@mavogel/awscdk-rootmail 0.0.162 → 0.0.164

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (111) hide show
  1. package/.jsii +8 -8
  2. package/lib/rootmail.js +1 -1
  3. package/lib/ses-receive.js +1 -1
  4. package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json +19 -19
  5. package/node_modules/@aws-sdk/client-route-53/package.json +20 -20
  6. package/node_modules/@aws-sdk/client-s3/dist-cjs/index.js +4 -4
  7. package/node_modules/@aws-sdk/client-s3/dist-es/protocols/Aws_restXml.js +5 -5
  8. package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectCommand.d.ts +10 -10
  9. package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectsCommand.d.ts +22 -22
  10. package/node_modules/@aws-sdk/client-s3/dist-types/commands/GetObjectCommand.d.ts +19 -19
  11. package/node_modules/@aws-sdk/client-s3/dist-types/commands/GetObjectTaggingCommand.d.ts +19 -19
  12. package/node_modules/@aws-sdk/client-s3/dist-types/commands/PutObjectCommand.d.ts +39 -39
  13. package/node_modules/@aws-sdk/client-s3/dist-types/commands/UploadPartCopyCommand.d.ts +13 -13
  14. package/node_modules/@aws-sdk/client-s3/package.json +27 -27
  15. package/node_modules/@aws-sdk/client-ses/package.json +19 -19
  16. package/node_modules/@aws-sdk/client-ssm/package.json +19 -19
  17. package/node_modules/@aws-sdk/client-sso/package.json +16 -16
  18. package/node_modules/@aws-sdk/client-sso-oidc/package.json +18 -18
  19. package/node_modules/@aws-sdk/client-sts/dist-cjs/index.js +10 -2
  20. package/node_modules/@aws-sdk/client-sts/dist-es/defaultStsRoleAssumers.js +10 -2
  21. package/node_modules/@aws-sdk/client-sts/package.json +18 -18
  22. package/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js +12 -0
  23. package/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js +6 -1
  24. package/node_modules/@aws-sdk/core/dist-es/submodules/client/index.js +1 -0
  25. package/node_modules/@aws-sdk/core/dist-es/submodules/client/setCredentialFeature.js +7 -0
  26. package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.js +6 -1
  27. package/node_modules/@aws-sdk/core/dist-types/submodules/client/index.d.ts +1 -0
  28. package/node_modules/@aws-sdk/core/dist-types/submodules/client/setCredentialFeature.d.ts +7 -0
  29. package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/index.d.ts +1 -0
  30. package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/setCredentialFeature.d.ts +11 -0
  31. package/node_modules/@aws-sdk/core/package.json +4 -4
  32. package/node_modules/@aws-sdk/credential-provider-env/dist-cjs/index.js +4 -1
  33. package/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js +4 -1
  34. package/node_modules/@aws-sdk/credential-provider-env/package.json +3 -2
  35. package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttp.js +2 -1
  36. package/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js +2 -1
  37. package/node_modules/@aws-sdk/credential-provider-http/package.json +4 -3
  38. package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js +29 -13
  39. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js +3 -2
  40. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveCredentialSource.js +5 -3
  41. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js +2 -1
  42. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js +1 -1
  43. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js +10 -2
  44. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js +5 -3
  45. package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js +2 -1
  46. package/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveAssumeRoleCredentials.d.ts +2 -2
  47. package/node_modules/@aws-sdk/credential-provider-ini/dist-types/resolveSsoCredentials.d.ts +2 -2
  48. package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveAssumeRoleCredentials.d.ts +2 -2
  49. package/node_modules/@aws-sdk/credential-provider-ini/dist-types/ts3.4/resolveSsoCredentials.d.ts +3 -2
  50. package/node_modules/@aws-sdk/credential-provider-ini/package.json +9 -8
  51. package/node_modules/@aws-sdk/credential-provider-node/package.json +8 -8
  52. package/node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js +4 -1
  53. package/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js +4 -1
  54. package/node_modules/@aws-sdk/credential-provider-process/package.json +3 -2
