@jjrawlins/cdk-iam-policy-builder-helper 0.0.86 → 0.0.88

package/node_modules/@aws-sdk/client-sso/dist-types/models/errors.d.ts

@@ -0,0 +1,53 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { SSOServiceException as __BaseException } from "./SSOServiceException";
+/**
+ * <p>Indicates that a problem occurred with the input to the request. For example, a required
+ *       parameter might be missing or out of range.</p>
+ * @public
+ */
+export declare class InvalidRequestException extends __BaseException {
+    readonly name: "InvalidRequestException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
+}
+/**
+ * <p>The specified resource doesn't exist.</p>
+ * @public
+ */
+export declare class ResourceNotFoundException extends __BaseException {
+    readonly name: "ResourceNotFoundException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
+}
+/**
+ * <p>Indicates that the request is being made too frequently and is more than what the server
+ *       can handle.</p>
+ * @public
+ */
+export declare class TooManyRequestsException extends __BaseException {
+    readonly name: "TooManyRequestsException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<TooManyRequestsException, __BaseException>);
+}
+/**
+ * <p>Indicates that the request is not authorized. This can happen due to an invalid access
+ *       token in the request.</p>
+ * @public
+ */
+export declare class UnauthorizedException extends __BaseException {
+    readonly name: "UnauthorizedException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<UnauthorizedException, __BaseException>);
+}

package/node_modules/@aws-sdk/client-sso/dist-types/models/models_0.d.ts

@@ -1,5 +1,3 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { SSOServiceException as __BaseException } from "./SSOServiceException";
 /**
  * <p>Provides information about your AWS account.</p>
  * @public
@@ -82,57 +80,6 @@ export interface GetRoleCredentialsResponse {
      */
     roleCredentials?: RoleCredentials | undefined;
 }
-/**
- * <p>Indicates that a problem occurred with the input to the request. For example, a required
- *       parameter might be missing or out of range.</p>
- * @public
- */
-export declare class InvalidRequestException extends __BaseException {
-    readonly name: "InvalidRequestException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
-}
-/**
- * <p>The specified resource doesn't exist.</p>
- * @public
- */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
-}
-/**
- * <p>Indicates that the request is being made too frequently and is more than what the server
- *       can handle.</p>
- * @public
- */
-export declare class TooManyRequestsException extends __BaseException {
-    readonly name: "TooManyRequestsException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<TooManyRequestsException, __BaseException>);
-}
-/**
- * <p>Indicates that the request is not authorized. This can happen due to an invalid access
- *       token in the request.</p>
- * @public
- */
-export declare class UnauthorizedException extends __BaseException {
-    readonly name: "UnauthorizedException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<UnauthorizedException, __BaseException>);
-}
 /**
  * @public
  */

package/node_modules/@aws-sdk/client-sso/dist-types/ts3.4/index.d.ts

@@ -5,5 +5,6 @@ export { RuntimeExtension } from "./runtimeExtensions";
 export { SSOExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export * from "./pagination";
-export * from "./models";
+export * from "./models/errors";
+export * from "./models/models_0";
 export { SSOServiceException } from "./models/SSOServiceException";

package/node_modules/@aws-sdk/client-sso/dist-types/ts3.4/models/errors.d.ts

@@ -0,0 +1,30 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { SSOServiceException as __BaseException } from "./SSOServiceException";
+export declare class InvalidRequestException extends __BaseException {
+  readonly name: "InvalidRequestException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
+  );
+}
+export declare class ResourceNotFoundException extends __BaseException {
+  readonly name: "ResourceNotFoundException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>
+  );
+}
+export declare class TooManyRequestsException extends __BaseException {
+  readonly name: "TooManyRequestsException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<TooManyRequestsException, __BaseException>
+  );
+}
+export declare class UnauthorizedException extends __BaseException {
+  readonly name: "UnauthorizedException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<UnauthorizedException, __BaseException>
+  );
+}

