@jjrawlins/cdk-iam-policy-builder-helper 0.0.78 → 0.0.80

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/runtimeConfig.shared.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getRuntimeConfig = void 0;
 const core_1 = require("@aws-sdk/core");
+const protocols_1 = require("@aws-sdk/core/protocols");
 const core_2 = require("@smithy/core");
 const smithy_client_1 = require("@smithy/smithy-client");
 const url_parser_1 = require("@smithy/url-parser");
@@ -31,6 +32,7 @@ const getRuntimeConfig = (config) => {
             },
         ],
         logger: config?.logger ?? new smithy_client_1.NoOpLogger(),
+        protocol: config?.protocol ?? new protocols_1.AwsRestJsonProtocol({ defaultNamespace: "com.amazonaws.ssooidc" }),
         serviceId: config?.serviceId ?? "SSO OIDC",
         urlParser: config?.urlParser ?? url_parser_1.parseUrl,
         utf8Decoder: config?.utf8Decoder ?? util_utf8_1.fromUtf8,

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/SSOOIDCClient.js

@@ -4,6 +4,7 @@ import { getRecursionDetectionPlugin } from "@aws-sdk/middleware-recursion-detec
 import { getUserAgentPlugin, resolveUserAgentConfig, } from "@aws-sdk/middleware-user-agent";
 import { resolveRegionConfig } from "@smithy/config-resolver";
 import { DefaultIdentityProviderConfig, getHttpAuthSchemeEndpointRuleSetPlugin, getHttpSigningPlugin, } from "@smithy/core";
+import { getSchemaSerdePlugin } from "@smithy/core/schema";
 import { getContentLengthPlugin } from "@smithy/middleware-content-length";
 import { resolveEndpointConfig } from "@smithy/middleware-endpoint";
 import { getRetryPlugin, resolveRetryConfig } from "@smithy/middleware-retry";
@@ -28,6 +29,7 @@ export class SSOOIDCClient extends __Client {
         const _config_7 = resolveHttpAuthSchemeConfig(_config_6);
         const _config_8 = resolveRuntimeExtensions(_config_7, configuration?.extensions || []);
         this.config = _config_8;
+        this.middlewareStack.use(getSchemaSerdePlugin(this.config));
         this.middlewareStack.use(getUserAgentPlugin(this.config));
         this.middlewareStack.use(getRetryPlugin(this.config));
         this.middlewareStack.use(getContentLengthPlugin(this.config));

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/commands/CreateTokenCommand.js

@@ -1,23 +1,16 @@
 import { getEndpointPlugin } from "@smithy/middleware-endpoint";
-import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CreateTokenRequestFilterSensitiveLog, CreateTokenResponseFilterSensitiveLog, } from "../models/models_0";
-import { de_CreateTokenCommand, se_CreateTokenCommand } from "../protocols/Aws_restJson1";
+import { CreateToken } from "../schemas/schemas_0";
 export { $Command };
 export class CreateTokenCommand extends $Command
     .classBuilder()
     .ep(commonParams)
     .m(function (Command, cs, config, o) {
-    return [
-        getSerdePlugin(config, this.serialize, this.deserialize),
-        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
-    ];
+    return [getEndpointPlugin(config, Command.getEndpointParameterInstructions())];
 })
     .s("AWSSSOOIDCService", "CreateToken", {})
     .n("SSOOIDCClient", "CreateTokenCommand")
-    .f(CreateTokenRequestFilterSensitiveLog, CreateTokenResponseFilterSensitiveLog)
-    .ser(se_CreateTokenCommand)
-    .de(de_CreateTokenCommand)
+    .sc(CreateToken)
     .build() {
 }