  55. package/node_modules/@aws-sdk/credential-provider-sso/dist-cjs/index.js +8 -1
  56. package/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js +9 -1
  57. package/node_modules/@aws-sdk/credential-provider-sso/package.json +5 -4
  58. package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/fromTokenFile.js +6 -1
  59. package/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js +6 -1
  60. package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +4 -3
  61. package/node_modules/@aws-sdk/middleware-bucket-endpoint/package.json +2 -2
  62. package/node_modules/@aws-sdk/middleware-expect-continue/package.json +2 -2
  63. package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/index.js +15 -0
  64. package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/flexibleChecksumsMiddleware.js +16 -0
  65. package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json +3 -2
  66. package/node_modules/@aws-sdk/middleware-host-header/package.json +2 -2
  67. package/node_modules/@aws-sdk/middleware-location-constraint/package.json +2 -2
  68. package/node_modules/@aws-sdk/middleware-logger/package.json +2 -2
  69. package/node_modules/@aws-sdk/middleware-recursion-detection/package.json +2 -2
  70. package/node_modules/@aws-sdk/middleware-sdk-route53/package.json +2 -2
  71. package/node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/index.js +5 -3
  72. package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/s3-express/functions/s3ExpressMiddleware.js +2 -0
  73. package/node_modules/@aws-sdk/middleware-sdk-s3/package.json +5 -5
  74. package/node_modules/@aws-sdk/middleware-ssec/package.json +2 -2
  75. package/node_modules/@aws-sdk/middleware-user-agent/dist-cjs/index.js +34 -0
  76. package/node_modules/@aws-sdk/middleware-user-agent/dist-es/check-features.js +30 -0
  77. package/node_modules/@aws-sdk/middleware-user-agent/dist-es/user-agent-middleware.js +2 -0
  78. package/node_modules/@aws-sdk/middleware-user-agent/dist-types/check-features.d.ts +17 -0
  79. package/node_modules/@aws-sdk/middleware-user-agent/dist-types/ts3.4/check-features.d.ts +17 -0
  80. package/node_modules/@aws-sdk/middleware-user-agent/package.json +5 -4
  81. package/node_modules/@aws-sdk/region-config-resolver/package.json +2 -2
  82. package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +3 -3
  83. package/node_modules/@aws-sdk/token-providers/package.json +3 -3
  84. package/node_modules/@aws-sdk/types/dist-types/feature-ids.d.ts +6 -1
  85. package/node_modules/@aws-sdk/types/dist-types/identity/AwsCredentialIdentity.d.ts +5 -0
  86. package/node_modules/@aws-sdk/types/dist-types/ts3.4/feature-ids.d.ts +4 -1
  87. package/node_modules/@aws-sdk/types/dist-types/ts3.4/identity/AwsCredentialIdentity.d.ts +5 -0
  88. package/node_modules/@aws-sdk/types/package.json +1 -1
  89. package/node_modules/@aws-sdk/util-endpoints/package.json +2 -2
  90. package/node_modules/@aws-sdk/util-user-agent-browser/package.json +2 -2
  91. package/node_modules/@aws-sdk/util-user-agent-node/package.json +3 -3
  92. package/node_modules/cdk-nag/.jsii +233 -22
  93. package/node_modules/cdk-nag/RULES.md +5 -4
  94. package/node_modules/cdk-nag/lib/ignore-suppression-conditions.js +5 -5
  95. package/node_modules/cdk-nag/lib/nag-logger.js +2 -2
  96. package/node_modules/cdk-nag/lib/nag-pack.js +1 -1
  97. package/node_modules/cdk-nag/lib/nag-rules.js +1 -1
  98. package/node_modules/cdk-nag/lib/nag-suppressions.js +1 -1
  99. package/node_modules/cdk-nag/lib/packs/aws-solutions.js +11 -3
  100. package/node_modules/cdk-nag/lib/packs/hipaa-security.js +1 -1
  101. package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.js +1 -1
  102. package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.js +1 -1
  103. package/node_modules/cdk-nag/lib/packs/pci-dss-321.js +1 -1
  104. package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.d.ts +6 -0
  105. package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.js +46 -0
  106. package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.d.ts +2 -1
  107. package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.js +4 -25
  108. package/node_modules/cdk-nag/lib/rules/cloudfront/index.d.ts +1 -0
  109. package/node_modules/cdk-nag/lib/rules/cloudfront/index.js +3 -1
  110. package/node_modules/cdk-nag/package.json +8 -5
  111. package/package.json +11 -11
