@jjrawlins/cdk-iam-policy-builder-helper 0.0.2 → 0.0.4

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/cbor/cbor-types.d.ts

@@ -0,0 +1,66 @@
+/// <reference types="node" />
+export type CborItemType = undefined | boolean | number | bigint | [
+    CborUnstructuredByteStringType,
+    Uint64
+] | string | CborTagType;
+export type CborTagType = {
+    tag: Uint64 | number;
+    value: CborValueType;
+    [tagSymbol]: true;
+};
+export type CborUnstructuredByteStringType = Uint8Array;
+export type CborListType<T = any> = Array<T>;
+export type CborMapType<T = any> = Record<string, T>;
+export type CborCollectionType<T = any> = CborMapType<T> | CborListType<T>;
+export type CborValueType = CborItemType | CborCollectionType | any;
+export type CborArgumentLength = 1 | 2 | 4 | 8;
+export type CborArgumentLengthOffset = 1 | 2 | 3 | 5 | 9;
+export type CborOffset = number;
+export type Uint8 = number;
+export type Uint32 = number;
+export type Uint64 = bigint;
+export type Float32 = number;
+export type Int64 = bigint;
+export type Float16Binary = number;
+export type Float32Binary = number;
+export type CborMajorType = typeof majorUint64 | typeof majorNegativeInt64 | typeof majorUnstructuredByteString | typeof majorUtf8String | typeof majorList | typeof majorMap | typeof majorTag | typeof majorSpecial;
+export declare const majorUint64 = 0;
+export declare const majorNegativeInt64 = 1;
+export declare const majorUnstructuredByteString = 2;
+export declare const majorUtf8String = 3;
+export declare const majorList = 4;
+export declare const majorMap = 5;
+export declare const majorTag = 6;
+export declare const majorSpecial = 7;
+export declare const specialFalse = 20;
+export declare const specialTrue = 21;
+export declare const specialNull = 22;
+export declare const specialUndefined = 23;
+export declare const extendedOneByte = 24;
+export declare const extendedFloat16 = 25;
+export declare const extendedFloat32 = 26;
+export declare const extendedFloat64 = 27;
+export declare const minorIndefinite = 31;
+export declare function alloc(size: number): Uint8Array | Buffer;
+/**
+ * @public
+ *
+ * The presence of this symbol as an object key indicates it should be considered a tag
+ * for CBOR serialization purposes.
+ *
+ * The object must also have the properties "tag" and "value".
+ */
+export declare const tagSymbol: unique symbol;
+/**
+ * @public
+ * Applies the tag symbol to the object.
+ */
+export declare function tag(data: {
+    tag: number | bigint;
+    value: any;
+    [tagSymbol]?: true;
+}): {
+    tag: number | bigint;
+    value: any;
+    [tagSymbol]: true;
+};

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/cbor/cbor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * This implementation is synchronous and only implements the parts of CBOR
+ * specification used by Smithy RPCv2 CBOR protocol.
+ *
+ * This cbor serde implementation is derived from AWS SDK for Go's implementation.
+ * @see https://github.com/aws/smithy-go/tree/main/encoding/cbor
+ *
+ * The cbor-x implementation was also instructional:
+ * @see https://github.com/kriszyp/cbor-x
+ */
+export declare const cbor: {
+    deserialize(payload: Uint8Array): any;
+    serialize(input: any): Uint8Array;
+    /**
+     * @public
+     * @param size - byte length to allocate.
+     *
+     * This may be used to garbage collect the CBOR
+     * shared encoding buffer space,
+     * e.g. resizeEncodingBuffer(0);
+     *
+     * This may also be used to pre-allocate more space for
+     * CBOR encoding, e.g. resizeEncodingBuffer(100_000_000);
+     */
+    resizeEncodingBuffer(size: number): void;
+};

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/cbor/index.d.ts

@@ -0,0 +1,3 @@
+export { cbor } from "./cbor";
+export * from "./parseCborBody";
+export { tagSymbol, tag } from "./cbor-types";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/cbor/parseCborBody.d.ts