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/models/models_0.js

@@ -1,4 +1,3 @@
-import { SENSITIVE_STRING } from "@smithy/smithy-client";
 import { SSOOIDCServiceException as __BaseException } from "./SSOOIDCServiceException";
 export const AccessDeniedExceptionReason = {
     KMS_ACCESS_DENIED: "KMS_AccessDeniedException",
@@ -37,18 +36,6 @@ export class AuthorizationPendingException extends __BaseException {
         this.error_description = opts.error_description;
     }
 }
-export const CreateTokenRequestFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.clientSecret && { clientSecret: SENSITIVE_STRING }),
-    ...(obj.refreshToken && { refreshToken: SENSITIVE_STRING }),
-    ...(obj.codeVerifier && { codeVerifier: SENSITIVE_STRING }),
-});
-export const CreateTokenResponseFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.accessToken && { accessToken: SENSITIVE_STRING }),
-    ...(obj.refreshToken && { refreshToken: SENSITIVE_STRING }),
-    ...(obj.idToken && { idToken: SENSITIVE_STRING }),
-});
 export class ExpiredTokenException extends __BaseException {
     name = "ExpiredTokenException";
     $fault = "client";

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/runtimeConfig.shared.js

@@ -1,4 +1,5 @@
 import { AwsSdkSigV4Signer } from "@aws-sdk/core";
+import { AwsRestJsonProtocol } from "@aws-sdk/core/protocols";
 import { NoAuthSigner } from "@smithy/core";
 import { NoOpLogger } from "@smithy/smithy-client";
 import { parseUrl } from "@smithy/url-parser";
@@ -28,6 +29,7 @@ export const getRuntimeConfig = (config) => {
             },
         ],
         logger: config?.logger ?? new NoOpLogger(),
+        protocol: config?.protocol ?? new AwsRestJsonProtocol({ defaultNamespace: "com.amazonaws.ssooidc" }),
         serviceId: config?.serviceId ?? "SSO OIDC",
         urlParser: config?.urlParser ?? parseUrl,
         utf8Decoder: config?.utf8Decoder ?? fromUtf8,

package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/schemas/schemas_0.js

