor run --local",
-    "test": "yarn g:jest"
+    "test": "yarn g:vitest run",
+    "test:watch": "yarn g:vitest watch"
   },
   "author": {
     "name": "AWS SDK for JavaScript Team",
@@ -45,7 +45,7 @@
     "./dist-es/slurpFile": false
   },
   "engines": {
-    "node": ">=14.0.0"
+    "node": ">=18.0.0"
   },
   "typesVersions": {
     "<4.0": {

package/node_modules/@smithy/signature-v4/dist-cjs/index.js

@@ -121,7 +121,7 @@ var getCanonicalHeaders = /* @__PURE__ */ __name(({ headers }, unsignableHeaders
       continue;
     }
     const canonicalHeaderName = headerName.toLowerCase();
-    if (canonicalHeaderName in ALWAYS_UNSIGNABLE_HEADERS || (unsignableHeaders == null ? void 0 : unsignableHeaders.has(canonicalHeaderName)) || PROXY_HEADER_PATTERN.test(canonicalHeaderName) || SEC_HEADER_PATTERN.test(canonicalHeaderName)) {
+    if (canonicalHeaderName in ALWAYS_UNSIGNABLE_HEADERS || unsignableHeaders?.has(canonicalHeaderName) || PROXY_HEADER_PATTERN.test(canonicalHeaderName) || SEC_HEADER_PATTERN.test(canonicalHeaderName)) {
       if (!signableHeaders || signableHeaders && !signableHeaders.has(canonicalHeaderName)) {
         continue;
       }
@@ -136,22 +136,20 @@ var import_util_uri_escape = require("@smithy/util-uri-escape");
 var getCanonicalQuery = /* @__PURE__ */ __name(({ query = {} }) => {
   const keys = [];
   const serialized = {};
-  for (const key of Object.keys(query).sort()) {
+  for (const key of Object.keys(query)) {
     if (key.toLowerCase() === SIGNATURE_HEADER) {
       continue;
     }
-    keys.push(key);
+    const encodedKey = (0, import_util_uri_escape.escapeUri)(key);
+    keys.push(encodedKey);
     const value = query[key];
     if (typeof value === "string") {
-      serialized[key] = `${(0, import_util_uri_escape.escapeUri)(key)}=${(0, import_util_uri_escape.escapeUri)(value)}`;
+      serialized[encodedKey] = `${encodedKey}=${(0, import_util_uri_escape.escapeUri)(value)}`;
     } else if (Array.isArray(value)) {
-      serialized[key] = value.slice(0).reduce(
-        (encoded, value2) => encoded.concat([`${(0, import_util_uri_escape.escapeUri)(key)}=${(0, import_util_uri_escape.escapeUri)(value2)}`]),
-        []
-      ).sort().join("&");
+      serialized[encodedKey] = value.slice(0).reduce((encoded, value2) => encoded.concat([`${encodedKey}=${(0, import_util_uri_escape.escapeUri)(value2)}`]), []).sort().join("&");
     }
   }
-  return keys.map((key) => serialized[key]).filter((serialized2) => serialized2).join("&");
+  return keys.sort().map((key) => serialized[key]).filter((serialized2) => serialized2).join("&");
 }, "getCanonicalQuery");
 
 // src/getPayloadHash.ts
@@ -177,7 +175,10 @@ var getPayloadHash = /* @__PURE__ */ __name(async ({ headers, body }, hashConstr
 // src/HeaderFormatter.ts
 
 var import_util_utf83 = require("@smithy/util-utf8");
-var _HeaderFormatter = class _HeaderFormatter {
+var HeaderFormatter = class {
+  static {
+    __name(this, "HeaderFormatter");
+  }
   format(headers) {
     const chunks = [];
     for (const headerName of Object.keys(headers)) {
@@ -244,16 +245,17 @@ var _HeaderFormatter = class _HeaderFormatter {
     }
   }
 };
-__name(_HeaderFormatter, "HeaderFormatter");
-var HeaderFormatter = _HeaderFormatter;
 var UUID_PATTERN = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
-var _Int64 = class _Int64 {
+var Int64 = class _Int64 {
   constructor(bytes) {
     this.bytes = bytes;
     if (bytes.byteLength !== 8) {
       throw new Error("Int64 buffers must be exactly 8 bytes");
     }
   }
+  static {
+    __name(this, "Int64");
+  }
   static fromNumber(number) {
     if (number > 9223372036854776e3 || number < -9223372036854776e3) {
       throw new Error(`${number} is too large (or, if negative, too small) to represent as an Int64`);
@@ -282,8 +284,6 @@ var _Int64 = class _Int64 {
     return String(this.valueOf());
   }
 };
-__name(_Int64, "Int64");
-var Int64 = _Int64;
 function negate(bytes) {
   for (let i = 0; i < 8; i++) {
     bytes[i] ^= 255;
@@ -307,27 +307,13 @@ var hasHeader = /* @__PURE__ */ __name((soughtHeader, headers) => {
   return false;
 }, "hasHeader");
 