@@ -0,0 +1,31 @@
+import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
+import { HeaderBag as __HeaderBag, HttpResponse, SerdeContext as __SerdeContext, SerdeContext } from "@smithy/types";
+import { tag, tagSymbol } from "./cbor-types";
+/**
+ * @internal
+ */
+export declare const parseCborBody: (streamBody: any, context: SerdeContext) => any;
+/**
+ * @internal
+ */
+export declare const dateToTag: (date: Date) => {
+    tag: number | bigint;
+    value: any;
+    [tagSymbol]: true;
+};
+/**
+ * @internal
+ */
+export declare const parseCborErrorBody: (errorBody: any, context: SerdeContext) => Promise<any>;
+/**
+ * @internal
+ */
+export declare const loadSmithyRpcV2CborErrorCode: (output: HttpResponse, data: any) => string | undefined;
+/**
+ * @internal
+ */
+export declare const checkCborResponse: (response: HttpResponse) => void;
+/**
+ * @internal
+ */
+export declare const buildHttpRpcRequest: (context: __SerdeContext, headers: __HeaderBag, path: string, resolvedHostname: string | undefined, body: any) => Promise<__HttpRequest>;

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/collect-stream-body.d.ts

@@ -0,0 +1,10 @@
+import { SerdeContext } from "@smithy/types";
+import { Uint8ArrayBlobAdapter } from "@smithy/util-stream";
+/**
+ * @internal
+ *
+ * Collect low-level response body stream to Uint8Array.
+ */
+export declare const collectBody: (streamBody: any, context: {
+    streamCollector: SerdeContext["streamCollector"];
+}) => Promise<Uint8ArrayBlobAdapter>;

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/extended-encode-uri-component.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @internal
+ *
+ * Function that wraps encodeURIComponent to encode additional characters
+ * to fully adhere to RFC 3986.
+ */
+export declare function extendedEncodeURIComponent(str: string): string;

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./collect-stream-body";
+export * from "./extended-encode-uri-component";
+export * from "./requestBuilder";
+export * from "./resolve-path";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/requestBuilder.d.ts

@@ -0,0 +1,51 @@
+import { HttpRequest } from "@smithy/protocol-http";
+import { SerdeContext } from "@smithy/types";
+/**
+ * @internal
+ * used in code-generated serde.
+ */
+export declare function requestBuilder(input: any, context: SerdeContext): RequestBuilder;
+/**
+ * @internal
+ */
+export declare class RequestBuilder {
+    private input;
+    private context;
+    private query;
+    private method;
+    private headers;
+    private path;
+    private body;
+    private hostname;
+    private resolvePathStack;
+    constructor(input: any, context: SerdeContext);
+    build(): Promise<HttpRequest>;
+    /**
+     * Brevity setter for "hostname".
+     */
+    hn(hostname: string): this;
+    /**
+     * Brevity initial builder for "basepath".
+     */
+    bp(uriLabel: string): this;
+    /**
+     * Brevity incremental builder for "path".
+     */
+    p(memberName: string, labelValueProvider: () => string | undefined, uriLabel: string, isGreedyLabel: boolean): this;
+    /**
+     * Brevity setter for "headers".
+     */
+    h(headers: Record<string, string>): this;
+    /**
+     * Brevity setter for "query".
+     */
+    q(query: Record<string, string>): this;
+    /**
+     * Brevity setter for "body".
+     */
+    b(body: any): this;
+    /**
+     * Brevity setter for "method".
+     */
+    m(method: string): this;
+}

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/resolve-path.d.ts

@@ -0,0 +1,4 @@
+/**
+ * @internal
+ */
+export declare const resolvedPath: (resolvedPath: string, input: unknown, memberName: string, labelValueProvider: () => string | undefined, uriLabel: string, isGreedyLabel: boolean) => string;