@@ -0,0 +1,211 @@
+const _ADE = "AccessDeniedException";
+const _APE = "AuthorizationPendingException";
+const _AT = "AccessToken";
+const _CS = "ClientSecret";
+const _CT = "CreateToken";
+const _CTR = "CreateTokenRequest";
+const _CTRr = "CreateTokenResponse";
+const _CV = "CodeVerifier";
+const _ETE = "ExpiredTokenException";
+const _ICE = "InvalidClientException";
+const _IGE = "InvalidGrantException";
+const _IRE = "InvalidRequestException";
+const _ISE = "InternalServerException";
+const _ISEn = "InvalidScopeException";
+const _IT = "IdToken";
+const _RT = "RefreshToken";
+const _SDE = "SlowDownException";
+const _UCE = "UnauthorizedClientException";
+const _UGTE = "UnsupportedGrantTypeException";
+const _aT = "accessToken";
+const _c = "client";
+const _cI = "clientId";
+const _cS = "clientSecret";
+const _cV = "codeVerifier";
+const _co = "code";
+const _dC = "deviceCode";
+const _e = "error";
+const _eI = "expiresIn";
+const _ed = "error_description";
+const _gT = "grantType";
+const _h = "http";
+const _hE = "httpError";
+const _iT = "idToken";
+const _r = "reason";
+const _rT = "refreshToken";
+const _rU = "redirectUri";
+const _s = "scope";
+const _se = "server";
+const _sm = "smithy.ts.sdk.synthetic.com.amazonaws.ssooidc";
+const _tT = "tokenType";
+const n0 = "com.amazonaws.ssooidc";
+import { TypeRegistry } from "@smithy/core/schema";
+import { AccessDeniedException as __AccessDeniedException, AuthorizationPendingException as __AuthorizationPendingException, ExpiredTokenException as __ExpiredTokenException, InternalServerException as __InternalServerException, InvalidClientException as __InvalidClientException, InvalidGrantException as __InvalidGrantException, InvalidRequestException as __InvalidRequestException, InvalidScopeException as __InvalidScopeException, SlowDownException as __SlowDownException, UnauthorizedClientException as __UnauthorizedClientException, UnsupportedGrantTypeException as __UnsupportedGrantTypeException, } from "../models/index";
+import { SSOOIDCServiceException as __SSOOIDCServiceException } from "../models/SSOOIDCServiceException";
+export var AccessToken = [0, n0, _AT, 8, 0];
+export var ClientSecret = [0, n0, _CS, 8, 0];
+export var CodeVerifier = [0, n0, _CV, 8, 0];
+export var IdToken = [0, n0, _IT, 8, 0];
+export var RefreshToken = [0, n0, _RT, 8, 0];
+export var AccessDeniedException = [
+    -3,
+    n0,
+    _ADE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _r, _ed],
+    [0, 0, 0],
+];
+TypeRegistry.for(n0).registerError(AccessDeniedException, __AccessDeniedException);
+export var AuthorizationPendingException = [
+    -3,
+    n0,
+    _APE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(AuthorizationPendingException, __AuthorizationPendingException);
+export var CreateTokenRequest = [
+    3,
+    n0,
+    _CTR,
+    0,
+    [_cI, _cS, _gT, _dC, _co, _rT, _s, _rU, _cV],
+    [0, [() => ClientSecret, 0], 0, 0, 0, [() => RefreshToken, 0], 64 | 0, 0, [() => CodeVerifier, 0]],
+];
+export var CreateTokenResponse = [
+    3,
+    n0,
+    _CTRr,
+    0,
+    [_aT, _tT, _eI, _rT, _iT],
+    [[() => AccessToken, 0], 0, 1, [() => RefreshToken, 0], [() => IdToken, 0]],
+];
+export var ExpiredTokenException = [
+    -3,
+    n0,
+    _ETE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(ExpiredTokenException, __ExpiredTokenException);
+export var InternalServerException = [
+    -3,
+    n0,
+    _ISE,
+    {
+        [_e]: _se,
+        [_hE]: 500,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(InternalServerException, __InternalServerException);
+export var InvalidClientException = [
+    -3,
+    n0,
+    _ICE,
+    {
+        [_e]: _c,
+        [_hE]: 401,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(InvalidClientException, __InvalidClientException);
+export var InvalidGrantException = [
+    -3,
+    n0,
+    _IGE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(InvalidGrantException, __InvalidGrantException);
+export var InvalidRequestException = [
+    -3,
+    n0,
+    _IRE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _r, _ed],
+    [0, 0, 0],
+];
+TypeRegistry.for(n0).registerError(InvalidRequestException, __InvalidRequestException);
+export var InvalidScopeException = [
+    -3,
+    n0,
+    _ISEn,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(InvalidScopeException, __InvalidScopeException);
+export var SlowDownException = [
+    -3,
+    n0,
+    _SDE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(SlowDownException, __SlowDownException);
+export var UnauthorizedClientException = [
+    -3,
+    n0,
+    _UCE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(UnauthorizedClientException, __UnauthorizedClientException);
+export var UnsupportedGrantTypeException = [
+    -3,
+    n0,
+    _UGTE,
+    {
+        [_e]: _c,
+        [_hE]: 400,
+    },
+    [_e, _ed],
+    [0, 0],
+];
+TypeRegistry.for(n0).registerError(UnsupportedGrantTypeException, __UnsupportedGrantTypeException);
+export var __Unit = "unit";
+export var SSOOIDCServiceException = [-3, _sm, "SSOOIDCServiceException", 0, [], []];
+TypeRegistry.for(_sm).registerError(SSOOIDCServiceException, __SSOOIDCServiceException);
+export var Scopes = 64 | 0;
+export var CreateToken = [
+    9,
+    n0,
+    _CT,
+    {
+        [_h]: ["POST", "/token", 200],
+    },
+    () => CreateTokenRequest,
+    () => CreateTokenResponse,
+];

