@ndlib/ndlib-cdk2 1.0.0

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/fromContainerMetadata.js

@@ -0,0 +1,87 @@
+import { __assign, __awaiter, __generator } from "tslib";
+import { ProviderError } from "@aws-sdk/property-provider";
+import { parse } from "url";
+import { httpRequest } from "./remoteProvider/httpRequest";
+import { fromImdsCredentials, isImdsCredentials } from "./remoteProvider/ImdsCredentials";
+import { providerConfigFromInit } from "./remoteProvider/RemoteProviderInit";
+import { retry } from "./remoteProvider/retry";
+export var ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+export var ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+export var ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+/**
+ * Creates a credential provider that will source credentials from the ECS
+ * Container Metadata Service
+ */
+export var fromContainerMetadata = function (init) {
+    if (init === void 0) { init = {}; }
+    var _a = providerConfigFromInit(init), timeout = _a.timeout, maxRetries = _a.maxRetries;
+    return function () {
+        return retry(function () { return __awaiter(void 0, void 0, void 0, function () {
+            var requestOptions, credsResponse, _a, _b;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0: return [4 /*yield*/, getCmdsUri()];
+                    case 1:
+                        requestOptions = _c.sent();
+                        _b = (_a = JSON).parse;
+                        return [4 /*yield*/, requestFromEcsImds(timeout, requestOptions)];
+                    case 2:
+                        credsResponse = _b.apply(_a, [_c.sent()]);
+                        if (!isImdsCredentials(credsResponse)) {
+                            throw new ProviderError("Invalid response received from instance metadata service.");
+                        }
+                        return [2 /*return*/, fromImdsCredentials(credsResponse)];
+                }
+            });
+        }); }, maxRetries);
+    };
+};
+var requestFromEcsImds = function (timeout, options) { return __awaiter(void 0, void 0, void 0, function () {
+    var buffer;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                if (process.env[ENV_CMDS_AUTH_TOKEN]) {
+                    options.headers = __assign(__assign({}, options.headers), { Authorization: process.env[ENV_CMDS_AUTH_TOKEN] });
+                }
+                return [4 /*yield*/, httpRequest(__assign(__assign({}, options), { timeout: timeout }))];
+            case 1:
+                buffer = _a.sent();
+                return [2 /*return*/, buffer.toString()];
+        }
+    });
+}); };
+var CMDS_IP = "169.254.170.2";
+var GREENGRASS_HOSTS = {
+    localhost: true,
+    "127.0.0.1": true,
+};
+var GREENGRASS_PROTOCOLS = {
+    "http:": true,
+    "https:": true,
+};
+var getCmdsUri = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var parsed;
+    return __generator(this, function (_a) {
+        if (process.env[ENV_CMDS_RELATIVE_URI]) {
+            return [2 /*return*/, {
+                    hostname: CMDS_IP,
+                    path: process.env[ENV_CMDS_RELATIVE_URI],
+                }];
+        }
+        if (process.env[ENV_CMDS_FULL_URI]) {
+            parsed = parse(process.env[ENV_CMDS_FULL_URI]);
+            if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
+                throw new ProviderError(parsed.hostname + " is not a valid container metadata service hostname", false);
+            }
+            if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
+                throw new ProviderError(parsed.protocol + " is not a valid container metadata service protocol", false);
+            }
+            return [2 /*return*/, __assign(__assign({}, parsed), { port: parsed.port ? parseInt(parsed.port, 10) : undefined })];
+        }
+        throw new ProviderError("The container metadata credential provider cannot be used unless" +
+            (" the " + ENV_CMDS_RELATIVE_URI + " or " + ENV_CMDS_FULL_URI + " environment") +
+            " variable is set", false);
+    });
+}); };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/fromInstanceMetadata.js