package/node_modules/@smithy/core/package.json

@@ -1,21 +1,52 @@
 {
   "name": "@smithy/core",
-  "version": "1.4.2",
+  "version": "3.1.5",
   "scripts": {
-    "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types && yarn build:types:downlevel'",
+    "build": "yarn lint && concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types && yarn build:types:downlevel'",
     "build:cjs": "node ../../scripts/inline core",
     "build:es": "yarn g:tsc -p tsconfig.es.json",
     "build:types": "yarn g:tsc -p tsconfig.types.json",
-    "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
+    "build:types:downlevel": "rimraf dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4",
     "stage-release": "rimraf ./.release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
     "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo || exit 0",
-    "lint": "eslint -c ../../.eslintrc.js \"src/**/*.ts\"",
-    "format": "prettier --config ../../prettier.config.js --ignore-path ../.prettierignore --write \"**/*.{ts,md,json}\"",
-    "test": "yarn g:jest"
+    "lint": "npx eslint -c ../../.eslintrc.js \"src/**/*.ts\" --fix && node ./scripts/lint",
+    "format": "prettier --config ../../prettier.config.js --ignore-path ../../.prettierignore --write \"**/*.{ts,md,json}\"",
+    "test": "yarn g:vitest run",
+    "test:cbor:perf": "node ./scripts/cbor-perf.mjs",
+    "test:watch": "yarn g:vitest watch"
   },
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
   "types": "./dist-types/index.d.ts",
+  "exports": {
+    ".": {
+      "module": "./dist-es/index.js",
+      "node": "./dist-cjs/index.js",
+      "import": "./dist-es/index.js",
+      "require": "./dist-cjs/index.js",
+      "types": "./dist-types/index.d.ts"
+    },
+    "./package.json": {
+      "module": "./package.json",
+      "node": "./package.json",
+      "import": "./package.json",
+      "require": "./package.json"
+    },
+    "./cbor": {
+      "module": "./dist-es/submodules/cbor/index.js",
+      "node": "./dist-cjs/submodules/cbor/index.js",
+      "import": "./dist-es/submodules/cbor/index.js",
+      "require": "./dist-cjs/submodules/cbor/index.js",
+      "types": "./dist-types/submodules/cbor/index.d.ts"
+    },
+    "./protocols": {
+      "module": "./dist-es/submodules/protocols/index.js",
+      "node": "./dist-cjs/submodules/protocols/index.js",
+      "import": "./dist-es/submodules/protocols/index.js",
+      "require": "./dist-cjs/submodules/protocols/index.js",
+      "types": "./dist-types/submodules/protocols/index.d.ts"
+    }
+  },
   "author": {
     "name": "AWS Smithy Team",
     "email": "",
@@ -23,17 +54,17 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@smithy/middleware-endpoint": "^2.5.1",
-    "@smithy/middleware-retry": "^2.3.1",
-    "@smithy/middleware-serde": "^2.3.0",
-    "@smithy/protocol-http": "^3.3.0",
-    "@smithy/smithy-client": "^2.5.1",
-    "@smithy/types": "^2.12.0",
-    "@smithy/util-middleware": "^2.2.0",
+    "@smithy/middleware-serde": "^4.0.2",
+    "@smithy/protocol-http": "^5.0.1",
+    "@smithy/types": "^4.1.0",
+    "@smithy/util-body-length-browser": "^4.0.0",
+    "@smithy/util-middleware": "^4.0.1",
+    "@smithy/util-stream": "^4.1.2",
+    "@smithy/util-utf8": "^4.0.0",
     "tslib": "^2.6.2"
   },
   "engines": {
-    "node": ">=14.0.0"
+    "node": ">=18.0.0"
   },
   "typesVersions": {
     "<4.0": {
@@ -43,6 +74,10 @@
     }
   },
   "files": [
+    "./cbor.d.ts",
+    "./cbor.js",
+    "./protocols.d.ts",
+    "./protocols.js",
     "dist-*/**"
   ],
   "homepage": "https://github.com/awslabs/smithy-typescript/tree/main/packages/core",
@@ -52,9 +87,10 @@
     "directory": "packages/core"
   },
   "devDependencies": {
-    "@tsconfig/recommended": "1.0.1",
+    "@types/node": "^18.11.9",
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
+    "json-bigint": "^1.0.0",
     "rimraf": "3.0.2",
     "typedoc": "0.23.23"
   },

package/node_modules/@smithy/core/protocols.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Do not edit:
+ * This is a compatibility redirect for contexts that do not understand package.json exports field.
+ */
+declare module "@smithy/core/protocols" {
+  export * from "@smithy/core/dist-types/submodules/protocols/index.d";
+}

package/node_modules/@smithy/core/protocols.js

@@ -0,0 +1,6 @@
+
+/**
+ * Do not edit:
+ * This is a compatibility redirect for contexts that do not understand package.json exports field.
+ */
+module.exports = require("./dist-cjs/submodules/protocols/index.js");