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/SSOOIDCClient.d.ts

@@ -5,7 +5,7 @@ import { EndpointInputConfig, EndpointResolvedConfig } from "@smithy/middleware-
 import { RetryInputConfig, RetryResolvedConfig } from "@smithy/middleware-retry";
 import { HttpHandlerUserInput as __HttpHandlerUserInput } from "@smithy/protocol-http";
 import { Client as __Client, DefaultsMode as __DefaultsMode, SmithyConfiguration as __SmithyConfiguration, SmithyResolvedConfiguration as __SmithyResolvedConfiguration } from "@smithy/smithy-client";
-import { BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, Logger as __Logger, Provider as __Provider, Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
+import { BodyLengthCalculator as __BodyLengthCalculator, CheckOptionalClientConfig as __CheckOptionalClientConfig, ChecksumConstructor as __ChecksumConstructor, ClientProtocol, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, HttpRequest, HttpResponse, Logger as __Logger, Provider as __Provider, Provider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@smithy/types";
 import { HttpAuthSchemeInputConfig, HttpAuthSchemeResolvedConfig } from "./auth/httpAuthSchemeProvider";
 import { CreateTokenCommandInput, CreateTokenCommandOutput } from "./commands/CreateTokenCommand";
 import { ClientInputEndpointParameters, ClientResolvedEndpointParameters, EndpointParameters } from "./endpoint/EndpointParameters";
@@ -136,6 +136,15 @@ export interface ClientDefaults extends Partial<__SmithyConfiguration<__HttpHand
      * Optional extensions
      */
     extensions?: RuntimeExtension[];
+    /**
+     * The protocol controlling the message type (e.g. HTTP) and format (e.g. JSON)
+     * may be overridden. A default will always be set by the client.
+     * Available options depend on the service's supported protocols and will not be validated by
+     * the client.
+     * @alpha
+     *
+     */
+    protocol?: ClientProtocol<HttpRequest, HttpResponse>;
     /**
      * The {@link @smithy/smithy-client#DefaultsMode} that will be used to determine how certain default configuration options are resolved in the SDK.
      */

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/models/models_0.d.ts

@@ -133,10 +133,6 @@ export interface CreateTokenRequest {
      */
     codeVerifier?: string | undefined;
 }
-/**
- * @internal
- */
-export declare const CreateTokenRequestFilterSensitiveLog: (obj: CreateTokenRequest) => any;
 /**
  * @public
  */
@@ -177,10 +173,6 @@ export interface CreateTokenResponse {
      */
     idToken?: string | undefined;
 }
-/**
- * @internal
- */
-export declare const CreateTokenResponseFilterSensitiveLog: (obj: CreateTokenResponse) => any;
 /**
  * <p>Indicates that the token issued by the service is expired and is no longer valid.</p>
  * @public

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.browser.d.ts

@@ -28,6 +28,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     profile?: string;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;
     retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.d.ts

@@ -30,6 +30,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     profile?: string;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
     endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Provider<string> | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.native.d.ts

@@ -26,6 +26,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
     retryMode: string | import("@smithy/types").Provider<string>;
     logger: import("@smithy/types").Logger;
     extensions: import("./runtimeExtensions").RuntimeExtension[];
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     defaultsMode: import("@smithy/smithy-client").DefaultsMode | import("@smithy/types").Provider<import("@smithy/smithy-client").DefaultsMode>;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/runtimeConfig.shared.d.ts

@@ -25,6 +25,7 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
         signer: NoAuthSigner;
     })[];
     logger: import("@smithy/types").Logger;
+    protocol: import("@smithy/types").ClientProtocol<import("@smithy/types").HttpRequest, import("@smithy/types").HttpResponse>;
     serviceId: string;
     urlParser: import("@smithy/types").UrlParser;
     utf8Decoder: import("@smithy/types").Decoder;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sso-oidc/schemas/schemas_0.d.ts

