@rio-cloud/cdk-v2-constructs 6.11.0 → 6.12.0

package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.d.ts

@@ -15,9 +15,11 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
   ) => import("@smithy/types").MemoizedProvider<
     import("@smithy/types").AwsCredentialIdentity
   >;
-  defaultUserAgentProvider: import("@smithy/types").Provider<
-    import("@smithy/types").UserAgent
-  >;
+  defaultUserAgentProvider: (
+    config?:
+      | import("@aws-sdk/util-user-agent-node").PreviouslyResolved
+      | undefined
+  ) => Promise<import("@smithy/types").UserAgent>;
   httpAuthSchemes:
     | import("@smithy/types").HttpAuthScheme[]
     | {
@@ -41,7 +43,9 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
   streamCollector: import("@smithy/types").StreamCollector;
   useDualstackEndpoint: boolean | import("@smithy/types").Provider<boolean>;
   useFipsEndpoint: boolean | import("@smithy/types").Provider<boolean>;
+  userAgentAppId: string | import("@smithy/types").Provider<string | undefined>;
   apiVersion: string;
+  cacheMiddleware?: boolean | undefined;
   urlParser: import("@smithy/types").UrlParser;
   base64Decoder: import("@smithy/types").Decoder;
   base64Encoder: (_input: string | Uint8Array) => string;
@@ -51,6 +55,11 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
   serviceId: string;
   logger: import("@smithy/types").Logger;
   extensions: import("./runtimeExtensions").RuntimeExtension[];
+  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+  retryStrategy?:
+    | import("@smithy/types").RetryStrategy
+    | import("@smithy/types").RetryStrategyV2
+    | undefined;
   endpoint?:
     | ((
         | string
@@ -77,11 +86,7 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
       | undefined
   ) => import("@smithy/types").EndpointV2;
   tls?: boolean | undefined;
-  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
-  retryStrategy?:
-    | import("@smithy/types").RetryStrategy
-    | import("@smithy/types").RetryStrategyV2
-    | undefined;
+  serviceConfiguredEndpoint?: undefined;
   httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").STSHttpAuthSchemeProvider;
   credentials?:
     | import("@smithy/types").AwsCredentialIdentity

package/node_modules/@aws-sdk/client-sts/dist-types/ts3.4/runtimeConfig.native.d.ts

@@ -9,6 +9,7 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
     | import("@smithy/protocol-http").HttpHandler<any>
     | import("@smithy/fetch-http-handler").FetchHttpHandler;
   apiVersion: string;
+  cacheMiddleware?: boolean | undefined;
   urlParser: import("@smithy/types").UrlParser;
   bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
   streamCollector: import("@smithy/types").StreamCollector;
@@ -21,9 +22,11 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
   useDualstackEndpoint: boolean | import("@smithy/types").Provider<boolean>;
   useFipsEndpoint: boolean | import("@smithy/types").Provider<boolean>;
   region: string | import("@smithy/types").Provider<any>;
-  defaultUserAgentProvider: import("@smithy/types").Provider<
-    import("@smithy/types").UserAgent
-  >;
+  defaultUserAgentProvider: (
+    config?:
+      | import("@aws-sdk/util-user-agent-browser").PreviouslyResolved
+      | undefined
+  ) => Promise<import("@smithy/types").UserAgent>;
   credentialDefaultProvider: (
     input: any
   ) => import("@smithy/types").AwsCredentialIdentityProvider;
@@ -36,6 +39,15 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
     | import("@smithy/types").Provider<
         import("@smithy/smithy-client").DefaultsMode
       >;
+  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
+  userAgentAppId?:
+    | string
+    | import("@smithy/types").Provider<string | undefined>
+    | undefined;
+  retryStrategy?:
+    | import("@smithy/types").RetryStrategy
+    | import("@smithy/types").RetryStrategyV2
+    | undefined;
   endpoint?:
     | string
     | import("@smithy/types").Endpoint
@@ -52,11 +64,7 @@ export declare const getRuntimeConfig: (config: STSClientConfig) => {
       | undefined
   ) => import("@smithy/types").EndpointV2;
   tls?: boolean | undefined;
-  customUserAgent?: string | import("@smithy/types").UserAgent | undefined;
-  retryStrategy?:
-    | import("@smithy/types").RetryStrategy
-    | import("@smithy/types").RetryStrategyV2
-    | undefined;
+  serviceConfiguredEndpoint?: undefined;
   httpAuthSchemes:
     | import("@smithy/types").HttpAuthScheme[]
     | (