package/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js

@@ -44,13 +44,12 @@ var import_buffer = require("buffer");
 var import_http = require("http");
 function httpRequest(options) {
   return new Promise((resolve, reject) => {
-    var _a;
     const req = (0, import_http.request)({
       method: "GET",
       ...options,
       // Node.js http module doesn't accept hostname with square brackets
       // Refs: https://github.com/nodejs/node/issues/39738
-      hostname: (_a = options.hostname) == null ? void 0 : _a.replace(/^\[(.+)\]$/, "$1")
+      hostname: options.hostname?.replace(/^\[(.+)\]$/, "$1")
     });
     req.on("error", (err) => {
       reject(Object.assign(new import_property_provider.ProviderError("Unable to connect to instance metadata service"), err));
@@ -88,7 +87,8 @@ var fromImdsCredentials = /* @__PURE__ */ __name((creds) => ({
   accessKeyId: creds.AccessKeyId,
   secretAccessKey: creds.SecretAccessKey,
   sessionToken: creds.Token,
-  expiration: new Date(creds.Expiration)
+  expiration: new Date(creds.Expiration),
+  ...creds.AccountId && { accountId: creds.AccountId }
 }), "fromImdsCredentials");
 
 // src/remoteProvider/RemoteProviderInit.ts
@@ -115,10 +115,12 @@ var ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
 var fromContainerMetadata = /* @__PURE__ */ __name((init = {}) => {
   const { timeout, maxRetries } = providerConfigFromInit(init);
   return () => retry(async () => {
-    const requestOptions = await getCmdsUri();
+    const requestOptions = await getCmdsUri({ logger: init.logger });
     const credsResponse = JSON.parse(await requestFromEcsImds(timeout, requestOptions));
     if (!isImdsCredentials(credsResponse)) {
-      throw new import_property_provider.CredentialsProviderError("Invalid response received from instance metadata service.");
+      throw new import_property_provider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+        logger: init.logger
+      });
     }
     return fromImdsCredentials(credsResponse);
   }, maxRetries);
@@ -145,7 +147,7 @@ var GREENGRASS_PROTOCOLS = {
   "http:": true,
   "https:": true
 };
-var getCmdsUri = /* @__PURE__ */ __name(async () => {
+var getCmdsUri = /* @__PURE__ */ __name(async ({ logger }) => {
   if (process.env[ENV_CMDS_RELATIVE_URI]) {
     return {
       hostname: CMDS_IP,
@@ -155,16 +157,16 @@ var getCmdsUri = /* @__PURE__ */ __name(async () => {
   if (process.env[ENV_CMDS_FULL_URI]) {
     const parsed = (0, import_url.parse)(process.env[ENV_CMDS_FULL_URI]);
     if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
-      throw new import_property_provider.CredentialsProviderError(
-        `${parsed.hostname} is not a valid container metadata service hostname`,
-        false
-      );
+      throw new import_property_provider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
+        tryNextLink: false,
+        logger
+      });
     }
     if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
-      throw new import_property_provider.CredentialsProviderError(
-        `${parsed.protocol} is not a valid container metadata service protocol`,
-        false
-      );
+      throw new import_property_provider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
+        tryNextLink: false,
+        logger
+      });
     }
     return {
       ...parsed,
@@ -173,7 +175,10 @@ var getCmdsUri = /* @__PURE__ */ __name(async () => {
   }
   throw new import_property_provider.CredentialsProviderError(
     `The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`,
-    false
+    {
+      tryNextLink: false,
+      logger
+    }
   );
 }, "getCmdsUri");
 
@@ -183,16 +188,17 @@ var getCmdsUri = /* @__PURE__ */ __name(async () => {
 
 // src/error/InstanceMetadataV1FallbackError.ts
 
-var _InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends import_property_provider.CredentialsProviderError {
+var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends import_property_provider.CredentialsProviderError {
   constructor(message, tryNextLink = true) {
     super(message, tryNextLink);
     this.tryNextLink = tryNextLink;
     this.name = "InstanceMetadataV1FallbackError";
     Object.setPrototypeOf(this, _InstanceMetadataV1FallbackError.prototype);
   }
+  static {
+    __name(this, "InstanceMetadataV1FallbackError");
+  }
 };
-__name(_InstanceMetadataV1FallbackError, "InstanceMetadataV1FallbackError");
-var InstanceMetadataV1FallbackError = _InstanceMetadataV1FallbackError;
 
 // src/utils/getInstanceMetadataEndpoint.ts
 var import_node_config_provider = require("@smithy/node-config-provider");
@@ -266,7 +272,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL
 