@@ -22,7 +22,7 @@ export const resolveProfileData = async (profileName, profiles, options, visited
22
22
  return resolveProcessCredentials(options, profileName);
23
23
  }
24
24
  if (isSsoProfile(data)) {
25
- return await resolveSsoCredentials(profileName, options);
25
+ return await resolveSsoCredentials(profileName, data, options);
26
26
  }
27
27
  throw new CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
28
28
  };
@@ -1,9 +1,17 @@
1
- export const resolveSsoCredentials = async (profile, options = {}) => {
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
2
+ export const resolveSsoCredentials = async (profile, profileData, options = {}) => {
2
3
  const { fromSSO } = await import("@aws-sdk/credential-provider-sso");
3
4
  return fromSSO({
4
5
  profile,
5
6
  logger: options.logger,
6
- })();
7
+ })().then((creds) => {
8
+ if (profileData.sso_session) {
9
+ return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO", "r");
10
+ }
11
+ else {
12
+ return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO_LEGACY", "t");
13
+ }
14
+ });
7
15
  };
8
16
  export const isSsoProfile = (arg) => arg &&
9
17
  (typeof arg.sso_start_url === "string" ||
@@ -1,16 +1,18 @@
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
1
2
  export const isStaticCredsProfile = (arg) => Boolean(arg) &&
2
3
  typeof arg === "object" &&
3
4
  typeof arg.aws_access_key_id === "string" &&
4
5
  typeof arg.aws_secret_access_key === "string" &&
5
6
  ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 &&
6
7
  ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1;
7
- export const resolveStaticCredentials = (profile, options) => {
8
+ export const resolveStaticCredentials = async (profile, options) => {
8
9
  options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
9
- return Promise.resolve({
10
+ const credentials = {
10
11
  accessKeyId: profile.aws_access_key_id,
11
12
  secretAccessKey: profile.aws_secret_access_key,
12
13
  sessionToken: profile.aws_session_token,
13
14
  ...(profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope }),
14
15
  ...(profile.aws_account_id && { accountId: profile.aws_account_id }),
15
- });
16
+ };
17
+ return setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n");
16
18
  };
@@ -1,3 +1,4 @@
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
1
2
  export const isWebIdentityProfile = (arg) => Boolean(arg) &&
2
3
  typeof arg === "object" &&
3
4
  typeof arg.web_identity_token_file === "string" &&
@@ -10,4 +11,4 @@ export const resolveWebIdentityCredentials = async (profile, options) => import(
10
11
  roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
11
12
  logger: options.logger,
12
13
  parentClientConfig: options.parentClientConfig,
13
- })());
14
+ })().then((creds) => setCredentialFeature(creds, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q")));
@@ -1,4 +1,4 @@
1
- import { AwsCredentialIdentity, Logger, ParsedIniData } from "@smithy/types";
1
+ import { Logger, ParsedIniData } from "@smithy/types";
2
2
  import { FromIniInit } from "./fromIni";
3
3
  /**
4
4
  * @internal
@@ -44,4 +44,4 @@ export declare const isAssumeRoleProfile: (arg: any, { profile, logger }?: {
44
44
  /**
45
45
  * @internal
46
46
  */
47
- export declare const resolveAssumeRoleCredentials: (profileName: string, profiles: ParsedIniData, options: FromIniInit, visitedProfiles?: Record<string, true>) => Promise<AwsCredentialIdentity>;
47
+ export declare const resolveAssumeRoleCredentials: (profileName: string, profiles: ParsedIniData, options: FromIniInit, visitedProfiles?: Record<string, true>) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
@@ -1,10 +1,10 @@
1
1
  import type { SsoProfile } from "@aws-sdk/credential-provider-sso";
2
2
  import type { CredentialProviderOptions } from "@aws-sdk/types";
3
- import type { Profile } from "@smithy/types";
3
+ import type { IniSection, Profile } from "@smithy/types";
4
4
  /**
5
5
  * @internal
6
6
  */
7
- export declare const resolveSsoCredentials: (profile: string, options?: CredentialProviderOptions) => Promise<import("@aws-sdk/types").AwsCredentialIdentity>;
7
+ export declare const resolveSsoCredentials: (profile: string, profileData: IniSection, options?: CredentialProviderOptions) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
8
8
  /**
9
9
  * @internal
10
10
  * duplicated from \@aws-sdk/credential-provider-sso to defer import.