@@ -0,0 +1,23 @@
+import { StaticErrorSchema, StaticOperationSchema, StaticSimpleSchema, StaticStructureSchema } from "@smithy/types";
+export declare var AccessToken: StaticSimpleSchema;
+export declare var ClientSecret: StaticSimpleSchema;
+export declare var CodeVerifier: StaticSimpleSchema;
+export declare var IdToken: StaticSimpleSchema;
+export declare var RefreshToken: StaticSimpleSchema;
+export declare var AccessDeniedException: StaticErrorSchema;
+export declare var AuthorizationPendingException: StaticErrorSchema;
+export declare var CreateTokenRequest: StaticStructureSchema;
+export declare var CreateTokenResponse: StaticStructureSchema;
+export declare var ExpiredTokenException: StaticErrorSchema;
+export declare var InternalServerException: StaticErrorSchema;
+export declare var InvalidClientException: StaticErrorSchema;
+export declare var InvalidGrantException: StaticErrorSchema;
+export declare var InvalidRequestException: StaticErrorSchema;
+export declare var InvalidScopeException: StaticErrorSchema;
+export declare var SlowDownException: StaticErrorSchema;
+export declare var UnauthorizedClientException: StaticErrorSchema;
+export declare var UnsupportedGrantTypeException: StaticErrorSchema;
+export declare var __Unit: "unit";
+export declare var SSOOIDCServiceException: StaticErrorSchema;
+export declare var Scopes: number;
+export declare var CreateToken: StaticOperationSchema;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/commands/AssumeRoleCommand.d.ts

@@ -200,7 +200,7 @@ declare const AssumeRoleCommand_base: {
  * @throws {@link RegionDisabledException} (client fault)
  *  <p>STS is not activated in the requested region for the account that is being asked to
  *             generate credentials. The account administrator must use the IAM console to activate
- *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
  *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
  *                 Guide</i>.</p>
  *
@@ -213,7 +213,7 @@ declare const AssumeRoleCommand_base: {
  * //
  * const input = {
  *   ExternalId: "123ABC",
- *   Policy: `{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:ListAllMyBuckets","Resource":"*"}]}`,
+ *   Policy: "escaped-JSON-IAM-POLICY",
  *   RoleArn: "arn:aws:iam::123456789012:role/demo",
  *   RoleSessionName: "testAssumeRoleSession",
  *   Tags: [

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/commands/AssumeRoleWithWebIdentityCommand.d.ts

@@ -90,7 +90,8 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  *          </p>
  *          <p>(Optional) You can configure your IdP to pass attributes into your web identity token as
  *          session tags. Each session tag consists of a key name and an associated value. For more
- *          information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
+ *          information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_adding-assume-role-idp">Passing
+ *             session tags using AssumeRoleWithWebIdentity</a> in the
  *             <i>IAM User Guide</i>.</p>
  *          <p>You can pass up to 50 session tags. The plaintext session tag keys can’t exceed 128
  *          characters and the values can’t exceed 256 characters. For these and additional limits, see
@@ -232,7 +233,7 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  * @throws {@link RegionDisabledException} (client fault)
  *  <p>STS is not activated in the requested region for the account that is being asked to
  *             generate credentials. The account administrator must use the IAM console to activate
- *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
  *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
  *                 Guide</i>.</p>
  *
@@ -245,7 +246,7 @@ declare const AssumeRoleWithWebIdentityCommand_base: {
  * //
  * const input = {
  *   DurationSeconds: 3600,
- *   Policy: `{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:ListAllMyBuckets","Resource":"*"}]}`,
+ *   Policy: "escaped-JSON-IAM-POLICY",
  *   ProviderId: "www.amazon.com",
  *   RoleArn: "arn:aws:iam::123456789012:role/FederatedWebIdentityRole",
  *   RoleSessionName: "app1",