package/node_modules/@aws-sdk/client-sts/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sts",
   "description": "AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native",
-  "version": "3.621.0",
+  "version": "3.675.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sts",
@@ -22,42 +22,42 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.621.0",
-    "@aws-sdk/core": "3.621.0",
-    "@aws-sdk/credential-provider-node": "3.621.0",
-    "@aws-sdk/middleware-host-header": "3.620.0",
-    "@aws-sdk/middleware-logger": "3.609.0",
-    "@aws-sdk/middleware-recursion-detection": "3.620.0",
-    "@aws-sdk/middleware-user-agent": "3.620.0",
-    "@aws-sdk/region-config-resolver": "3.614.0",
-    "@aws-sdk/types": "3.609.0",
-    "@aws-sdk/util-endpoints": "3.614.0",
-    "@aws-sdk/util-user-agent-browser": "3.609.0",
-    "@aws-sdk/util-user-agent-node": "3.614.0",
-    "@smithy/config-resolver": "^3.0.5",
-    "@smithy/core": "^2.3.1",
-    "@smithy/fetch-http-handler": "^3.2.4",
-    "@smithy/hash-node": "^3.0.3",
-    "@smithy/invalid-dependency": "^3.0.3",
-    "@smithy/middleware-content-length": "^3.0.5",
-    "@smithy/middleware-endpoint": "^3.1.0",
-    "@smithy/middleware-retry": "^3.0.13",
-    "@smithy/middleware-serde": "^3.0.3",
-    "@smithy/middleware-stack": "^3.0.3",
-    "@smithy/node-config-provider": "^3.1.4",
-    "@smithy/node-http-handler": "^3.1.4",
-    "@smithy/protocol-http": "^4.1.0",
-    "@smithy/smithy-client": "^3.1.11",
-    "@smithy/types": "^3.3.0",
-    "@smithy/url-parser": "^3.0.3",
+    "@aws-sdk/client-sso-oidc": "3.675.0",
+    "@aws-sdk/core": "3.667.0",
+    "@aws-sdk/credential-provider-node": "3.675.0",
+    "@aws-sdk/middleware-host-header": "3.667.0",
+    "@aws-sdk/middleware-logger": "3.667.0",
+    "@aws-sdk/middleware-recursion-detection": "3.667.0",
+    "@aws-sdk/middleware-user-agent": "3.669.0",
+    "@aws-sdk/region-config-resolver": "3.667.0",
+    "@aws-sdk/types": "3.667.0",
+    "@aws-sdk/util-endpoints": "3.667.0",
+    "@aws-sdk/util-user-agent-browser": "3.675.0",
+    "@aws-sdk/util-user-agent-node": "3.669.0",
+    "@smithy/config-resolver": "^3.0.9",
+    "@smithy/core": "^2.4.8",
+    "@smithy/fetch-http-handler": "^3.2.9",
+    "@smithy/hash-node": "^3.0.7",
+    "@smithy/invalid-dependency": "^3.0.7",
+    "@smithy/middleware-content-length": "^3.0.9",
+    "@smithy/middleware-endpoint": "^3.1.4",
+    "@smithy/middleware-retry": "^3.0.23",
+    "@smithy/middleware-serde": "^3.0.7",
+    "@smithy/middleware-stack": "^3.0.7",
+    "@smithy/node-config-provider": "^3.1.8",
+    "@smithy/node-http-handler": "^3.2.4",
+    "@smithy/protocol-http": "^4.1.4",
+    "@smithy/smithy-client": "^3.4.0",
+    "@smithy/types": "^3.5.0",
+    "@smithy/url-parser": "^3.0.7",
     "@smithy/util-base64": "^3.0.0",
     "@smithy/util-body-length-browser": "^3.0.0",
     "@smithy/util-body-length-node": "^3.0.0",
-    "@smithy/util-defaults-mode-browser": "^3.0.13",
-    "@smithy/util-defaults-mode-node": "^3.0.13",
-    "@smithy/util-endpoints": "^2.0.5",
-    "@smithy/util-middleware": "^3.0.3",
-    "@smithy/util-retry": "^3.0.3",
+    "@smithy/util-defaults-mode-browser": "^3.0.23",
+    "@smithy/util-defaults-mode-node": "^3.0.23",
+    "@smithy/util-endpoints": "^2.1.3",
+    "@smithy/util-middleware": "^3.0.7",
+    "@smithy/util-retry": "^3.0.7",
     "@smithy/util-utf8": "^3.0.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/core/dist-cjs/submodules/account-id-endpoint/index.js