@@ -0,0 +1,134 @@
+import { __assign, __awaiter, __generator } from "tslib";
+import { ProviderError } from "@aws-sdk/property-provider";
+import { httpRequest } from "./remoteProvider/httpRequest";
+import { fromImdsCredentials, isImdsCredentials } from "./remoteProvider/ImdsCredentials";
+import { providerConfigFromInit } from "./remoteProvider/RemoteProviderInit";
+import { retry } from "./remoteProvider/retry";
+var IMDS_IP = "169.254.169.254";
+var IMDS_PATH = "/latest/meta-data/iam/security-credentials/";
+var IMDS_TOKEN_PATH = "/latest/api/token";
+/**
+ * Creates a credential provider that will source credentials from the EC2
+ * Instance Metadata Service
+ */
+export var fromInstanceMetadata = function (init) {
+    if (init === void 0) { init = {}; }
+    // when set to true, metadata service will not fetch token
+    var disableFetchToken = false;
+    var _a = providerConfigFromInit(init), timeout = _a.timeout, maxRetries = _a.maxRetries;
+    var getCredentials = function (maxRetries, options) { return __awaiter(void 0, void 0, void 0, function () {
+        var profile;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, retry(function () { return __awaiter(void 0, void 0, void 0, function () {
+                        var profile, err_1;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    _a.trys.push([0, 2, , 3]);
+                                    return [4 /*yield*/, getProfile(options)];
+                                case 1:
+                                    profile = _a.sent();
+                                    return [3 /*break*/, 3];
+                                case 2:
+                                    err_1 = _a.sent();
+                                    if (err_1.statusCode === 401) {
+                                        disableFetchToken = false;
+                                    }
+                                    throw err_1;
+                                case 3: return [2 /*return*/, profile];
+                            }
+                        });
+                    }); }, maxRetries)];
+                case 1:
+                    profile = (_a.sent()).trim();
+                    return [2 /*return*/, retry(function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var creds, err_2;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _a.trys.push([0, 2, , 3]);
+                                        return [4 /*yield*/, getCredentialsFromProfile(profile, options)];
+                                    case 1:
+                                        creds = _a.sent();
+                                        return [3 /*break*/, 3];
+                                    case 2:
+                                        err_2 = _a.sent();
+                                        if (err_2.statusCode === 401) {
+                                            disableFetchToken = false;
+                                        }
+                                        throw err_2;
+                                    case 3: return [2 /*return*/, creds];
+                                }
+                            });
+                        }); }, maxRetries)];
+            }
+        });
+    }); };
+    return function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, error_1;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    if (!disableFetchToken) return [3 /*break*/, 1];
+                    return [2 /*return*/, getCredentials(maxRetries, { timeout: timeout })];
+                case 1:
+                    token = void 0;
+                    _a.label = 2;
+                case 2:
+                    _a.trys.push([2, 4, , 5]);
+                    return [4 /*yield*/, getMetadataToken({ timeout: timeout })];
+                case 3:
+                    token = (_a.sent()).toString();
+                    return [3 /*break*/, 5];
+                case 4:
+                    error_1 = _a.sent();
+                    if ((error_1 === null || error_1 === void 0 ? void 0 : error_1.statusCode) === 400) {
+                        throw Object.assign(error_1, {
+                            message: "EC2 Metadata token request returned error",
+                        });
+                    }
+                    else if (error_1.message === "TimeoutError" || [403, 404, 405].includes(error_1.statusCode)) {
+                        disableFetchToken = true;
+                    }
+                    return [2 /*return*/, getCredentials(maxRetries, { timeout: timeout })];
+                case 5: return [2 /*return*/, getCredentials(maxRetries, {
+                        timeout: timeout,
+                        headers: {
+                            "x-aws-ec2-metadata-token": token,
+                        },
+                    })];
+            }
+        });
+    }); };
+};
+var getMetadataToken = function (options) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        return [2 /*return*/, httpRequest(__assign(__assign({}, options), { host: IMDS_IP, path: IMDS_TOKEN_PATH, method: "PUT", headers: {
+                    "x-aws-ec2-metadata-token-ttl-seconds": "21600",
+                } }))];
+    });
+}); };
+var getProfile = function (options) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, httpRequest(__assign(__assign({}, options), { host: IMDS_IP, path: IMDS_PATH }))];
+        case 1: return [2 /*return*/, (_a.sent()).toString()];
+    }
+}); }); };
+var getCredentialsFromProfile = function (profile, options) { return __awaiter(void 0, void 0, void 0, function () {
+    var credsResponse, _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _b = (_a = JSON).parse;
+                return [4 /*yield*/, httpRequest(__assign(__assign({}, options), { host: IMDS_IP, path: IMDS_PATH + profile }))];
+            case 1:
+                credsResponse = _b.apply(_a, [(_c.sent()).toString()]);
+                if (!isImdsCredentials(credsResponse)) {
+                    throw new ProviderError("Invalid response received from instance metadata service.");
+                }
+                return [2 /*return*/, fromImdsCredentials(credsResponse)];
+        }
+    });
+}); };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/index.js