 // src/utils/staticStabilityProvider.ts
 var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
-  const logger = (options == null ? void 0 : options.logger) || console;
+  const logger = options?.logger || console;
   let pastCredentials;
   return async () => {
     let credentials;
@@ -294,14 +300,13 @@ var IMDS_TOKEN_PATH = "/latest/api/token";
 var AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED";
 var PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled";
 var X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token";
-var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceImdsProvider(init), { logger: init.logger }), "fromInstanceMetadata");
-var getInstanceImdsProvider = /* @__PURE__ */ __name((init) => {
+var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
+var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
   let disableFetchToken = false;
   const { logger, profile } = init;
   const { timeout, maxRetries } = providerConfigFromInit(init);
   const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
-    var _a;
-    const isImdsV1Fallback = disableFetchToken || ((_a = options.headers) == null ? void 0 : _a[X_AWS_EC2_METADATA_TOKEN]) == null;
+    const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
     if (isImdsV1Fallback) {
       let fallbackBlockedFromProfile = false;
       let fallbackBlockedFromProcessEnv = false;
@@ -312,7 +317,8 @@ var getInstanceImdsProvider = /* @__PURE__ */ __name((init) => {
             fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
             if (envValue === void 0) {
               throw new import_property_provider.CredentialsProviderError(
-                `${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`
+                `${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`,
+                { logger: init.logger }
               );
             }
             return fallbackBlockedFromProcessEnv;
@@ -358,7 +364,7 @@ var getInstanceImdsProvider = /* @__PURE__ */ __name((init) => {
     return retry(async () => {
       let creds;
       try {
-        creds = await getCredentialsFromProfile(imdsProfile, options);
+        creds = await getCredentialsFromProfile(imdsProfile, options, init);
       } catch (err) {
         if (err.statusCode === 401) {
           disableFetchToken = false;
@@ -371,21 +377,21 @@ var getInstanceImdsProvider = /* @__PURE__ */ __name((init) => {
   return async () => {
     const endpoint = await getInstanceMetadataEndpoint();
     if (disableFetchToken) {
-      logger == null ? void 0 : logger.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+      logger?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
       return getCredentials(maxRetries, { ...endpoint, timeout });
     } else {
       let token;
       try {
         token = (await getMetadataToken({ ...endpoint, timeout })).toString();
       } catch (error) {
-        if ((error == null ? void 0 : error.statusCode) === 400) {
+        if (error?.statusCode === 400) {
           throw Object.assign(error, {
             message: "EC2 Metadata token request returned error"
           });
         } else if (error.message === "TimeoutError" || [403, 404, 405].includes(error.statusCode)) {
           disableFetchToken = true;
         }
-        logger == null ? void 0 : logger.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+        logger?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
         return getCredentials(maxRetries, { ...endpoint, timeout });
       }
       return getCredentials(maxRetries, {
@@ -397,7 +403,7 @@ var getInstanceImdsProvider = /* @__PURE__ */ __name((init) => {
       });
     }
   };
-}, "getInstanceImdsProvider");
+}, "getInstanceMetadataProvider");
 var getMetadataToken = /* @__PURE__ */ __name(async (options) => httpRequest({
   ...options,
   path: IMDS_TOKEN_PATH,
@@ -407,17 +413,19 @@ var getMetadataToken = /* @__PURE__ */ __name(async (options) => httpRequest({
   }
 }), "getMetadataToken");
 var getProfile = /* @__PURE__ */ __name(async (options) => (await httpRequest({ ...options, path: IMDS_PATH })).toString(), "getProfile");
-var getCredentialsFromProfile = /* @__PURE__ */ __name(async (profile, options) => {
-  const credsResponse = JSON.parse(
+var getCredentialsFromProfile = /* @__PURE__ */ __name(async (profile, options, init) => {
+  const credentialsResponse = JSON.parse(
     (await httpRequest({
       ...options,
       path: IMDS_PATH + profile
     })).toString()
   );
-  if (!isImdsCredentials(credsResponse)) {
-    throw new import_property_provider.CredentialsProviderError("Invalid response received from instance metadata service.");
+  if (!isImdsCredentials(credentialsResponse)) {
+    throw new import_property_provider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+      logger: init.logger
+    });
   }
-  return fromImdsCredentials(credsResponse);
+  return fromImdsCredentials(credentialsResponse);
 }, "getCredentialsFromProfile");
 // Annotate the CommonJS export names for ESM import in node:
 

package/node_modules/@smithy/credential-provider-imds/dist-es/fromContainerMetadata.js

