@mavogel/awscdk-rootmail 0.0.20 → 0.0.22

package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-flexible-checksums",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-flexible-checksums",
@@ -30,15 +30,15 @@
   "dependencies": {
     "@aws-crypto/crc32": "3.0.0",
     "@aws-crypto/crc32c": "3.0.0",
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/is-array-buffer": "^2.1.1",
-    "@smithy/protocol-http": "^3.1.1",
-    "@smithy/types": "^2.9.1",
-    "@smithy/util-utf8": "^2.1.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/is-array-buffer": "^2.2.0",
+    "@smithy/protocol-http": "^3.3.0",
+    "@smithy/types": "^2.12.0",
+    "@smithy/util-utf8": "^2.3.0",
+    "tslib": "^2.6.2"
   },
   "devDependencies": {
-    "@smithy/node-http-handler": "^2.3.1",
+    "@smithy/node-http-handler": "^2.5.0",
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "rimraf": "3.0.2",

package/node_modules/@aws-sdk/middleware-host-header/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-host-header",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-host-header",
@@ -21,10 +21,10 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/protocol-http": "^3.1.1",
-    "@smithy/types": "^2.9.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/protocol-http": "^3.3.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"

package/node_modules/@aws-sdk/middleware-location-constraint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-location-constraint",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-location-constraint",
@@ -21,9 +21,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/types": "^2.9.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"

package/node_modules/@aws-sdk/middleware-logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-logger",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-logger",
@@ -22,9 +22,9 @@
   "module": "./dist-es/index.js",
   "types": "./dist-types/index.d.ts",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/types": "^2.9.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "devDependencies": {
     "@tsconfig/recommended": "1.0.1",

package/node_modules/@aws-sdk/middleware-recursion-detection/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-recursion-detection",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-recursion-detection",
@@ -21,10 +21,10 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/protocol-http": "^3.1.1",
-    "@smithy/types": "^2.9.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/protocol-http": "^3.3.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"

package/node_modules/@aws-sdk/middleware-sdk-route53/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-sdk-route53",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-sdk-route53",
@@ -21,9 +21,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/types": "^2.9.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/index.js

@@ -433,7 +433,8 @@ var resolveS3Config = /* @__PURE__ */ __name((input, {
           SessionMode: "ReadWrite"
         })
       )
-    )
+    ),
+    bucketEndpoint: input.bucketEndpoint ?? false
   };
 }, "resolveS3Config");
 
@@ -482,12 +483,49 @@ var getThrow200ExceptionsPlugin = /* @__PURE__ */ __name((config) => ({
 