package/node_modules/@aws-sdk/client-sso/dist-types/ts3.4/models/models_0.d.ts

@@ -1,5 +1,3 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { SSOServiceException as __BaseException } from "./SSOServiceException";
 export interface AccountInfo {
   accountId?: string | undefined;
   accountName?: string | undefined;
@@ -19,34 +17,6 @@ export interface RoleCredentials {
 export interface GetRoleCredentialsResponse {
   roleCredentials?: RoleCredentials | undefined;
 }
-export declare class InvalidRequestException extends __BaseException {
-  readonly name: "InvalidRequestException";
-  readonly $fault: "client";
-  constructor(
-    opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
-  );
-}
-export declare class ResourceNotFoundException extends __BaseException {
-  readonly name: "ResourceNotFoundException";
-  readonly $fault: "client";
-  constructor(
-    opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>
-  );
-}
-export declare class TooManyRequestsException extends __BaseException {
-  readonly name: "TooManyRequestsException";
-  readonly $fault: "client";
-  constructor(
-    opts: __ExceptionOptionType<TooManyRequestsException, __BaseException>
-  );
-}
-export declare class UnauthorizedException extends __BaseException {
-  readonly name: "UnauthorizedException";
-  readonly $fault: "client";
-  constructor(
-    opts: __ExceptionOptionType<UnauthorizedException, __BaseException>
-  );
-}
 export interface ListAccountRolesRequest {
   nextToken?: string | undefined;
   maxResults?: number | undefined;

package/node_modules/@aws-sdk/client-sso/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso",
   "description": "AWS SDK for JavaScript Sso Client for Node.js, Browser and React Native",
-  "version": "3.933.0",
+  "version": "3.936.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sso",
@@ -20,37 +20,37 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/core": "3.932.0",
-    "@aws-sdk/middleware-host-header": "3.930.0",
-    "@aws-sdk/middleware-logger": "3.930.0",
-    "@aws-sdk/middleware-recursion-detection": "3.933.0",
-    "@aws-sdk/middleware-user-agent": "3.932.0",
-    "@aws-sdk/region-config-resolver": "3.930.0",
-    "@aws-sdk/types": "3.930.0",
-    "@aws-sdk/util-endpoints": "3.930.0",
-    "@aws-sdk/util-user-agent-browser": "3.930.0",
-    "@aws-sdk/util-user-agent-node": "3.932.0",
+    "@aws-sdk/core": "3.936.0",
+    "@aws-sdk/middleware-host-header": "3.936.0",
+    "@aws-sdk/middleware-logger": "3.936.0",
+    "@aws-sdk/middleware-recursion-detection": "3.936.0",
+    "@aws-sdk/middleware-user-agent": "3.936.0",
+    "@aws-sdk/region-config-resolver": "3.936.0",
+    "@aws-sdk/types": "3.936.0",
+    "@aws-sdk/util-endpoints": "3.936.0",
+    "@aws-sdk/util-user-agent-browser": "3.936.0",
+    "@aws-sdk/util-user-agent-node": "3.936.0",
     "@smithy/config-resolver": "^4.4.3",
-    "@smithy/core": "^3.18.2",
+    "@smithy/core": "^3.18.5",
     "@smithy/fetch-http-handler": "^5.3.6",
     "@smithy/hash-node": "^4.2.5",
     "@smithy/invalid-dependency": "^4.2.5",
     "@smithy/middleware-content-length": "^4.2.5",
-    "@smithy/middleware-endpoint": "^4.3.9",
-    "@smithy/middleware-retry": "^4.4.9",
-    "@smithy/middleware-serde": "^4.2.5",
+    "@smithy/middleware-endpoint": "^4.3.12",
+    "@smithy/middleware-retry": "^4.4.12",
+    "@smithy/middleware-serde": "^4.2.6",
     "@smithy/middleware-stack": "^4.2.5",
     "@smithy/node-config-provider": "^4.3.5",
     "@smithy/node-http-handler": "^4.4.5",
     "@smithy/protocol-http": "^5.3.5",
-    "@smithy/smithy-client": "^4.9.5",
+    "@smithy/smithy-client": "^4.9.8",
     "@smithy/types": "^4.9.0",
     "@smithy/url-parser": "^4.2.5",
     "@smithy/util-base64": "^4.3.0",
     "@smithy/util-body-length-browser": "^4.2.0",
     "@smithy/util-body-length-node": "^4.2.1",
-    "@smithy/util-defaults-mode-browser": "^4.3.8",
-    "@smithy/util-defaults-mode-node": "^4.2.11",
+    "@smithy/util-defaults-mode-browser": "^4.3.11",
+    "@smithy/util-defaults-mode-node": "^4.2.14",
     "@smithy/util-endpoints": "^3.2.5",
     "@smithy/util-middleware": "^4.2.5",
     "@smithy/util-retry": "^4.2.5",

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.932.0",
+  "version": "3.936.0",
   "description": "Core functions & classes shared by multiple AWS SDK clients.",
   "scripts": {
     "build": "yarn lint && concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
@@ -81,14 +81,14 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.930.0",
+    "@aws-sdk/types": "3.936.0",
     "@aws-sdk/xml-builder": "3.930.0",
-    "@smithy/core": "^3.18.2",
+    "@smithy/core": "^3.18.5",
     "@smithy/node-config-provider": "^4.3.5",
     "@smithy/property-provider": "^4.2.5",
     "@smithy/protocol-http": "^5.3.5",
     "@smithy/signature-v4": "^5.3.5",
-    "@smithy/smithy-client": "^4.9.5",
+    "@smithy/smithy-client": "^4.9.8",
     "@smithy/types": "^4.9.0",
     "@smithy/util-base64": "^4.3.0",
     "@smithy/util-middleware": "^4.2.5",