@@ -1,4 +1,4 @@
1
- import { AwsCredentialIdentity, Logger, ParsedIniData } from "@smithy/types";
1
+ import { Logger, ParsedIniData } from "@smithy/types";
2
2
  import { FromIniInit } from "./fromIni";
3
3
  export interface AssumeRoleParams {
4
4
  RoleArn: string;
@@ -23,4 +23,4 @@ export declare const resolveAssumeRoleCredentials: (
23
23
  profiles: ParsedIniData,
24
24
  options: FromIniInit,
25
25
  visitedProfiles?: Record<string, true>
26
- ) => Promise<AwsCredentialIdentity>;
26
+ ) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
@@ -1,8 +1,9 @@
1
1
  import { SsoProfile } from "@aws-sdk/credential-provider-sso";
2
2
  import { CredentialProviderOptions } from "@aws-sdk/types";
3
- import { Profile } from "@smithy/types";
3
+ import { IniSection, Profile } from "@smithy/types";
4
4
  export declare const resolveSsoCredentials: (
5
5
  profile: string,
6
+ profileData: IniSection,
6
7
  options?: CredentialProviderOptions
7
- ) => Promise<import("@aws-sdk/types").AwsCredentialIdentity>;
8
+ ) => Promise<import("@aws-sdk/types").AttributedAwsCredentialIdentity>;
8
9
  export declare const isSsoProfile: (arg: Profile) => arg is Partial<SsoProfile>;
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/credential-provider-ini",
3
- "version": "3.665.0",
3
+ "version": "3.667.0",
4
4
  "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
5
5
  "main": "./dist-cjs/index.js",
6
6
  "module": "./dist-es/index.js",
@@ -24,12 +24,13 @@
24
24
  },
25
25
  "license": "Apache-2.0",
26
26
  "dependencies": {
27
- "@aws-sdk/credential-provider-env": "3.664.0",
28
- "@aws-sdk/credential-provider-http": "3.664.0",
29
- "@aws-sdk/credential-provider-process": "3.664.0",
30
- "@aws-sdk/credential-provider-sso": "3.665.0",
31
- "@aws-sdk/credential-provider-web-identity": "3.664.0",
32
- "@aws-sdk/types": "3.664.0",
27
+ "@aws-sdk/core": "3.667.0",
28
+ "@aws-sdk/credential-provider-env": "3.667.0",
29
+ "@aws-sdk/credential-provider-http": "3.667.0",
30
+ "@aws-sdk/credential-provider-process": "3.667.0",
31
+ "@aws-sdk/credential-provider-sso": "3.667.0",
32
+ "@aws-sdk/credential-provider-web-identity": "3.667.0",
33
+ "@aws-sdk/types": "3.667.0",
33
34
  "@smithy/credential-provider-imds": "^3.2.4",
34
35
  "@smithy/property-provider": "^3.1.7",
35
36
  "@smithy/shared-ini-file-loader": "^3.1.8",
@@ -45,7 +46,7 @@
45
46
  "typescript": "~4.9.5"
46
47
  },
47
48
  "peerDependencies": {
48
- "@aws-sdk/client-sts": "^3.665.0"
49
+ "@aws-sdk/client-sts": "^3.667.0"
49
50
  },
50
51
  "types": "./dist-types/index.d.ts",
51
52
  "engines": {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/credential-provider-node",
3
- "version": "3.665.0",
3
+ "version": "3.667.0",
4
4
  "description": "AWS credential provider that sources credentials from a Node.JS environment. ",
5
5
  "engines": {
6
6
  "node": ">=16.0.0"
@@ -28,13 +28,13 @@
28
28
  },
29
29
  "license": "Apache-2.0",
30
30
  "dependencies": {
31
- "@aws-sdk/credential-provider-env": "3.664.0",
32
- "@aws-sdk/credential-provider-http": "3.664.0",
33
- "@aws-sdk/credential-provider-ini": "3.665.0",
34
- "@aws-sdk/credential-provider-process": "3.664.0",
35
- "@aws-sdk/credential-provider-sso": "3.665.0",
36
- "@aws-sdk/credential-provider-web-identity": "3.664.0",
37
- "@aws-sdk/types": "3.664.0",
31
+ "@aws-sdk/credential-provider-env": "3.667.0",
32
+ "@aws-sdk/credential-provider-http": "3.667.0",
33
+ "@aws-sdk/credential-provider-ini": "3.667.0",
34
+ "@aws-sdk/credential-provider-process": "3.667.0",
35
+ "@aws-sdk/credential-provider-sso": "3.667.0",