@@ -10,10 +10,12 @@ export const ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
 export const fromContainerMetadata = (init = {}) => {
     const { timeout, maxRetries } = providerConfigFromInit(init);
     return () => retry(async () => {
-        const requestOptions = await getCmdsUri();
+        const requestOptions = await getCmdsUri({ logger: init.logger });
         const credsResponse = JSON.parse(await requestFromEcsImds(timeout, requestOptions));
         if (!isImdsCredentials(credsResponse)) {
-            throw new CredentialsProviderError("Invalid response received from instance metadata service.");
+            throw new CredentialsProviderError("Invalid response received from instance metadata service.", {
+                logger: init.logger,
+            });
         }
         return fromImdsCredentials(credsResponse);
     }, maxRetries);
@@ -40,7 +42,7 @@ const GREENGRASS_PROTOCOLS = {
     "http:": true,
     "https:": true,
 };
-const getCmdsUri = async () => {
+const getCmdsUri = async ({ logger }) => {
     if (process.env[ENV_CMDS_RELATIVE_URI]) {
         return {
             hostname: CMDS_IP,
@@ -50,10 +52,16 @@ const getCmdsUri = async () => {
     if (process.env[ENV_CMDS_FULL_URI]) {
         const parsed = parse(process.env[ENV_CMDS_FULL_URI]);
         if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
-            throw new CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, false);
+            throw new CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
+                tryNextLink: false,
+                logger,
+            });
         }
         if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
-            throw new CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, false);
+            throw new CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
+                tryNextLink: false,
+                logger,
+            });
         }
         return {
             ...parsed,
@@ -62,5 +70,8 @@ const getCmdsUri = async () => {
     }
     throw new CredentialsProviderError("The container metadata credential provider cannot be used unless" +
         ` the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment` +
-        " variable is set", false);
+        " variable is set", {
+        tryNextLink: false,
+        logger,
+    });
 };

package/node_modules/@smithy/credential-provider-imds/dist-es/fromInstanceMetadata.js

@@ -12,8 +12,8 @@ const IMDS_TOKEN_PATH = "/latest/api/token";
 const AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED";
 const PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled";
 const X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token";
-export const fromInstanceMetadata = (init = {}) => staticStabilityProvider(getInstanceImdsProvider(init), { logger: init.logger });
-const getInstanceImdsProvider = (init) => {
+export const fromInstanceMetadata = (init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger });
+const getInstanceMetadataProvider = (init = {}) => {
     let disableFetchToken = false;
     const { logger, profile } = init;
     const { timeout, maxRetries } = providerConfigFromInit(init);
@@ -27,7 +27,7 @@ const getInstanceImdsProvider = (init) => {
                     const envValue = env[AWS_EC2_METADATA_V1_DISABLED];
                     fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
                     if (envValue === undefined) {
-                        throw new CredentialsProviderError(`${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`);
+                        throw new CredentialsProviderError(`${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`, { logger: init.logger });
                     }
                     return fallbackBlockedFromProcessEnv;
                 },
@@ -67,7 +67,7 @@ const getInstanceImdsProvider = (init) => {
         return retry(async () => {
             let creds;
             try {
-                creds = await getCredentialsFromProfile(imdsProfile, options);
+                creds = await getCredentialsFromProfile(imdsProfile, options, init);
             }
             catch (err) {
                 if (err.statusCode === 401) {
@@ -120,13 +120,15 @@ const getMetadataToken = async (options) => httpRequest({
     },
 });
 const getProfile = async (options) => (await httpRequest({ ...options, path: IMDS_PATH })).toString();
-const getCredentialsFromProfile = async (profile, options) => {
-    const credsResponse = JSON.parse((await httpRequest({
+const getCredentialsFromProfile = async (profile, options, init) => {
+    const credentialsResponse = JSON.parse((await httpRequest({
         ...options,
         path: IMDS_PATH + profile,
     })).toString());
-    if (!isImdsCredentials(credsResponse)) {
-        throw new CredentialsProviderError("Invalid response received from instance metadata service.");
+    if (!isImdsCredentials(credentialsResponse)) {
+        throw new CredentialsProviderError("Invalid response received from instance metadata service.", {
+            logger: init.logger,
+        });
     }
-    return fromImdsCredentials(credsResponse);
+    return fromImdsCredentials(credentialsResponse);
 };

package/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js

@@ -9,4 +9,5 @@ export const fromImdsCredentials = (creds) => ({
     secretAccessKey: creds.SecretAccessKey,
     sessionToken: creds.Token,
     expiration: new Date(creds.Expiration),
+    ...(creds.AccountId && { accountId: creds.AccountId }),
 });