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.932.0",
+  "version": "3.936.0",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -26,8 +26,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "3.932.0",
-    "@aws-sdk/types": "3.930.0",
+    "@aws-sdk/core": "3.936.0",
+    "@aws-sdk/types": "3.936.0",
     "@smithy/property-provider": "^4.2.5",
     "@smithy/types": "^4.9.0",
     "tslib": "^2.6.2"

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.932.0",
+  "version": "3.936.0",
   "description": "AWS credential provider for containers and HTTP sources",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,13 +28,13 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "3.932.0",
-    "@aws-sdk/types": "3.930.0",
+    "@aws-sdk/core": "3.936.0",
+    "@aws-sdk/types": "3.936.0",
     "@smithy/fetch-http-handler": "^5.3.6",
     "@smithy/node-http-handler": "^4.4.5",
     "@smithy/property-provider": "^4.2.5",
     "@smithy/protocol-http": "^5.3.5",
-    "@smithy/smithy-client": "^4.9.5",
+    "@smithy/smithy-client": "^4.9.8",
     "@smithy/types": "^4.9.0",
     "@smithy/util-stream": "^4.5.6",
     "tslib": "^2.6.2"

package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js

@@ -3,6 +3,7 @@
 var sharedIniFileLoader = require('@smithy/shared-ini-file-loader');
 var propertyProvider = require('@smithy/property-provider');
 var client = require('@aws-sdk/core/client');
+var credentialProviderLogin = require('@aws-sdk/credential-provider-login');
 
 const resolveCredentialSource = (credentialSource, profileName, logger) => {
     const sourceProvidersMap = {
@@ -109,6 +110,17 @@ const isCredentialSourceWithoutRoleArn = (section) => {
     return !section.role_arn && !!section.credential_source;
 };
 
+const isLoginProfile = (data) => {
+    return Boolean(data && data.login_session);
+};
+const resolveLoginCredentials = async (profileName, options) => {
+    const credentials = await credentialProviderLogin.fromLoginCredentials({
+        ...options,
+        profile: profileName,
+    })();
+    return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC");
+};
+
 const isProcessProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string";
 const resolveProcessCredentials = async (options, profile) => import('@aws-sdk/credential-provider-process').then(({ fromProcess }) => fromProcess({
     ...options,
@@ -190,6 +202,9 @@ const resolveProfileData = async (profileName, profiles, options, visitedProfile
     if (isSsoProfile(data)) {
         return await resolveSsoCredentials(profileName, data, options);
     }
+    if (isLoginProfile(data)) {
+        return resolveLoginCredentials(profileName, options);
+    }
     throw new propertyProvider.CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
 };
 

package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveLoginCredentials.js

@@ -0,0 +1,12 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
+import { fromLoginCredentials } from "@aws-sdk/credential-provider-login";
+export const isLoginProfile = (data) => {
+    return Boolean(data && data.login_session);
+};
+export const resolveLoginCredentials = async (profileName, options) => {
+    const credentials = await fromLoginCredentials({
+        ...options,
+        profile: profileName,
+    })();
+    return setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC");
+};

package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js

@@ -1,5 +1,6 @@
 import { CredentialsProviderError } from "@smithy/property-provider";
 import { isAssumeRoleProfile, resolveAssumeRoleCredentials } from "./resolveAssumeRoleCredentials";
+import { isLoginProfile, resolveLoginCredentials } from "./resolveLoginCredentials";
 import { isProcessProfile, resolveProcessCredentials } from "./resolveProcessCredentials";
 import { isSsoProfile, resolveSsoCredentials } from "./resolveSsoCredentials";
 import { isStaticCredsProfile, resolveStaticCredentials } from "./resolveStaticCredentials";
@@ -24,5 +25,8 @@ export const resolveProfileData = async (profileName, profiles, options, visited
     if (isSsoProfile(data)) {
         return await resolveSsoCredentials(profileName, data, options);
     }
+    if (isLoginProfile(data)) {
+        return resolveLoginCredentials(profileName, options);
+    }
     throw new CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
 };