@@ -0,0 +1,4 @@
+export * from "./fromContainerMetadata";
+export * from "./fromInstanceMetadata";
+export * from "./remoteProvider/RemoteProviderInit";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyx5QkFBeUIsQ0FBQztBQUN4QyxjQUFjLHdCQUF3QixDQUFDO0FBQ3ZDLGNBQWMscUNBQXFDLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tIFwiLi9mcm9tQ29udGFpbmVyTWV0YWRhdGFcIjtcbmV4cG9ydCAqIGZyb20gXCIuL2Zyb21JbnN0YW5jZU1ldGFkYXRhXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9yZW1vdGVQcm92aWRlci9SZW1vdGVQcm92aWRlckluaXRcIjtcbiJdfQ==

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/remoteProvider/ImdsCredentials.js

@@ -0,0 +1,15 @@
+export var isImdsCredentials = function (arg) {
+    return Boolean(arg) &&
+        typeof arg === "object" &&
+        typeof arg.AccessKeyId === "string" &&
+        typeof arg.SecretAccessKey === "string" &&
+        typeof arg.Token === "string" &&
+        typeof arg.Expiration === "string";
+};
+export var fromImdsCredentials = function (creds) { return ({
+    accessKeyId: creds.AccessKeyId,
+    secretAccessKey: creds.SecretAccessKey,
+    sessionToken: creds.Token,
+    expiration: new Date(creds.Expiration),
+}); };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSW1kc0NyZWRlbnRpYWxzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL3JlbW90ZVByb3ZpZGVyL0ltZHNDcmVkZW50aWFscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFTQSxNQUFNLENBQUMsSUFBTSxpQkFBaUIsR0FBRyxVQUFDLEdBQVE7SUFDeEMsT0FBQSxPQUFPLENBQUMsR0FBRyxDQUFDO1FBQ1osT0FBTyxHQUFHLEtBQUssUUFBUTtRQUN2QixPQUFPLEdBQUcsQ0FBQyxXQUFXLEtBQUssUUFBUTtRQUNuQyxPQUFPLEdBQUcsQ0FBQyxlQUFlLEtBQUssUUFBUTtRQUN2QyxPQUFPLEdBQUcsQ0FBQyxLQUFLLEtBQUssUUFBUTtRQUM3QixPQUFPLEdBQUcsQ0FBQyxVQUFVLEtBQUssUUFBUTtBQUxsQyxDQUtrQyxDQUFDO0FBRXJDLE1BQU0sQ0FBQyxJQUFNLG1CQUFtQixHQUFHLFVBQUMsS0FBc0IsSUFBa0IsT0FBQSxDQUFDO0lBQzNFLFdBQVcsRUFBRSxLQUFLLENBQUMsV0FBVztJQUM5QixlQUFlLEVBQUUsS0FBSyxDQUFDLGVBQWU7SUFDdEMsWUFBWSxFQUFFLEtBQUssQ0FBQyxLQUFLO0lBQ3pCLFVBQVUsRUFBRSxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDO0NBQ3ZDLENBQUMsRUFMMEUsQ0FLMUUsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IENyZWRlbnRpYWxzIH0gZnJvbSBcIkBhd3Mtc2RrL3R5cGVzXCI7XG5cbmV4cG9ydCBpbnRlcmZhY2UgSW1kc0NyZWRlbnRpYWxzIHtcbiAgQWNjZXNzS2V5SWQ6IHN0cmluZztcbiAgU2VjcmV0QWNjZXNzS2V5OiBzdHJpbmc7XG4gIFRva2VuOiBzdHJpbmc7XG4gIEV4cGlyYXRpb246IHN0cmluZztcbn1cblxuZXhwb3J0IGNvbnN0IGlzSW1kc0NyZWRlbnRpYWxzID0gKGFyZzogYW55KTogYXJnIGlzIEltZHNDcmVkZW50aWFscyA9PlxuICBCb29sZWFuKGFyZykgJiZcbiAgdHlwZW9mIGFyZyA9PT0gXCJvYmplY3RcIiAmJlxuICB0eXBlb2YgYXJnLkFjY2Vzc0tleUlkID09PSBcInN0cmluZ1wiICYmXG4gIHR5cGVvZiBhcmcuU2VjcmV0QWNjZXNzS2V5ID09PSBcInN0cmluZ1wiICYmXG4gIHR5cGVvZiBhcmcuVG9rZW4gPT09IFwic3RyaW5nXCIgJiZcbiAgdHlwZW9mIGFyZy5FeHBpcmF0aW9uID09PSBcInN0cmluZ1wiO1xuXG5leHBvcnQgY29uc3QgZnJvbUltZHNDcmVkZW50aWFscyA9IChjcmVkczogSW1kc0NyZWRlbnRpYWxzKTogQ3JlZGVudGlhbHMgPT4gKHtcbiAgYWNjZXNzS2V5SWQ6IGNyZWRzLkFjY2Vzc0tleUlkLFxuICBzZWNyZXRBY2Nlc3NLZXk6IGNyZWRzLlNlY3JldEFjY2Vzc0tleSxcbiAgc2Vzc2lvblRva2VuOiBjcmVkcy5Ub2tlbixcbiAgZXhwaXJhdGlvbjogbmV3IERhdGUoY3JlZHMuRXhwaXJhdGlvbiksXG59KTtcbiJdfQ==