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/models/models_0.d.ts

@@ -100,9 +100,9 @@ export interface AssumeRoleRequest {
      *          assume the role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_rolesessionname">
      *                <code>sts:RoleSessionName</code>
      *             </a>.</p>
-     *          <p>The regex used to validate this parameter is a string of characters
-     *     consisting of upper- and lower-case alphanumeric characters with no spaces. You can
-     *     also include underscores or any of the following characters: =,.@-</p>
+     *          <p>The regex used to validate this parameter is a string of
+     *     characters consisting of upper- and lower-case alphanumeric characters with no spaces.
+     *     You can also include underscores or any of the following characters: +=,.@-</p>
      * @public
      */
     RoleSessionName: string | undefined;
@@ -241,7 +241,7 @@ export interface AssumeRoleRequest {
      *             <i>IAM User Guide</i>.</p>
      *          <p>The regex used to validate this parameter is a string of
      *     characters consisting of upper- and lower-case alphanumeric characters with no spaces.
-     *     You can also include underscores or any of the following characters: =,.@:/-</p>
+     *     You can also include underscores or any of the following characters: +=,.@:\/-</p>
      * @public
      */
     ExternalId?: string | undefined;
@@ -252,9 +252,9 @@ export interface AssumeRoleRequest {
      *          the serial number for a hardware device (such as <code>GAHT12345678</code>) or an Amazon
      *          Resource Name (ARN) for a virtual device (such as
      *             <code>arn:aws:iam::123456789012:mfa/user</code>).</p>
-     *          <p>The regex used to validate this parameter is a string of characters
-     *     consisting of upper- and lower-case alphanumeric characters with no spaces. You can
-     *     also include underscores or any of the following characters: =,.@-</p>
+     *          <p>The regex used to validate this parameter is a string of
+     *     characters consisting of upper- and lower-case alphanumeric characters with no spaces.
+     *     You can also include underscores or any of the following characters: +=/:,.@-</p>
      * @public
      */
     SerialNumber?: string | undefined;
@@ -435,7 +435,7 @@ export declare class PackedPolicyTooLargeException extends __BaseException {
 /**
  * <p>STS is not activated in the requested region for the account that is being asked to
  *             generate credentials. The account administrator must use the IAM console to activate
- *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
+ *             STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and
  *                 Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User
  *                 Guide</i>.</p>
  * @public

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/SSOOIDCClient.d.ts

@@ -29,10 +29,13 @@ import {
   BodyLengthCalculator as __BodyLengthCalculator,
   CheckOptionalClientConfig as __CheckOptionalClientConfig,
   ChecksumConstructor as __ChecksumConstructor,
+  ClientProtocol,
   Decoder as __Decoder,
   Encoder as __Encoder,
   HashConstructor as __HashConstructor,
   HttpHandlerOptions as __HttpHandlerOptions,
+  HttpRequest,
+  HttpResponse,
   Logger as __Logger,
   Provider as __Provider,
   Provider,
@@ -80,6 +83,7 @@ export interface ClientDefaults
   retryMode?: string | __Provider<string>;
   logger?: __Logger;
   extensions?: RuntimeExtension[];
+  protocol?: ClientProtocol<HttpRequest, HttpResponse>;
   defaultsMode?: __DefaultsMode | __Provider<__DefaultsMode>;
 }
 export type SSOOIDCClientConfigType = Partial<

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/models/models_0.d.ts

@@ -35,9 +35,6 @@ export interface CreateTokenRequest {
   redirectUri?: string | undefined;
   codeVerifier?: string | undefined;
 }
-export declare const CreateTokenRequestFilterSensitiveLog: (
-  obj: CreateTokenRequest
-) => any;
 export interface CreateTokenResponse {
   accessToken?: string | undefined;
   tokenType?: string | undefined;
@@ -45,9 +42,6 @@ export interface CreateTokenResponse {
   refreshToken?: string | undefined;
   idToken?: string | undefined;
 }
-export declare const CreateTokenResponseFilterSensitiveLog: (
-  obj: CreateTokenResponse
-) => any;
 export declare class ExpiredTokenException extends __BaseException {
   readonly name: "ExpiredTokenException";
   readonly $fault: "client";