@@ -44,12 +44,12 @@ __name(validateAccountIdEndpointMode, "validateAccountIdEndpointMode");
 
 // src/submodules/account-id-endpoint/AccountIdEndpointModeConfigResolver.ts
 var resolveAccountIdEndpointModeConfig = /* @__PURE__ */ __name((input) => {
+  const accountIdEndpointModeProvider = (0, import_util_middleware.normalizeProvider)(
+    input.accountIdEndpointMode ?? DEFAULT_ACCOUNT_ID_ENDPOINT_MODE
+  );
   return {
     ...input,
     accountIdEndpointMode: async () => {
-      const accountIdEndpointModeProvider = (0, import_util_middleware.normalizeProvider)(
-        input.accountIdEndpointMode ?? DEFAULT_ACCOUNT_ID_ENDPOINT_MODE
-      );
       const accIdMode = await accountIdEndpointModeProvider();
       if (!validateAccountIdEndpointMode(accIdMode)) {
         throw new Error(

package/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js

@@ -21,7 +21,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/submodules/client/index.ts
 var client_exports = {};
 __export(client_exports, {
-  emitWarningIfUnsupportedVersion: () => emitWarningIfUnsupportedVersion
+  emitWarningIfUnsupportedVersion: () => emitWarningIfUnsupportedVersion,
+  setCredentialFeature: () => setCredentialFeature,
+  setFeature: () => setFeature
 });
 module.exports = __toCommonJS(client_exports);
 
@@ -41,7 +43,32 @@ More information can be found at: https://a.co/74kJMmI`
     );
   }
 }, "emitWarningIfUnsupportedVersion");
+
+// src/submodules/client/setCredentialFeature.ts
+function setCredentialFeature(credentials, feature, value) {
+  if (!credentials.$source) {
+    credentials.$source = {};
+  }
+  credentials.$source[feature] = value;
+  return credentials;
+}
+__name(setCredentialFeature, "setCredentialFeature");
+
+// src/submodules/client/setFeature.ts
+function setFeature(context, feature, value) {
+  if (!context.__aws_sdk_context) {
+    context.__aws_sdk_context = {
+      features: {}
+    };
+  } else if (!context.__aws_sdk_context.features) {
+    context.__aws_sdk_context.features = {};
+  }
+  context.__aws_sdk_context.features[feature] = value;
+}
+__name(setFeature, "setFeature");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  emitWarningIfUnsupportedVersion
+  emitWarningIfUnsupportedVersion,
+  setCredentialFeature,
+  setFeature
 });

package/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js

@@ -22,9 +22,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var httpAuthSchemes_exports = {};
 __export(httpAuthSchemes_exports, {
   AWSSDKSigV4Signer: () => AWSSDKSigV4Signer,
+  AwsSdkSigV4ASigner: () => AwsSdkSigV4ASigner,
   AwsSdkSigV4Signer: () => AwsSdkSigV4Signer,
+  NODE_SIGV4A_CONFIG_OPTIONS: () => NODE_SIGV4A_CONFIG_OPTIONS,
   resolveAWSSDKSigV4Config: () => resolveAWSSDKSigV4Config,
-  resolveAwsSdkSigV4Config: () => resolveAwsSdkSigV4Config
+  resolveAwsSdkSigV4AConfig: () => resolveAwsSdkSigV4AConfig,
+  resolveAwsSdkSigV4Config: () => resolveAwsSdkSigV4Config,
+  validateSigningProperties: () => validateSigningProperties
 });
 module.exports = __toCommonJS(httpAuthSchemes_exports);
 