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/fromIni.d.ts

@@ -1,3 +1,4 @@
+import type { FromLoginCredentialsInit } from "@aws-sdk/credential-provider-login";
 import type { AssumeRoleWithWebIdentityParams } from "@aws-sdk/credential-provider-web-identity";
 import type { CredentialProviderOptions } from "@aws-sdk/types";
 import type { RuntimeConfigAwsCredentialIdentityProvider } from "@aws-sdk/types";
@@ -7,7 +8,7 @@ import { AssumeRoleParams } from "./resolveAssumeRoleCredentials";
 /**
  * @public
  */
-export interface FromIniInit extends SourceProfileInit, CredentialProviderOptions {
+export interface FromIniInit extends SourceProfileInit, CredentialProviderOptions, FromLoginCredentialsInit {
     /**
      * A function that returns a promise fulfilled with an MFA token code for
      * the provided MFA Serial code. If a profile requires an MFA code and
@@ -34,8 +35,8 @@ export interface FromIniInit extends SourceProfileInit, CredentialProviderOption
      */
     roleAssumerWithWebIdentity?: (params: AssumeRoleWithWebIdentityParams) => Promise<AwsCredentialIdentity>;
     /**
-     * STSClientConfig or SSOClientConfig to be used for creating inner client
-     * for auth operations.
+     * AWS SDK Client configuration to be used for creating inner client
+     * for auth operations. Inner clients include STS, SSO, and Signin clients.
      * @internal
      */
     clientConfig?: any;

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveLoginCredentials.d.ts

@@ -0,0 +1,10 @@
+import type { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import type { FromIniInit } from "./fromIni";
+/**
+ * @internal
+ */
+export declare const isLoginProfile: (data: ParsedIniData[string]) => boolean;
+/**
+ * @internal
+ */
+export declare const resolveLoginCredentials: (profileName: string, options: FromIniInit) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/fromIni.d.ts

@@ -1,3 +1,4 @@
+import { FromLoginCredentialsInit } from "@aws-sdk/credential-provider-login";
 import { AssumeRoleWithWebIdentityParams } from "@aws-sdk/credential-provider-web-identity";
 import { CredentialProviderOptions } from "@aws-sdk/types";
 import { RuntimeConfigAwsCredentialIdentityProvider } from "@aws-sdk/types";
@@ -6,7 +7,8 @@ import { AwsCredentialIdentity, Pluggable } from "@smithy/types";
 import { AssumeRoleParams } from "./resolveAssumeRoleCredentials";
 export interface FromIniInit
   extends SourceProfileInit,
-    CredentialProviderOptions {
+    CredentialProviderOptions,
+    FromLoginCredentialsInit {
   mfaCodeProvider?: (mfaSerial: string) => Promise<string>;
   roleAssumer?: (
     sourceCreds: AwsCredentialIdentity,

package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveLoginCredentials.d.ts

@@ -0,0 +1,7 @@
+import { AwsCredentialIdentity, ParsedIniData } from "@smithy/types";
+import { FromIniInit } from "./fromIni";
+export declare const isLoginProfile: (data: ParsedIniData[string]) => boolean;
+export declare const resolveLoginCredentials: (
+  profileName: string,
+  options: FromIniInit
+) => Promise<AwsCredentialIdentity>;

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.933.0",
+  "version": "3.936.0",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,14 +28,15 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "3.932.0",
-    "@aws-sdk/credential-provider-env": "3.932.0",
-    "@aws-sdk/credential-provider-http": "3.932.0",
-    "@aws-sdk/credential-provider-process": "3.932.0",
-    "@aws-sdk/credential-provider-sso": "3.933.0",
-    "@aws-sdk/credential-provider-web-identity": "3.933.0",
-    "@aws-sdk/nested-clients": "3.933.0",
-    "@aws-sdk/types": "3.930.0",
+    "@aws-sdk/core": "3.936.0",
+    "@aws-sdk/credential-provider-env": "3.936.0",
+    "@aws-sdk/credential-provider-http": "3.936.0",
+    "@aws-sdk/credential-provider-login": "3.936.0",
+    "@aws-sdk/credential-provider-process": "3.936.0",
+    "@aws-sdk/credential-provider-sso": "3.936.0",
+    "@aws-sdk/credential-provider-web-identity": "3.936.0",
+    "@aws-sdk/nested-clients": "3.936.0",
+    "@aws-sdk/types": "3.936.0",
     "@smithy/credential-provider-imds": "^4.2.5",
     "@smithy/property-provider": "^4.2.5",
     "@smithy/shared-ini-file-loader": "^4.4.0",

package/node_modules/@aws-sdk/credential-provider-login/README.md

@@ -0,0 +1,7 @@
+# @aws-sdk/credential-provider-login
+
+> An internal package
+
+## Usage
+
+You probably shouldn't, at least directly. Please use [@aws-sdk/credential-providers](https://www.npmjs.com/package/@aws-sdk/credential-providers) instead.