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/remoteProvider/RemoteProviderInit.js

@@ -0,0 +1,9 @@
+export var DEFAULT_TIMEOUT = 1000;
+// The default in AWS SDK for Python and CLI (botocore) is no retry or one attempt
+// https://github.com/boto/botocore/blob/646c61a7065933e75bab545b785e6098bc94c081/botocore/utils.py#L273
+export var DEFAULT_MAX_RETRIES = 0;
+export var providerConfigFromInit = function (_a) {
+    var _b = _a.maxRetries, maxRetries = _b === void 0 ? DEFAULT_MAX_RETRIES : _b, _c = _a.timeout, timeout = _c === void 0 ? DEFAULT_TIMEOUT : _c;
+    return ({ maxRetries: maxRetries, timeout: timeout });
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUmVtb3RlUHJvdmlkZXJJbml0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL3JlbW90ZVByb3ZpZGVyL1JlbW90ZVByb3ZpZGVySW5pdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxNQUFNLENBQUMsSUFBTSxlQUFlLEdBQUcsSUFBSSxDQUFDO0FBRXBDLGtGQUFrRjtBQUNsRix3R0FBd0c7QUFDeEcsTUFBTSxDQUFDLElBQU0sbUJBQW1CLEdBQUcsQ0FBQyxDQUFDO0FBZ0JyQyxNQUFNLENBQUMsSUFBTSxzQkFBc0IsR0FBRyxVQUFDLEVBR2xCO1FBRm5CLGtCQUFnQyxFQUFoQyxVQUFVLG1CQUFHLG1CQUFtQixLQUFBLEVBQ2hDLGVBQXlCLEVBQXpCLE9BQU8sbUJBQUcsZUFBZSxLQUFBO0lBQ3FCLE9BQUEsQ0FBQyxFQUFFLFVBQVUsWUFBQSxFQUFFLE9BQU8sU0FBQSxFQUFFLENBQUM7QUFBekIsQ0FBeUIsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCBjb25zdCBERUZBVUxUX1RJTUVPVVQgPSAxMDAwO1xuXG4vLyBUaGUgZGVmYXVsdCBpbiBBV1MgU0RLIGZvciBQeXRob24gYW5kIENMSSAoYm90b2NvcmUpIGlzIG5vIHJldHJ5IG9yIG9uZSBhdHRlbXB0XG4vLyBodHRwczovL2dpdGh1Yi5jb20vYm90by9ib3RvY29yZS9ibG9iLzY0NmM2MWE3MDY1OTMzZTc1YmFiNTQ1Yjc4NWU2MDk4YmM5NGMwODEvYm90b2NvcmUvdXRpbHMucHkjTDI3M1xuZXhwb3J0IGNvbnN0IERFRkFVTFRfTUFYX1JFVFJJRVMgPSAwO1xuXG5leHBvcnQgaW50ZXJmYWNlIFJlbW90ZVByb3ZpZGVyQ29uZmlnIHtcbiAgLyoqXG4gICAqIFRoZSBjb25uZWN0aW9uIHRpbWVvdXQgKGluIG1pbGxpc2Vjb25kcylcbiAgICovXG4gIHRpbWVvdXQ6IG51bWJlcjtcblxuICAvKipcbiAgICogVGhlIG1heGltdW0gbnVtYmVyIG9mIHRpbWVzIHRoZSBIVFRQIGNvbm5lY3Rpb24gc2hvdWxkIGJlIHJldHJpZWRcbiAgICovXG4gIG1heFJldHJpZXM6IG51bWJlcjtcbn1cblxuZXhwb3J0IHR5cGUgUmVtb3RlUHJvdmlkZXJJbml0ID0gUGFydGlhbDxSZW1vdGVQcm92aWRlckNvbmZpZz47XG5cbmV4cG9ydCBjb25zdCBwcm92aWRlckNvbmZpZ0Zyb21Jbml0ID0gKHtcbiAgbWF4UmV0cmllcyA9IERFRkFVTFRfTUFYX1JFVFJJRVMsXG4gIHRpbWVvdXQgPSBERUZBVUxUX1RJTUVPVVQsXG59OiBSZW1vdGVQcm92aWRlckluaXQpOiBSZW1vdGVQcm92aWRlckNvbmZpZyA9PiAoeyBtYXhSZXRyaWVzLCB0aW1lb3V0IH0pO1xuIl19

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/remoteProvider/httpRequest.js

@@ -0,0 +1,33 @@
+import { __assign } from "tslib";
+import { ProviderError } from "@aws-sdk/property-provider";
+import { Buffer } from "buffer";
+import { request } from "http";
+/**
+ * @internal
+ */
+export function httpRequest(options) {
+    return new Promise(function (resolve, reject) {
+        var req = request(__assign({ method: "GET" }, options));
+        req.on("error", function (err) {
+            reject(Object.assign(new ProviderError("Unable to connect to instance metadata service"), err));
+        });
+        req.on("timeout", function () {
+            reject(new Error("TimeoutError"));
+        });
+        req.on("response", function (res) {
+            var _a = res.statusCode, statusCode = _a === void 0 ? 400 : _a;
+            if (statusCode < 200 || 300 <= statusCode) {
+                reject(Object.assign(new ProviderError("Error response received from instance metadata service"), { statusCode: statusCode }));
+            }
+            var chunks = [];
+            res.on("data", function (chunk) {
+                chunks.push(chunk);
+            });
+            res.on("end", function () {
+                resolve(Buffer.concat(chunks));
+            });
+        });
+        req.end();
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/remoteProvider/index.js