36
+ "@aws-sdk/credential-provider-web-identity": "3.667.0",
37
+ "@aws-sdk/types": "3.667.0",
38
38
  "@smithy/credential-provider-imds": "^3.2.4",
39
39
  "@smithy/property-provider": "^3.1.7",
40
40
  "@smithy/shared-ini-file-loader": "^3.1.8",
@@ -34,6 +34,7 @@ var import_child_process = require("child_process");
34
34
  var import_util = require("util");
35
35
 
36
36
  // src/getValidatedProcessCredentials.ts
37
+ var import_client = require("@aws-sdk/core/client");
37
38
  var getValidatedProcessCredentials = /* @__PURE__ */ __name((profileName, data, profiles) => {
38
39
  var _a;
39
40
  if (data.Version !== 1) {
@@ -53,7 +54,7 @@ var getValidatedProcessCredentials = /* @__PURE__ */ __name((profileName, data,
53
54
  if (!accountId && ((_a = profiles == null ? void 0 : profiles[profileName]) == null ? void 0 : _a.aws_account_id)) {
54
55
  accountId = profiles[profileName].aws_account_id;
55
56
  }
56
- return {
57
+ const credentials = {
57
58
  accessKeyId: data.AccessKeyId,
58
59
  secretAccessKey: data.SecretAccessKey,
59
60
  ...data.SessionToken && { sessionToken: data.SessionToken },
@@ -61,6 +62,8 @@ var getValidatedProcessCredentials = /* @__PURE__ */ __name((profileName, data,
61
62
  ...data.CredentialScope && { credentialScope: data.CredentialScope },
62
63
  ...accountId && { accountId }
63
64
  };
65
+ (0, import_client.setCredentialFeature)(credentials, "CREDENTIALS_PROCESS", "w");
66
+ return credentials;
64
67
  }, "getValidatedProcessCredentials");
65
68
 
66
69
  // src/resolveProcessCredentials.ts
@@ -1,3 +1,4 @@
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
1
2
  export const getValidatedProcessCredentials = (profileName, data, profiles) => {
2
3
  if (data.Version !== 1) {
3
4
  throw Error(`Profile ${profileName} credential_process did not return Version 1.`);
@@ -16,7 +17,7 @@ export const getValidatedProcessCredentials = (profileName, data, profiles) => {
16
17
  if (!accountId && profiles?.[profileName]?.aws_account_id) {
17
18
  accountId = profiles[profileName].aws_account_id;
18
19
  }
19
- return {
20
+ const credentials = {
20
21
  accessKeyId: data.AccessKeyId,
21
22
  secretAccessKey: data.SecretAccessKey,
22
23
  ...(data.SessionToken && { sessionToken: data.SessionToken }),
@@ -24,4 +25,6 @@ export const getValidatedProcessCredentials = (profileName, data, profiles) => {
24
25
  ...(data.CredentialScope && { credentialScope: data.CredentialScope }),
25
26
  ...(accountId && { accountId }),
26
27
  };
28
+ setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
29
+ return credentials;
27
30
  };
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/credential-provider-process",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "description": "AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config",
5
5
  "main": "./dist-cjs/index.js",
6
6
  "module": "./dist-es/index.js",
@@ -24,7 +24,8 @@
24
24
  },
25
25
  "license": "Apache-2.0",
26
26
  "dependencies": {
27
- "@aws-sdk/types": "3.664.0",
27
+ "@aws-sdk/core": "3.667.0",
28
+ "@aws-sdk/types": "3.667.0",
28
29
  "@smithy/property-provider": "^3.1.7",
29
30
  "@smithy/shared-ini-file-loader": "^3.1.8",
30
31
  "@smithy/types": "^3.5.0",
@@ -52,6 +52,7 @@ module.exports = __toCommonJS(src_exports);
52
52
  var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
53
53
 
54
54
  // src/resolveSSOCredentials.ts
55
+ var import_client = require("@aws-sdk/core/client");
55
56
  var import_token_providers = require("@aws-sdk/token-providers");
56
57