 // src/validate-bucket-name.ts
 var import_util_arn_parser = require("@aws-sdk/util-arn-parser");
-function validateBucketNameMiddleware() {
+
+// src/bucket-endpoint-middleware.ts
+function bucketEndpointMiddleware(options) {
+  return (next, context) => async (args) => {
+    var _a, _b, _c, _d;
+    if (options.bucketEndpoint) {
+      const endpoint = context.endpointV2;
+      if (endpoint) {
+        const bucket = args.input.Bucket;
+        if (typeof bucket === "string") {
+          try {
+            const bucketEndpointUrl = new URL(bucket);
+            endpoint.url = bucketEndpointUrl;
+          } catch (e) {
+            const warning = `@aws-sdk/middleware-sdk-s3: bucketEndpoint=true was set but Bucket=${bucket} could not be parsed as URL.`;
+            if (((_b = (_a = context.logger) == null ? void 0 : _a.constructor) == null ? void 0 : _b.name) === "NoOpLogger") {
+              console.warn(warning);
+            } else {
+              (_d = (_c = context.logger) == null ? void 0 : _c.warn) == null ? void 0 : _d.call(_c, warning);
+            }
+            throw e;
+          }
+        }
+      }
+    }
+    return next(args);
+  };
+}
+__name(bucketEndpointMiddleware, "bucketEndpointMiddleware");
+var bucketEndpointMiddlewareOptions = {
+  name: "bucketEndpointMiddleware",
+  override: true,
+  relation: "after",
+  toMiddleware: "endpointV2Middleware"
+};
+
+// src/validate-bucket-name.ts
+function validateBucketNameMiddleware({ bucketEndpoint }) {
   return (next) => async (args) => {
     const {
       input: { Bucket }
     } = args;
-    if (typeof Bucket === "string" && !(0, import_util_arn_parser.validate)(Bucket) && Bucket.indexOf("/") >= 0) {
+    if (!bucketEndpoint && typeof Bucket === "string" && !(0, import_util_arn_parser.validate)(Bucket) && Bucket.indexOf("/") >= 0) {
       const err = new Error(`Bucket name shouldn't contain '/', received '${Bucket}'`);
       err.name = "InvalidBucketName";
       throw err;
@@ -502,9 +540,10 @@ var validateBucketNameMiddlewareOptions = {
   name: "validateBucketNameMiddleware",
   override: true
 };
-var getValidateBucketNamePlugin = /* @__PURE__ */ __name((unused) => ({
+var getValidateBucketNamePlugin = /* @__PURE__ */ __name((options) => ({
   applyToStack: (clientStack) => {
-    clientStack.add(validateBucketNameMiddleware(), validateBucketNameMiddlewareOptions);
+    clientStack.add(validateBucketNameMiddleware(options), validateBucketNameMiddlewareOptions);
+    clientStack.addRelativeTo(bucketEndpointMiddleware(options), bucketEndpointMiddlewareOptions);
   }
 }), "getValidateBucketNamePlugin");
 // Annotate the CommonJS export names for ESM import in node:

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/bucket-endpoint-middleware.js

@@ -0,0 +1,33 @@
+export function bucketEndpointMiddleware(options) {
+    return (next, context) => async (args) => {
+        if (options.bucketEndpoint) {
+            const endpoint = context.endpointV2;
+            if (endpoint) {
+                const bucket = args.input.Bucket;
+                if (typeof bucket === "string") {
+                    try {
+                        const bucketEndpointUrl = new URL(bucket);
+                        endpoint.url = bucketEndpointUrl;
+                    }
+                    catch (e) {
+                        const warning = `@aws-sdk/middleware-sdk-s3: bucketEndpoint=true was set but Bucket=${bucket} could not be parsed as URL.`;
+                        if (context.logger?.constructor?.name === "NoOpLogger") {
+                            console.warn(warning);
+                        }
+                        else {
+                            context.logger?.warn?.(warning);
+                        }
+                        throw e;
+                    }
+                }
+            }
+        }
+        return next(args);
+    };
+}
+export const bucketEndpointMiddlewareOptions = {
+    name: "bucketEndpointMiddleware",
+    override: true,
+    relation: "after",
+    toMiddleware: "endpointV2Middleware",
+};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/s3Configuration.js

@@ -12,5 +12,6 @@ export const resolveS3Config = (input, { session, }) => {
                 Bucket: key,
                 SessionMode: "ReadWrite",
             }))),
+        bucketEndpoint: input.bucketEndpoint ?? false,
     };
 };

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/validate-bucket-name.js

@@ -1,8 +1,9 @@
 import { validate as validateArn } from "@aws-sdk/util-arn-parser";
-export function validateBucketNameMiddleware() {
+import { bucketEndpointMiddleware, bucketEndpointMiddlewareOptions } from "./bucket-endpoint-middleware";
+export function validateBucketNameMiddleware({ bucketEndpoint }) {
     return (next) => async (args) => {
         const { input: { Bucket }, } = args;
-        if (typeof Bucket === "string" && !validateArn(Bucket) && Bucket.indexOf("/") >= 0) {
+        if (!bucketEndpoint && typeof Bucket === "string" && !validateArn(Bucket) && Bucket.indexOf("/") >= 0) {
             const err = new Error(`Bucket name shouldn't contain '/', received '${Bucket}'`);
             err.name = "InvalidBucketName";
             throw err;
@@ -16,8 +17,9 @@ export const validateBucketNameMiddlewareOptions = {
     name: "validateBucketNameMiddleware",
     override: true,
 };
-export const getValidateBucketNamePlugin = (unused) => ({
+export const getValidateBucketNamePlugin = (options) => ({
     applyToStack: (clientStack) => {
-        clientStack.add(validateBucketNameMiddleware(), validateBucketNameMiddlewareOptions);
+        clientStack.add(validateBucketNameMiddleware(options), validateBucketNameMiddlewareOptions);
+        clientStack.addRelativeTo(bucketEndpointMiddleware(options), bucketEndpointMiddlewareOptions);
     },
 });