@@ -74,20 +78,33 @@ var validateSigningProperties = /* @__PURE__ */ __name(async (signingProperties)
   );
   const signer = await signerFunction(authScheme);
   const signingRegion = signingProperties == null ? void 0 : signingProperties.signingRegion;
+  const signingRegionSet = signingProperties == null ? void 0 : signingProperties.signingRegionSet;
   const signingName = signingProperties == null ? void 0 : signingProperties.signingName;
   return {
     config,
     signer,
     signingRegion,
+    signingRegionSet,
     signingName
   };
 }, "validateSigningProperties");
 var _AwsSdkSigV4Signer = class _AwsSdkSigV4Signer {
   async sign(httpRequest, identity, signingProperties) {
+    var _a;
     if (!import_protocol_http2.HttpRequest.isInstance(httpRequest)) {
       throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
     }
-    const { config, signer, signingRegion, signingName } = await validateSigningProperties(signingProperties);
+    const validatedProps = await validateSigningProperties(signingProperties);
+    const { config, signer } = validatedProps;
+    let { signingRegion, signingName } = validatedProps;
+    const handlerExecutionContext = signingProperties.context;
+    if (((_a = handlerExecutionContext == null ? void 0 : handlerExecutionContext.authSchemes) == null ? void 0 : _a.length) ?? 0 > 1) {
+      const [first, second] = handlerExecutionContext.authSchemes;
+      if ((first == null ? void 0 : first.name) === "sigv4a" && (second == null ? void 0 : second.name) === "sigv4") {
+        signingRegion = (second == null ? void 0 : second.signingRegion) ?? signingRegion;
+        signingName = (second == null ? void 0 : second.signingName) ?? signingName;
+      }
+    }
     const signedRequest = await signer.sign(httpRequest, {
       signingDate: getSkewCorrectedDate(config.systemClockOffset),
       signingRegion,
@@ -122,17 +139,71 @@ __name(_AwsSdkSigV4Signer, "AwsSdkSigV4Signer");
 var AwsSdkSigV4Signer = _AwsSdkSigV4Signer;
 var AWSSDKSigV4Signer = AwsSdkSigV4Signer;
 