@@ -0,0 +1,3 @@
+export * from "./ImdsCredentials";
+export * from "./RemoteProviderInit";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcmVtb3RlUHJvdmlkZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxtQkFBbUIsQ0FBQztBQUNsQyxjQUFjLHNCQUFzQixDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSBcIi4vSW1kc0NyZWRlbnRpYWxzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9SZW1vdGVQcm92aWRlckluaXRcIjtcbiJdfQ==

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/es/remoteProvider/retry.js

@@ -0,0 +1,11 @@
+/**
+ * @internal
+ */
+export var retry = function (toRetry, maxRetries) {
+    var promise = toRetry();
+    for (var i = 0; i < maxRetries; i++) {
+        promise = promise.catch(toRetry);
+    }
+    return promise;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/fromContainerMetadata.d.ts

@@ -0,0 +1,10 @@
+import { CredentialProvider } from "@aws-sdk/types";
+import { RemoteProviderInit } from "./remoteProvider/RemoteProviderInit";
+export declare const ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+export declare const ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+export declare const ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+/**
+ * Creates a credential provider that will source credentials from the ECS
+ * Container Metadata Service
+ */
+export declare const fromContainerMetadata: (init?: RemoteProviderInit) => CredentialProvider;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/fromInstanceMetadata.d.ts

@@ -0,0 +1,7 @@
+import { CredentialProvider } from "@aws-sdk/types";
+import { RemoteProviderInit } from "./remoteProvider/RemoteProviderInit";
+/**
+ * Creates a credential provider that will source credentials from the EC2
+ * Instance Metadata Service
+ */
+export declare const fromInstanceMetadata: (init?: RemoteProviderInit) => CredentialProvider;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./fromContainerMetadata";
+export * from "./fromInstanceMetadata";
+export * from "./remoteProvider/RemoteProviderInit";

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/remoteProvider/ImdsCredentials.d.ts

@@ -0,0 +1,9 @@
+import { Credentials } from "@aws-sdk/types";
+export interface ImdsCredentials {
+    AccessKeyId: string;
+    SecretAccessKey: string;
+    Token: string;
+    Expiration: string;
+}
+export declare const isImdsCredentials: (arg: any) => arg is ImdsCredentials;
+export declare const fromImdsCredentials: (creds: ImdsCredentials) => Credentials;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/remoteProvider/RemoteProviderInit.d.ts

@@ -0,0 +1,14 @@
+export declare const DEFAULT_TIMEOUT = 1000;
+export declare const DEFAULT_MAX_RETRIES = 0;
+export interface RemoteProviderConfig {
+    /**
+     * The connection timeout (in milliseconds)
+     */
+    timeout: number;
+    /**
+     * The maximum number of times the HTTP connection should be retried
+     */
+    maxRetries: number;
+}
+export declare type RemoteProviderInit = Partial<RemoteProviderConfig>;
+export declare const providerConfigFromInit: ({ maxRetries, timeout, }: RemoteProviderInit) => RemoteProviderConfig;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/remoteProvider/httpRequest.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+import { RequestOptions } from "http";
+/**
+ * @internal
+ */
+export declare function httpRequest(options: RequestOptions): Promise<Buffer>;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/remoteProvider/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./ImdsCredentials";
+export * from "./RemoteProviderInit";

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/dist/types/remoteProvider/retry.d.ts

@@ -0,0 +1,7 @@
+export interface RetryableProvider<T> {
+    (): Promise<T>;
+}
+/**
+ * @internal
+ */
+export declare const retry: <T>(toRetry: RetryableProvider<T>, maxRetries: number) => Promise<T>;