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/runtimeConfig.browser.d.ts

@@ -33,6 +33,10 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   profile?: string;
   logger: import("@smithy/types").Logger;
   extensions: import("./runtimeExtensions").RuntimeExtension[];
+  protocol: import("@smithy/types").ClientProtocol<
+    import("@smithy/types").HttpRequest,
+    import("@smithy/types").HttpResponse
+  >;
   customUserAgent?: string | import("@smithy/types").UserAgent;
   userAgentAppId?:
     | string

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/runtimeConfig.d.ts

@@ -33,6 +33,10 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   profile?: string;
   logger: import("@smithy/types").Logger;
   extensions: import("./runtimeExtensions").RuntimeExtension[];
+  protocol: import("@smithy/types").ClientProtocol<
+    import("@smithy/types").HttpRequest,
+    import("@smithy/types").HttpResponse
+  >;
   customUserAgent?: string | import("@smithy/types").UserAgent;
   retryStrategy?:
     | import("@smithy/types").RetryStrategy

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/runtimeConfig.native.d.ts

@@ -32,6 +32,10 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
   retryMode: string | import("@smithy/types").Provider<string>;
   logger: import("@smithy/types").Logger;
   extensions: import("./runtimeExtensions").RuntimeExtension[];
+  protocol: import("@smithy/types").ClientProtocol<
+    import("@smithy/types").HttpRequest,
+    import("@smithy/types").HttpResponse
+  >;
   defaultsMode:
     | import("@smithy/smithy-client").DefaultsMode
     | import("@smithy/types").Provider<

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/runtimeConfig.shared.d.ts

@@ -42,6 +42,10 @@ export declare const getRuntimeConfig: (config: SSOOIDCClientConfig) => {
           }
       )[];
   logger: import("@smithy/types").Logger;
+  protocol: import("@smithy/types").ClientProtocol<
+    import("@smithy/types").HttpRequest,
+    import("@smithy/types").HttpResponse
+  >;
   serviceId: string;
   urlParser: import("@smithy/types").UrlParser;
   utf8Decoder: import("@smithy/types").Decoder;

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sso-oidc/schemas/schemas_0.d.ts

@@ -0,0 +1,28 @@
+import {
+  StaticErrorSchema,
+  StaticOperationSchema,
+  StaticSimpleSchema,
+  StaticStructureSchema,
+} from "@smithy/types";
+export declare var AccessToken: StaticSimpleSchema;
+export declare var ClientSecret: StaticSimpleSchema;
+export declare var CodeVerifier: StaticSimpleSchema;
+export declare var IdToken: StaticSimpleSchema;
+export declare var RefreshToken: StaticSimpleSchema;
+export declare var AccessDeniedException: StaticErrorSchema;
+export declare var AuthorizationPendingException: StaticErrorSchema;
+export declare var CreateTokenRequest: StaticStructureSchema;
+export declare var CreateTokenResponse: StaticStructureSchema;
+export declare var ExpiredTokenException: StaticErrorSchema;
+export declare var InternalServerException: StaticErrorSchema;
+export declare var InvalidClientException: StaticErrorSchema;
+export declare var InvalidGrantException: StaticErrorSchema;
+export declare var InvalidRequestException: StaticErrorSchema;
+export declare var InvalidScopeException: StaticErrorSchema;
+export declare var SlowDownException: StaticErrorSchema;
+export declare var UnauthorizedClientException: StaticErrorSchema;
+export declare var UnsupportedGrantTypeException: StaticErrorSchema;
+export declare var __Unit: "unit";
+export declare var SSOOIDCServiceException: StaticErrorSchema;
+export declare var Scopes: number;
+export declare var CreateToken: StaticOperationSchema;