-// src/cloneRequest.ts
-var cloneRequest = /* @__PURE__ */ __name(({ headers, query, ...rest }) => ({
-  ...rest,
-  headers: { ...headers },
-  query: query ? cloneQuery(query) : void 0
-}), "cloneRequest");
-var cloneQuery = /* @__PURE__ */ __name((query) => Object.keys(query).reduce((carry, paramName) => {
-  const param = query[paramName];
-  return {
-    ...carry,
-    [paramName]: Array.isArray(param) ? [...param] : param
-  };
-}, {}), "cloneQuery");
-
 // src/moveHeadersToQuery.ts
+var import_protocol_http = require("@smithy/protocol-http");
 var moveHeadersToQuery = /* @__PURE__ */ __name((request, options = {}) => {
-  var _a;
-  const { headers, query = {} } = typeof request.clone === "function" ? request.clone() : cloneRequest(request);
+  const { headers, query = {} } = import_protocol_http.HttpRequest.clone(request);
   for (const name of Object.keys(headers)) {
     const lname = name.toLowerCase();
-    if (lname.slice(0, 6) === "x-amz-" && !((_a = options.unhoistableHeaders) == null ? void 0 : _a.has(lname))) {
+    if (lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname) || options.hoistableHeaders?.has(lname)) {
       query[name] = headers[name];
       delete headers[name];
     }
@@ -340,8 +326,9 @@ var moveHeadersToQuery = /* @__PURE__ */ __name((request, options = {}) => {
 }, "moveHeadersToQuery");
 
 // src/prepareRequest.ts
+
 var prepareRequest = /* @__PURE__ */ __name((request) => {
-  request = typeof request.clone === "function" ? request.clone() : cloneRequest(request);
+  request = import_protocol_http.HttpRequest.clone(request);
   for (const headerName of Object.keys(request.headers)) {
     if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
       delete request.headers[headerName];
@@ -366,7 +353,7 @@ var toDate = /* @__PURE__ */ __name((time) => {
 }, "toDate");
 
 // src/SignatureV4.ts
-var _SignatureV4 = class _SignatureV4 {
+var SignatureV4 = class {
   constructor({
     applyChecksum,
     credentials,
@@ -383,6 +370,9 @@ var _SignatureV4 = class _SignatureV4 {
     this.regionProvider = (0, import_util_middleware.normalizeProvider)(region);
     this.credentialProvider = (0, import_util_middleware.normalizeProvider)(credentials);
   }
+  static {
+    __name(this, "SignatureV4");
+  }
   async presign(originalRequest, options = {}) {
     const {
       signingDate = /* @__PURE__ */ new Date(),
@@ -390,6 +380,7 @@ var _SignatureV4 = class _SignatureV4 {
       unsignableHeaders,
       unhoistableHeaders,
       signableHeaders,
+      hoistableHeaders,
       signingRegion,
       signingService
     } = options;
@@ -403,7 +394,7 @@ var _SignatureV4 = class _SignatureV4 {
       );
     }
     const scope = createScope(shortDate, region, signingService ?? this.service);
-    const request = moveHeadersToQuery(prepareRequest(originalRequest), { unhoistableHeaders });
+    const request = moveHeadersToQuery(prepareRequest(originalRequest), { unhoistableHeaders, hoistableHeaders });
     if (credentials.sessionToken) {
       request.query[TOKEN_QUERY_PARAM] = credentials.sessionToken;
     }
@@ -530,7 +521,7 @@ ${(0, import_util_hex_encoding.toHex)(hashedRequest)}`;
     if (this.uriEscapePath) {
       const normalizedPathSegments = [];
       for (const pathSegment of path.split("/")) {
-        if ((pathSegment == null ? void 0 : pathSegment.length) === 0)
+        if (pathSegment?.length === 0)
           continue;
         if (pathSegment === ".")
           continue;
@@ -540,7 +531,7 @@ ${(0, import_util_hex_encoding.toHex)(hashedRequest)}`;
           normalizedPathSegments.push(pathSegment);
         }
       }
-      const normalizedPath = `${(path == null ? void 0 : path.startsWith("/")) ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && (path == null ? void 0 : path.endsWith("/")) ? "/" : ""}`;
+      const normalizedPath = `${path?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path?.endsWith("/") ? "/" : ""}`;
       const doubleEncoded = (0, import_util_uri_escape.escapeUri)(normalizedPath);
       return doubleEncoded.replace(/%2F/g, "/");
     }
@@ -563,8 +554,6 @@ ${(0, import_util_hex_encoding.toHex)(hashedRequest)}`;
     }
   }
 };
-__name(_SignatureV4, "SignatureV4");
-var SignatureV4 = _SignatureV4;
 var formatDate = /* @__PURE__ */ __name((now) => {
   const longDate = iso8601(now).replace(/[\-:]/g, "");
   return {