  var import_property_provider = require("@smithy/property-provider");
57
58
  var import_shared_ini_file_loader = require("@smithy/shared-ini-file-loader");
@@ -129,7 +130,7 @@ var resolveSSOCredentials = /* @__PURE__ */ __name(async ({
129
130
  logger
130
131
  });
131
132
  }
132
- return {
133
+ const credentials = {
133
134
  accessKeyId,
134
135
  secretAccessKey,
135
136
  sessionToken,
@@ -137,6 +138,12 @@ var resolveSSOCredentials = /* @__PURE__ */ __name(async ({
137
138
  ...credentialScope && { credentialScope },
138
139
  ...accountId && { accountId }
139
140
  };
141
+ if (ssoSession) {
142
+ (0, import_client.setCredentialFeature)(credentials, "CREDENTIALS_SSO", "s");
143
+ } else {
144
+ (0, import_client.setCredentialFeature)(credentials, "CREDENTIALS_SSO_LEGACY", "u");
145
+ }
146
+ return credentials;
140
147
  }, "resolveSSOCredentials");
141
148
 
142
149
  // src/validateSsoProfile.ts
@@ -1,3 +1,4 @@
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
1
2
  import { fromSso as getSsoTokenProvider } from "@aws-sdk/token-providers";
2
3
  import { CredentialsProviderError } from "@smithy/property-provider";
3
4
  import { getSSOTokenFromFile } from "@smithy/shared-ini-file-loader";
@@ -64,7 +65,7 @@ export const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccoun
64
65
  logger,
65
66
  });
66
67
  }
67
- return {
68
+ const credentials = {
68
69
  accessKeyId,
69
70
  secretAccessKey,
70
71
  sessionToken,
@@ -72,4 +73,11 @@ export const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccoun
72
73
  ...(credentialScope && { credentialScope }),
73
74
  ...(accountId && { accountId }),
74
75
  };
76
+ if (ssoSession) {
77
+ setCredentialFeature(credentials, "CREDENTIALS_SSO", "s");
78
+ }
79
+ else {
80
+ setCredentialFeature(credentials, "CREDENTIALS_SSO_LEGACY", "u");
81
+ }
82
+ return credentials;
75
83
  };
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/credential-provider-sso",
3
- "version": "3.665.0",
3
+ "version": "3.667.0",
4
4
  "description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
5
5
  "main": "./dist-cjs/index.js",
6
6
  "module": "./dist-es/index.js",
@@ -24,9 +24,10 @@
24
24
  },
25
25
  "license": "Apache-2.0",
26
26
  "dependencies": {
27
- "@aws-sdk/client-sso": "3.665.0",
28
- "@aws-sdk/token-providers": "3.664.0",
29
- "@aws-sdk/types": "3.664.0",
27
+ "@aws-sdk/client-sso": "3.667.0",
28
+ "@aws-sdk/core": "3.667.0",
29
+ "@aws-sdk/token-providers": "3.667.0",
30
+ "@aws-sdk/types": "3.667.0",
30
31
  "@smithy/property-provider": "^3.1.7",
31
32
  "@smithy/shared-ini-file-loader": "^3.1.8",
32
33
  "@smithy/types": "^3.5.0",
@@ -1,6 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.fromTokenFile = void 0;
4
+ const client_1 = require("@aws-sdk/core/client");
4
5
  const property_provider_1 = require("@smithy/property-provider");
5
6
  const fs_1 = require("fs");
6
7
  const fromWebToken_1 = require("./fromWebToken");
@@ -17,11 +18,15 @@ const fromTokenFile = (init = {}) => async () => {
17
18
  logger: init.logger,
18
19
  });
19
20
  }
20
- return (0, fromWebToken_1.fromWebToken)({
21
+ const credentials = await (0, fromWebToken_1.fromWebToken)({
21
22
  ...init,
22
23
  webIdentityToken: (0, fs_1.readFileSync)(webIdentityTokenFile, { encoding: "ascii" }),
23
24
  roleArn,
24
25
  roleSessionName,
25
26
  })();
27
+ if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
28
+ (0, client_1.setCredentialFeature)(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
29
+ }
30
+ return credentials;
26
31
  };
27
32