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@aws-sdk/credential-provider-imds",
+  "version": "3.18.0",
+  "description": "AWS credential provider that sources credentials from the EC2 instance metadata service and ECS container metadata service",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/es/index.js",
+  "scripts": {
+    "prepublishOnly": "yarn build && downlevel-dts dist/types dist/types/ts3.4",
+    "build:cjs": "tsc -p tsconfig.cjs.json",
+    "build:es": "tsc -p tsconfig.es.json",
+    "build": "yarn build:es && yarn build:cjs",
+    "test": "jest"
+  },
+  "keywords": [
+    "aws",
+    "credentials"
+  ],
+  "author": {
+    "name": "AWS SDK for JavaScript Team",
+    "url": "https://aws.amazon.com/javascript/"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@aws-sdk/property-provider": "3.18.0",
+    "@aws-sdk/types": "3.18.0",
+    "tslib": "^2.0.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^26.0.4",
+    "@types/node": "^10.0.0",
+    "jest": "^26.1.0",
+    "nock": "^13.0.2",
+    "typescript": "~4.3.2"
+  },
+  "types": "./dist/types/index.d.ts",
+  "engines": {
+    "node": ">= 10.0.0"
+  },
+  "typesVersions": {
+    "<4.0": {
+      "types/*": [
+        "types/ts3.4/*"
+      ]
+    }
+  },
+  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/credential-provider-imds",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-sdk-js-v3.git",
+    "directory": "packages/credential-provider-imds"
+  }
+}

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/credential-provider-imds/src/fromContainerMetadata.ts

@@ -0,0 +1,87 @@
+import { ProviderError } from "@aws-sdk/property-provider";
+import { CredentialProvider } from "@aws-sdk/types";
+import { RequestOptions } from "http";
+import { parse } from "url";
+
+import { httpRequest } from "./remoteProvider/httpRequest";
+import { fromImdsCredentials, isImdsCredentials } from "./remoteProvider/ImdsCredentials";
+import { providerConfigFromInit, RemoteProviderInit } from "./remoteProvider/RemoteProviderInit";
+import { retry } from "./remoteProvider/retry";
+
+export const ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+export const ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+export const ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+
+/**
+ * Creates a credential provider that will source credentials from the ECS
+ * Container Metadata Service
+ */
+export const fromContainerMetadata = (init: RemoteProviderInit = {}): CredentialProvider => {
+  const { timeout, maxRetries } = providerConfigFromInit(init);
+  return () =>
+    retry(async () => {
+      const requestOptions = await getCmdsUri();
+      const credsResponse = JSON.parse(await requestFromEcsImds(timeout, requestOptions));
+      if (!isImdsCredentials(credsResponse)) {
+        throw new ProviderError("Invalid response received from instance metadata service.");
+      }
+      return fromImdsCredentials(credsResponse);
+    }, maxRetries);
+};
+
+const requestFromEcsImds = async (timeout: number, options: RequestOptions): Promise<string> => {
+  if (process.env[ENV_CMDS_AUTH_TOKEN]) {
+    options.headers = {
+      ...options.headers,
+      Authorization: process.env[ENV_CMDS_AUTH_TOKEN],
+    };
+  }
+
+  const buffer = await httpRequest({
+    ...options,
+    timeout,
+  });
+  return buffer.toString();
+};
+
+const CMDS_IP = "169.254.170.2";
+const GREENGRASS_HOSTS = {
+  localhost: true,
+  "127.0.0.1": true,
+};
+const GREENGRASS_PROTOCOLS = {
+  "http:": true,
+  "https:": true,
+};
+
+const getCmdsUri = async (): Promise<RequestOptions> => {
+  if (process.env[ENV_CMDS_RELATIVE_URI]) {
+    return {
+      hostname: CMDS_IP,
+      path: process.env[ENV_CMDS_RELATIVE_URI],
+    };
+  }
+
+  if (process.env[ENV_CMDS_FULL_URI]) {
+    const parsed = parse(process.env[ENV_CMDS_FULL_URI]!);
+    if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
+      throw new ProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, false);
+    }
+
+    if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
+      throw new ProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, false);
+    }
+
+    return {
+      ...parsed,
+      port: parsed.port ? parseInt(parsed.port, 10) : undefined,
+    };
+  }
+
+  throw new ProviderError(
+    "The container metadata credential provider cannot be used unless" +
+      ` the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment` +
+      " variable is set",
+    false
+  );
+};