package/node_modules/@smithy/signature-v4/dist-es/SignatureV4.js

@@ -23,7 +23,7 @@ export class SignatureV4 {
         this.credentialProvider = normalizeProvider(credentials);
     }
     async presign(originalRequest, options = {}) {
-        const { signingDate = new Date(), expiresIn = 3600, unsignableHeaders, unhoistableHeaders, signableHeaders, signingRegion, signingService, } = options;
+        const { signingDate = new Date(), expiresIn = 3600, unsignableHeaders, unhoistableHeaders, signableHeaders, hoistableHeaders, signingRegion, signingService, } = options;
         const credentials = await this.credentialProvider();
         this.validateResolvedCredentials(credentials);
         const region = signingRegion ?? (await this.regionProvider());
@@ -32,7 +32,7 @@ export class SignatureV4 {
             return Promise.reject("Signature version 4 presigned URLs" + " must have an expiration date less than one week in" + " the future");
         }
         const scope = createScope(shortDate, region, signingService ?? this.service);
-        const request = moveHeadersToQuery(prepareRequest(originalRequest), { unhoistableHeaders });
+        const request = moveHeadersToQuery(prepareRequest(originalRequest), { unhoistableHeaders, hoistableHeaders });
         if (credentials.sessionToken) {
             request.query[TOKEN_QUERY_PARAM] = credentials.sessionToken;
         }

package/node_modules/@smithy/signature-v4/dist-es/getCanonicalQuery.js

@@ -3,24 +3,26 @@ import { SIGNATURE_HEADER } from "./constants";
 export const getCanonicalQuery = ({ query = {} }) => {
     const keys = [];
     const serialized = {};
-    for (const key of Object.keys(query).sort()) {
+    for (const key of Object.keys(query)) {
         if (key.toLowerCase() === SIGNATURE_HEADER) {
             continue;
         }
-        keys.push(key);
+        const encodedKey = escapeUri(key);
+        keys.push(encodedKey);
         const value = query[key];
         if (typeof value === "string") {
-            serialized[key] = `${escapeUri(key)}=${escapeUri(value)}`;
+            serialized[encodedKey] = `${encodedKey}=${escapeUri(value)}`;
         }
         else if (Array.isArray(value)) {
-            serialized[key] = value
+            serialized[encodedKey] = value
                 .slice(0)
-                .reduce((encoded, value) => encoded.concat([`${escapeUri(key)}=${escapeUri(value)}`]), [])
+                .reduce((encoded, value) => encoded.concat([`${encodedKey}=${escapeUri(value)}`]), [])
                 .sort()
                 .join("&");
         }
     }
     return keys
+        .sort()
         .map((key) => serialized[key])
         .filter((serialized) => serialized)
         .join("&");

package/node_modules/@smithy/signature-v4/dist-es/moveHeadersToQuery.js

@@ -1,9 +1,10 @@
-import { cloneRequest } from "./cloneRequest";
+import { HttpRequest } from "@smithy/protocol-http";
 export const moveHeadersToQuery = (request, options = {}) => {
-    const { headers, query = {} } = typeof request.clone === "function" ? request.clone() : cloneRequest(request);
+    const { headers, query = {} } = HttpRequest.clone(request);
     for (const name of Object.keys(headers)) {
         const lname = name.toLowerCase();
-        if (lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) {
+        if ((lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) ||
+            options.hoistableHeaders?.has(lname)) {
             query[name] = headers[name];
             delete headers[name];
         }

package/node_modules/@smithy/signature-v4/dist-es/prepareRequest.js

@@ -1,7 +1,7 @@
-import { cloneRequest } from "./cloneRequest";
+import { HttpRequest } from "@smithy/protocol-http";
 import { GENERATED_HEADERS } from "./constants";
 export const prepareRequest = (request) => {
-    request = typeof request.clone === "function" ? request.clone() : cloneRequest(request);
+    request = HttpRequest.clone(request);
     for (const headerName of Object.keys(request.headers)) {
         if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
             delete request.headers[headerName];