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/bucket-endpoint-middleware.d.ts

@@ -0,0 +1,13 @@
+import { RelativeMiddlewareOptions, SerializeMiddleware } from "@smithy/types";
+interface PreviouslyResolved {
+    bucketEndpoint?: boolean;
+}
+/**
+ * @internal
+ */
+export declare function bucketEndpointMiddleware(options: PreviouslyResolved): SerializeMiddleware<any, any>;
+/**
+ * @internal
+ */
+export declare const bucketEndpointMiddlewareOptions: RelativeMiddlewareOptions;
+export {};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/s3Configuration.d.ts

@@ -27,6 +27,10 @@ export interface S3InputConfig {
      */
     followRegionRedirects?: boolean;
     s3ExpressIdentityProvider?: S3ExpressIdentityProvider;
+    /**
+     * Whether to use the bucket name as the endpoint for this client.
+     */
+    bucketEndpoint?: boolean;
 }
 /**
  * @internal
@@ -48,6 +52,7 @@ export interface S3ResolvedConfig {
     disableMultiregionAccessPoints: boolean;
     followRegionRedirects: boolean;
     s3ExpressIdentityProvider: S3ExpressIdentityProvider;
+    bucketEndpoint: boolean;
 }
 export declare const resolveS3Config: <T>(input: T & S3InputConfig, { session, }: {
     session: [() => PlaceholderS3Client, PlaceholderCreateSessionCommandCtor];

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/ts3.4/bucket-endpoint-middleware.d.ts

@@ -0,0 +1,9 @@
+import { RelativeMiddlewareOptions, SerializeMiddleware } from "@smithy/types";
+interface PreviouslyResolved {
+  bucketEndpoint?: boolean;
+}
+export declare function bucketEndpointMiddleware(
+  options: PreviouslyResolved
+): SerializeMiddleware<any, any>;
+export declare const bucketEndpointMiddlewareOptions: RelativeMiddlewareOptions;
+export {};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/ts3.4/s3Configuration.d.ts

@@ -6,6 +6,7 @@ export interface S3InputConfig {
   disableMultiregionAccessPoints?: boolean;
   followRegionRedirects?: boolean;
   s3ExpressIdentityProvider?: S3ExpressIdentityProvider;
+  bucketEndpoint?: boolean;
 }
 type PlaceholderS3Client = Client<any, any, any> & any;
 type PlaceholderCreateSessionCommandCtor = {
@@ -17,6 +18,7 @@ export interface S3ResolvedConfig {
   disableMultiregionAccessPoints: boolean;
   followRegionRedirects: boolean;
   s3ExpressIdentityProvider: S3ExpressIdentityProvider;
+  bucketEndpoint: boolean;
 }
 export declare const resolveS3Config: <T>(
   input: T & S3InputConfig,

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/ts3.4/validate-bucket-name.d.ts

@@ -3,11 +3,11 @@ import {
   InitializeMiddleware,
   Pluggable,
 } from "@smithy/types";
-export declare function validateBucketNameMiddleware(): InitializeMiddleware<
-  any,
-  any
->;
+import { S3ResolvedConfig } from "./s3Configuration";
+export declare function validateBucketNameMiddleware({
+  bucketEndpoint,
+}: S3ResolvedConfig): InitializeMiddleware<any, any>;
 export declare const validateBucketNameMiddlewareOptions: InitializeHandlerOptions;
 export declare const getValidateBucketNamePlugin: (
-  unused: any
+  options: S3ResolvedConfig
 ) => Pluggable<any, any>;