  exports.fromTokenFile = fromTokenFile;
@@ -1,3 +1,4 @@
1
+ import { setCredentialFeature } from "@aws-sdk/core/client";
1
2
  import { CredentialsProviderError } from "@smithy/property-provider";
2
3
  import { readFileSync } from "fs";
3
4
  import { fromWebToken } from "./fromWebToken";
@@ -14,10 +15,14 @@ export const fromTokenFile = (init = {}) => async () => {
14
15
  logger: init.logger,
15
16
  });
16
17
  }
17
- return fromWebToken({
18
+ const credentials = await fromWebToken({
18
19
  ...init,
19
20
  webIdentityToken: readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
20
21
  roleArn,
21
22
  roleSessionName,
22
23
  })();
24
+ if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
25
+ setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
26
+ }
27
+ return credentials;
23
28
  };
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/credential-provider-web-identity",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "description": "AWS credential provider that calls STS assumeRole for temporary AWS credentials",
5
5
  "main": "./dist-cjs/index.js",
6
6
  "module": "./dist-es/index.js",
@@ -32,7 +32,8 @@
32
32
  },
33
33
  "license": "Apache-2.0",
34
34
  "dependencies": {
35
- "@aws-sdk/types": "3.664.0",
35
+ "@aws-sdk/core": "3.667.0",
36
+ "@aws-sdk/types": "3.667.0",
36
37
  "@smithy/property-provider": "^3.1.7",
37
38
  "@smithy/types": "^3.5.0",
38
39
  "tslib": "^2.6.2"
@@ -46,7 +47,7 @@
46
47
  "typescript": "~4.9.5"
47
48
  },
48
49
  "peerDependencies": {
49
- "@aws-sdk/client-sts": "^3.664.0"
50
+ "@aws-sdk/client-sts": "^3.667.0"
50
51
  },
51
52
  "types": "./dist-types/index.d.ts",
52
53
  "engines": {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-bucket-endpoint",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-bucket-endpoint",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@aws-sdk/util-arn-parser": "3.568.0",
26
26
  "@smithy/node-config-provider": "^3.1.8",
27
27
  "@smithy/protocol-http": "^4.1.4",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-expect-continue",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-expect-continue",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@smithy/protocol-http": "^4.1.4",
26
26
  "@smithy/types": "^3.5.0",
27
27
  "tslib": "^2.6.2"
@@ -123,6 +123,7 @@ var NODE_RESPONSE_CHECKSUM_VALIDATION_CONFIG_OPTIONS = {
123
123
  };
124
124
 
125
125
  // src/flexibleChecksumsMiddleware.ts
126
+ var import_core = require("@aws-sdk/core");
126
127
  var import_protocol_http = require("@smithy/protocol-http");
127
128
 
128
129
  // src/types.ts
@@ -217,6 +218,20 @@ var flexibleChecksumsMiddleware = /* @__PURE__ */ __name((config, middlewareConf
217
218
  let updatedBody = requestBody;
218
219
  let updatedHeaders = headers;
219
220
  if (checksumAlgorithm) {
221
+ switch (checksumAlgorithm) {
222
+ case "CRC32" /* CRC32 */:
223
+ (0, import_core.setFeature)(context, "FLEXIBLE_CHECKSUMS_REQ_CRC32", "U");
224
+ break;
225
+ case "CRC32C" /* CRC32C */:
226
+ (0, import_core.setFeature)(context, "FLEXIBLE_CHECKSUMS_REQ_CRC32C", "V");
227
+ break;
228
+ case "SHA1" /* SHA1 */:
229
+ (0, import_core.setFeature)(context, "FLEXIBLE_CHECKSUMS_REQ_SHA1", "X");
230
+ break;
231
+ case "SHA256" /* SHA256 */:
232
+ (0, import_core.setFeature)(context, "FLEXIBLE_CHECKSUMS_REQ_SHA256", "Y");
233
+ break;
234
+ }
220
235
  const checksumLocationName = getChecksumLocationName(checksumAlgorithm);
221
236
  const checksumAlgorithmFn = selectChecksumAlgorithmFunction(checksumAlgorithm, config);
222
237
  if (isStreaming(requestBody)) {