package/node_modules/@smithy/signature-v4/dist-types/SignatureV4.d.ts

@@ -1,4 +1,7 @@
 import { AwsCredentialIdentity, ChecksumConstructor, EventSigner, EventSigningArguments, FormattedEvent, HashConstructor, HttpRequest, MessageSigner, Provider, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+/**
+ * @public
+ */
 export interface SignatureV4Init {
     /**
      * The service signing name.
@@ -18,7 +21,7 @@ export interface SignatureV4Init {
      * A constructor function for a hash object that will calculate SHA-256 HMAC
      * checksums.
      */
-    sha256?: ChecksumConstructor | HashConstructor;
+    sha256: ChecksumConstructor | HashConstructor;
     /**
      * Whether to uri-escape the request URI path as part of computing the
      * canonical request string. This is required for every AWS service, except
@@ -37,9 +40,15 @@ export interface SignatureV4Init {
      */
     applyChecksum?: boolean;
 }
+/**
+ * @public
+ */
 export interface SignatureV4CryptoInit {
     sha256: ChecksumConstructor | HashConstructor;
 }
+/**
+ * @public
+ */
 export declare class SignatureV4 implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
     private readonly service;
     private readonly regionProvider;

package/node_modules/@smithy/signature-v4/dist-types/credentialDerivation.d.ts

@@ -2,21 +2,25 @@ import { AwsCredentialIdentity, ChecksumConstructor, HashConstructor } from "@sm
 /**
  * Create a string describing the scope of credentials used to sign a request.
  *
- * @param shortDate The current calendar date in the form YYYYMMDD.
- * @param region    The AWS region in which the service resides.
- * @param service   The service to which the signed request is being sent.
+ * @internal
+ *
+ * @param shortDate - the current calendar date in the form YYYYMMDD.
+ * @param region    - the AWS region in which the service resides.
+ * @param service   - the service to which the signed request is being sent.
  */
 export declare const createScope: (shortDate: string, region: string, service: string) => string;
 /**
- * Derive a signing key from its composite parts
+ * Derive a signing key from its composite parts.
+ *
+ * @internal
  *
- * @param sha256Constructor A constructor function that can instantiate SHA-256
+ * @param sha256Constructor - a constructor function that can instantiate SHA-256
  *                          hash objects.
- * @param credentials       The credentials with which the request will be
+ * @param credentials       - the credentials with which the request will be
  *                          signed.
- * @param shortDate         The current calendar date in the form YYYYMMDD.
- * @param region            The AWS region in which the service resides.
- * @param service           The service to which the signed request is being
+ * @param shortDate         - the current calendar date in the form YYYYMMDD.
+ * @param region            - the AWS region in which the service resides.
+ * @param service           - the service to which the signed request is being
  *                          sent.
  */
 export declare const getSigningKey: (sha256Constructor: ChecksumConstructor | HashConstructor, credentials: AwsCredentialIdentity, shortDate: string, region: string, service: string) => Promise<Uint8Array>;

package/node_modules/@smithy/signature-v4/dist-types/getCanonicalHeaders.d.ts

@@ -1,5 +1,5 @@
 import { HeaderBag, HttpRequest } from "@smithy/types";
 /**
- * @private
+ * @internal
  */
 export declare const getCanonicalHeaders: ({ headers }: HttpRequest, unsignableHeaders?: Set<string>, signableHeaders?: Set<string>) => HeaderBag;

package/node_modules/@smithy/signature-v4/dist-types/getCanonicalQuery.d.ts

@@ -1,5 +1,5 @@
 import { HttpRequest } from "@smithy/types";
 /**
- * @private
+ * @internal
  */
 export declare const getCanonicalQuery: ({ query }: HttpRequest) => string;

package/node_modules/@smithy/signature-v4/dist-types/getPayloadHash.d.ts

@@ -1,5 +1,5 @@
 import { ChecksumConstructor, HashConstructor, HttpRequest } from "@smithy/types";
 /**
- * @private
+ * @internal
  */
 export declare const getPayloadHash: ({ headers, body }: HttpRequest, hashConstructor: ChecksumConstructor | HashConstructor) => Promise<string>;

package/node_modules/@smithy/signature-v4/dist-types/moveHeadersToQuery.d.ts

@@ -1,9 +1,10 @@
-import { HttpRequest, QueryParameterBag } from "@smithy/types";
+import type { HttpRequest as IHttpRequest, QueryParameterBag } from "@smithy/types";
 /**
- * @private
+ * @internal
  */
-export declare const moveHeadersToQuery: (request: HttpRequest, options?: {
+export declare const moveHeadersToQuery: (request: IHttpRequest, options?: {
     unhoistableHeaders?: Set<string>;
-}) => HttpRequest & {
+    hoistableHeaders?: Set<string>;
+}) => IHttpRequest & {
     query: QueryParameterBag;
 };

package/node_modules/@smithy/signature-v4/dist-types/prepareRequest.d.ts

@@ -1,5 +1,5 @@
-import { HttpRequest } from "@smithy/types";
+import type { HttpRequest as IHttpRequest } from "@smithy/types";
 /**
- * @private
+ * @internal
  */
-export declare const prepareRequest: (request: HttpRequest) => HttpRequest;
+export declare const prepareRequest: (request: IHttpRequest) => IHttpRequest;