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/validate-bucket-name.d.ts

@@ -1,8 +1,9 @@
 import { InitializeHandlerOptions, InitializeMiddleware, Pluggable } from "@smithy/types";
+import { S3ResolvedConfig } from "./s3Configuration";
 /**
  * @internal
  */
-export declare function validateBucketNameMiddleware(): InitializeMiddleware<any, any>;
+export declare function validateBucketNameMiddleware({ bucketEndpoint }: S3ResolvedConfig): InitializeMiddleware<any, any>;
 /**
  * @internal
  */
@@ -10,4 +11,4 @@ export declare const validateBucketNameMiddlewareOptions: InitializeHandlerOptio
 /**
  * @internal
  */
-export declare const getValidateBucketNamePlugin: (unused: any) => Pluggable<any, any>;
+export declare const getValidateBucketNamePlugin: (options: S3ResolvedConfig) => Pluggable<any, any>;

package/node_modules/@aws-sdk/middleware-sdk-s3/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-sdk-s3",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-sdk-s3",
@@ -23,15 +23,15 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@aws-sdk/util-arn-parser": "3.495.0",
-    "@smithy/node-config-provider": "^2.2.1",
-    "@smithy/protocol-http": "^3.1.1",
-    "@smithy/signature-v4": "^2.1.1",
-    "@smithy/smithy-client": "^2.3.1",
-    "@smithy/types": "^2.9.1",
-    "@smithy/util-config-provider": "^2.2.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@aws-sdk/util-arn-parser": "3.535.0",
+    "@smithy/node-config-provider": "^2.3.0",
+    "@smithy/protocol-http": "^3.3.0",
+    "@smithy/signature-v4": "^2.2.0",
+    "@smithy/smithy-client": "^2.5.0",
+    "@smithy/types": "^2.12.0",
+    "@smithy/util-config-provider": "^2.3.0",
+    "tslib": "^2.6.2"
   },
   "devDependencies": {
     "@tsconfig/recommended": "1.0.1",

package/node_modules/@aws-sdk/middleware-signing/dist-cjs/index.js

@@ -80,14 +80,21 @@ var resolveAwsAuthConfig = /* @__PURE__ */ __name((input) => {
         },
         authScheme
       );
+      const isSigv4a = (authScheme == null ? void 0 : authScheme.name) === "sigv4a";
       const signingRegion = authScheme.signingRegion;
       const signingService = authScheme.signingName;
-      input.signingRegion = input.signingRegion || signingRegion;
+      let regionForSigner;
+      if (isSigv4a) {
+        regionForSigner = input.signingRegion || signingRegion;
+      } else {
+        input.signingRegion = input.signingRegion || signingRegion;
+        regionForSigner = input.signingRegion;
+      }
       input.signingName = input.signingName || signingService || input.serviceId;
       const params = {
         ...input,
         credentials: normalizedCreds,
-        region: input.signingRegion,
+        region: regionForSigner,
         service: input.signingName,
         sha256,
         uriEscapePath: signingEscapePath
@@ -164,13 +171,39 @@ var getUpdatedSystemClockOffset = /* @__PURE__ */ __name((clockTime, currentSyst
 