@@ -1,4 +1,6 @@
1
+ import { setFeature } from "@aws-sdk/core";
1
2
  import { HttpRequest } from "@smithy/protocol-http";
3
+ import { ChecksumAlgorithm } from "./constants";
2
4
  import { getChecksumAlgorithmForRequest } from "./getChecksumAlgorithmForRequest";
3
5
  import { getChecksumLocationName } from "./getChecksumLocationName";
4
6
  import { hasHeader } from "./hasHeader";
@@ -26,6 +28,20 @@ export const flexibleChecksumsMiddleware = (config, middlewareConfig) => (next,
26
28
  let updatedBody = requestBody;
27
29
  let updatedHeaders = headers;
28
30
  if (checksumAlgorithm) {
31
+ switch (checksumAlgorithm) {
32
+ case ChecksumAlgorithm.CRC32:
33
+ setFeature(context, "FLEXIBLE_CHECKSUMS_REQ_CRC32", "U");
34
+ break;
35
+ case ChecksumAlgorithm.CRC32C:
36
+ setFeature(context, "FLEXIBLE_CHECKSUMS_REQ_CRC32C", "V");
37
+ break;
38
+ case ChecksumAlgorithm.SHA1:
39
+ setFeature(context, "FLEXIBLE_CHECKSUMS_REQ_SHA1", "X");
40
+ break;
41
+ case ChecksumAlgorithm.SHA256:
42
+ setFeature(context, "FLEXIBLE_CHECKSUMS_REQ_SHA256", "Y");
43
+ break;
44
+ }
29
45
  const checksumLocationName = getChecksumLocationName(checksumAlgorithm);
30
46
  const checksumAlgorithmFn = selectChecksumAlgorithmFunction(checksumAlgorithm, config);
31
47
  if (isStreaming(requestBody)) {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-flexible-checksums",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-flexible-checksums",
@@ -30,7 +30,8 @@
30
30
  "dependencies": {
31
31
  "@aws-crypto/crc32": "5.2.0",
32
32
  "@aws-crypto/crc32c": "5.2.0",
33
- "@aws-sdk/types": "3.664.0",
33
+ "@aws-sdk/core": "3.667.0",
34
+ "@aws-sdk/types": "3.667.0",
34
35
  "@smithy/is-array-buffer": "^3.0.0",
35
36
  "@smithy/node-config-provider": "^3.1.8",
36
37
  "@smithy/protocol-http": "^4.1.4",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-host-header",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-host-header",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@smithy/protocol-http": "^4.1.4",
26
26
  "@smithy/types": "^3.5.0",
27
27
  "tslib": "^2.6.2"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-location-constraint",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-location-constraint",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@smithy/types": "^3.5.0",
26
26
  "tslib": "^2.6.2"
27
27
  },
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-logger",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-logger",
@@ -22,7 +22,7 @@
22
22
  "module": "./dist-es/index.js",
23
23
  "types": "./dist-types/index.d.ts",
24
24
  "dependencies": {
25
- "@aws-sdk/types": "3.664.0",
25
+ "@aws-sdk/types": "3.667.0",
26
26
  "@smithy/types": "^3.5.0",
27
27
  "tslib": "^2.6.2"
28
28
  },
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-recursion-detection",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-recursion-detection",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@smithy/protocol-http": "^4.1.4",
26
26
  "@smithy/types": "^3.5.0",
27
27
  "tslib": "^2.6.2"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/middleware-sdk-route53",
3
- "version": "3.664.0",
3
+ "version": "3.667.0",
4
4
  "scripts": {
5
5
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
6
6
  "build:cjs": "node ../../scripts/compilation/inline middleware-sdk-route53",
@@ -21,7 +21,7 @@
21
21
  },
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
- "@aws-sdk/types": "3.664.0",
24
+ "@aws-sdk/types": "3.667.0",
25
25
  "@smithy/types": "^3.5.0",
26
26
  "tslib": "^2.6.2"
27
27
  },