 // src/awsAuthMiddleware.ts
 var awsAuthMiddleware = /* @__PURE__ */ __name((options) => (next, context) => async function(args) {
-  var _a, _b, _c, _d;
+  var _a, _b, _c, _d, _e, _f, _g;
   if (!import_protocol_http.HttpRequest.isInstance(args.request))
     return next(args);
-  const authScheme = (_c = (_b = (_a = context.endpointV2) == null ? void 0 : _a.properties) == null ? void 0 : _b.authSchemes) == null ? void 0 : _c[0];
-  const multiRegionOverride = (authScheme == null ? void 0 : authScheme.name) === "sigv4a" ? (_d = authScheme == null ? void 0 : authScheme.signingRegionSet) == null ? void 0 : _d.join(",") : void 0;
-  const signer = await options.signer(authScheme);
+  let authScheme;
+  let signer;
+  const firstAuthScheme = (_c = (_b = (_a = context.endpointV2) == null ? void 0 : _a.properties) == null ? void 0 : _b.authSchemes) == null ? void 0 : _c[0];
+  const secondAuthScheme = (_f = (_e = (_d = context.endpointV2) == null ? void 0 : _d.properties) == null ? void 0 : _e.authSchemes) == null ? void 0 : _f[1];
+  const firstAuthSchemeIsSigv4a = (firstAuthScheme == null ? void 0 : firstAuthScheme.name) === "sigv4a";
+  if (firstAuthSchemeIsSigv4a && secondAuthScheme) {
+    signer = await options.signer(authScheme = firstAuthScheme);
+    const uncheckedSigner = signer;
+    const sigv4aAvailable = (() => {
+      var _a2;
+      if (typeof (uncheckedSigner == null ? void 0 : uncheckedSigner.getSigv4aSigner) === "function") {
+        if (((_a2 = uncheckedSigner == null ? void 0 : uncheckedSigner.signerOptions) == null ? void 0 : _a2.runtime) !== "node") {
+          return false;
+        }
+        try {
+          uncheckedSigner.getSigv4aSigner();
+          return true;
+        } catch (e) {
+        }
+      }
+      return false;
+    })();
+    if (!sigv4aAvailable) {
+      signer = await options.signer(authScheme = secondAuthScheme);
+    }
+  } else {
+    signer = await options.signer(authScheme = firstAuthScheme);
+  }
   let signedRequest;
+  const multiRegionOverride = (authScheme == null ? void 0 : authScheme.name) === "sigv4a" ? (_g = authScheme == null ? void 0 : authScheme.signingRegionSet) == null ? void 0 : _g.join(",") : void 0;
   const signingOptions = {
     signingDate: getSkewCorrectedDate(options.systemClockOffset),
     signingRegion: multiRegionOverride || context["signing_region"],

package/node_modules/@aws-sdk/middleware-signing/dist-es/awsAuthConfiguration.js

@@ -46,14 +46,22 @@ export const resolveAwsAuthConfig = (input) => {
                 signingRegion: await normalizeProvider(input.region)(),
                 properties: {},
             }, authScheme);
+            const isSigv4a = authScheme?.name === "sigv4a";
             const signingRegion = authScheme.signingRegion;
             const signingService = authScheme.signingName;
-            input.signingRegion = input.signingRegion || signingRegion;
+            let regionForSigner;
+            if (isSigv4a) {
+                regionForSigner = input.signingRegion || signingRegion;
+            }
+            else {
+                input.signingRegion = input.signingRegion || signingRegion;
+                regionForSigner = input.signingRegion;
+            }
             input.signingName = input.signingName || signingService || input.serviceId;
             const params = {
                 ...input,
                 credentials: normalizedCreds,
-                region: input.signingRegion,
+                region: regionForSigner,
                 service: input.signingName,
                 sha256,
                 uriEscapePath: signingEscapePath,

package/node_modules/@aws-sdk/middleware-signing/dist-es/awsAuthMiddleware.js

@@ -4,10 +4,36 @@ import { getUpdatedSystemClockOffset } from "./utils/getUpdatedSystemClockOffset
 export const awsAuthMiddleware = (options) => (next, context) => async function (args) {
     if (!HttpRequest.isInstance(args.request))
         return next(args);
-    const authScheme = context.endpointV2?.properties?.authSchemes?.[0];
-    const multiRegionOverride = authScheme?.name === "sigv4a" ? authScheme?.signingRegionSet?.join(",") : undefined;
-    const signer = await options.signer(authScheme);
+    let authScheme;
+    let signer;
+    const firstAuthScheme = context.endpointV2?.properties?.authSchemes?.[0];
+    const secondAuthScheme = context.endpointV2?.properties?.authSchemes?.[1];
+    const firstAuthSchemeIsSigv4a = firstAuthScheme?.name === "sigv4a";
+    if (firstAuthSchemeIsSigv4a && secondAuthScheme) {
+        signer = await options.signer((authScheme = firstAuthScheme));
+        const uncheckedSigner = signer;
+        const sigv4aAvailable = (() => {
+            if (typeof uncheckedSigner?.getSigv4aSigner === "function") {
+                if (uncheckedSigner?.signerOptions?.runtime !== "node") {
+                    return false;
+                }
+                try {
+                    uncheckedSigner.getSigv4aSigner();
+                    return true;
+                }
+                catch (e) { }
+            }
+            return false;
+        })();
+        if (!sigv4aAvailable) {
+            signer = await options.signer((authScheme = secondAuthScheme));
+        }
+    }
+    else {
+        signer = await options.signer((authScheme = firstAuthScheme));
+    }
     let signedRequest;
+    const multiRegionOverride = authScheme?.name === "sigv4a" ? authScheme?.signingRegionSet?.join(",") : undefined;
     const signingOptions = {
         signingDate: getSkewCorrectedDate(options.systemClockOffset),
         signingRegion: multiRegionOverride || context["signing_region"],

package/node_modules/@aws-sdk/middleware-signing/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-signing",
-  "version": "3.515.0",
+  "version": "3.535.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-signing",
@@ -22,13 +22,13 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.515.0",
-    "@smithy/property-provider": "^2.1.1",
-    "@smithy/protocol-http": "^3.1.1",
-    "@smithy/signature-v4": "^2.1.1",
-    "@smithy/types": "^2.9.1",
-    "@smithy/util-middleware": "^2.1.1",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/property-provider": "^2.2.0",
+    "@smithy/protocol-http": "^3.3.0",
+    "@smithy/signature-v4": "^2.2.0",
+    "@smithy/types": "^2.12.0",
+    "@smithy/util-middleware": "^2.2.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"

package/node_modules/@aws-sdk/middleware-ssec/dist-cjs/index.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var src_exports = {};
 __export(src_exports, {
   getSsecPlugin: () => getSsecPlugin,
+  isValidBase64EncodedSSECustomerKey: () => isValidBase64EncodedSSECustomerKey,
   ssecMiddleware: () => ssecMiddleware,
   ssecMiddlewareOptions: () => ssecMiddlewareOptions
 });
@@ -43,8 +44,7 @@ function ssecMiddleware(options) {
       if (value) {
         let valueForHash;
         if (typeof value === "string") {
-          const isBase64Encoded = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
-          if (isBase64Encoded) {
+          if (isValidBase64EncodedSSECustomerKey(value, options)) {
             valueForHash = options.base64Decoder(value);
           } else {
             valueForHash = options.utf8Decoder(value);
@@ -77,11 +77,24 @@ var getSsecPlugin = /* @__PURE__ */ __name((config) => ({
     clientStack.add(ssecMiddleware(config), ssecMiddlewareOptions);
   }
 }), "getSsecPlugin");
+function isValidBase64EncodedSSECustomerKey(str, options) {
+  const base64Regex = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+  if (!base64Regex.test(str))
+    return false;
+  try {
+    const decodedBytes = options.base64Decoder(str);
+    return decodedBytes.length === 32;
+  } catch {
+    return false;
+  }
+}
+__name(isValidBase64EncodedSSECustomerKey, "isValidBase64EncodedSSECustomerKey");
 // Annotate the CommonJS export names for ESM import in node:
 
 0 && (module.exports = {
   ssecMiddleware,
   ssecMiddlewareOptions,
-  getSsecPlugin
+  getSsecPlugin,
+  isValidBase64EncodedSSECustomerKey
 });