-// src/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.ts
+// src/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4ASigner.ts
+var import_protocol_http3 = require("@smithy/protocol-http");
+var _AwsSdkSigV4ASigner = class _AwsSdkSigV4ASigner extends AwsSdkSigV4Signer {
+  async sign(httpRequest, identity, signingProperties) {
+    var _a;
+    if (!import_protocol_http3.HttpRequest.isInstance(httpRequest)) {
+      throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
+    }
+    const { config, signer, signingRegion, signingRegionSet, signingName } = await validateSigningProperties(
+      signingProperties
+    );
+    const configResolvedSigningRegionSet = await ((_a = config.sigv4aSigningRegionSet) == null ? void 0 : _a.call(config));
+    const multiRegionOverride = (configResolvedSigningRegionSet ?? signingRegionSet ?? [signingRegion]).join(",");
+    const signedRequest = await signer.sign(httpRequest, {
+      signingDate: getSkewCorrectedDate(config.systemClockOffset),
+      signingRegion: multiRegionOverride,
+      signingService: signingName
+    });
+    return signedRequest;
+  }
+};
+__name(_AwsSdkSigV4ASigner, "AwsSdkSigV4ASigner");
+var AwsSdkSigV4ASigner = _AwsSdkSigV4ASigner;
+
+// src/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4AConfig.ts
 var import_core = require("@smithy/core");
+var import_property_provider = require("@smithy/property-provider");
+var resolveAwsSdkSigV4AConfig = /* @__PURE__ */ __name((config) => {
+  config.sigv4aSigningRegionSet = (0, import_core.normalizeProvider)(config.sigv4aSigningRegionSet);
+  return config;
+}, "resolveAwsSdkSigV4AConfig");
+var NODE_SIGV4A_CONFIG_OPTIONS = {
+  environmentVariableSelector(env) {
+    if (env.AWS_SIGV4A_SIGNING_REGION_SET) {
+      return env.AWS_SIGV4A_SIGNING_REGION_SET.split(",").map((_) => _.trim());
+    }
+    throw new import_property_provider.ProviderError("AWS_SIGV4A_SIGNING_REGION_SET not set in env.", {
+      tryNextLink: true
+    });
+  },
+  configFileSelector(profile) {
+    if (profile.sigv4a_signing_region_set) {
+      return (profile.sigv4a_signing_region_set ?? "").split(",").map((_) => _.trim());
+    }
+    throw new import_property_provider.ProviderError("sigv4a_signing_region_set not set in profile.", {
+      tryNextLink: true
+    });
+  },
+  default: void 0
+};
+
+// src/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.ts
+var import_client = require("@aws-sdk/core/client");
+var import_core2 = require("@smithy/core");
 var import_signature_v4 = require("@smithy/signature-v4");
 var resolveAwsSdkSigV4Config = /* @__PURE__ */ __name((config) => {
+  let isUserSupplied = false;
   let normalizedCreds;
   if (config.credentials) {
-    normalizedCreds = (0, import_core.memoizeIdentityProvider)(config.credentials, import_core.isIdentityExpired, import_core.doesIdentityRequireRefresh);
+    isUserSupplied = true;
+    normalizedCreds = (0, import_core2.memoizeIdentityProvider)(config.credentials, import_core2.isIdentityExpired, import_core2.doesIdentityRequireRefresh);
   }
   if (!normalizedCreds) {
     if (config.credentialDefaultProvider) {
-      normalizedCreds = (0, import_core.normalizeProvider)(
+      normalizedCreds = (0, import_core2.normalizeProvider)(
         config.credentialDefaultProvider(
           Object.assign({}, config, {
             parentClientConfig: config
@@ -155,9 +226,9 @@ var resolveAwsSdkSigV4Config = /* @__PURE__ */ __name((config) => {
   } = config;
   let signer;
   if (config.signer) {
-    signer = (0, import_core.normalizeProvider)(config.signer);
+    signer = (0, import_core2.normalizeProvider)(config.signer);
   } else if (config.regionInfoProvider) {
-    signer = /* @__PURE__ */ __name(() => (0, import_core.normalizeProvider)(config.region)().then(
+    signer = /* @__PURE__ */ __name(() => (0, import_core2.normalizeProvider)(config.region)().then(
       async (region) => [
         await config.regionInfoProvider(region, {
           useFipsEndpoint: await config.useFipsEndpoint(),
@@ -187,7 +258,7 @@ var resolveAwsSdkSigV4Config = /* @__PURE__ */ __name((config) => {
         {
           name: "sigv4",
           signingName: config.signingName || config.defaultSigningName,
-          signingRegion: await (0, import_core.normalizeProvider)(config.region)(),
+          signingRegion: await (0, import_core2.normalizeProvider)(config.region)(),
           properties: {}
         },
         authScheme
@@ -212,7 +283,9 @@ var resolveAwsSdkSigV4Config = /* @__PURE__ */ __name((config) => {
     ...config,
     systemClockOffset,
     signingEscapePath,
-    credentials: normalizedCreds,
+    credentials: isUserSupplied ? async () => normalizedCreds().then(
+      (creds) => (0, import_client.setCredentialFeature)(creds, "CREDENTIALS_CODE", "e")
+    ) : normalizedCreds,
     signer
   };
 }, "resolveAwsSdkSigV4Config");
@@ -220,7 +293,11 @@ var resolveAWSSDKSigV4Config = resolveAwsSdkSigV4Config;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AWSSDKSigV4Signer,
+  AwsSdkSigV4ASigner,
   AwsSdkSigV4Signer,
+  NODE_SIGV4A_CONFIG_OPTIONS,
   resolveAWSSDKSigV4Config,
-  resolveAwsSdkSigV4Config
+  resolveAwsSdkSigV4AConfig,
+  resolveAwsSdkSigV4Config,
+  validateSigningProperties
 });

package/node_modules/@aws-sdk/core/dist-es/submodules/account-id-endpoint/AccountIdEndpointModeConfigResolver.js

@@ -1,10 +1,10 @@
 import { normalizeProvider } from "@smithy/util-middleware";
 import { DEFAULT_ACCOUNT_ID_ENDPOINT_MODE, validateAccountIdEndpointMode, } from "./AccountIdEndpointModeConstants";
 export const resolveAccountIdEndpointModeConfig = (input) => {
+    const accountIdEndpointModeProvider = normalizeProvider(input.accountIdEndpointMode ?? DEFAULT_ACCOUNT_ID_ENDPOINT_MODE);
     return {
         ...input,
         accountIdEndpointMode: async () => {
-            const accountIdEndpointModeProvider = normalizeProvider(input.accountIdEndpointMode ?? DEFAULT_ACCOUNT_ID_ENDPOINT_MODE);
             const accIdMode = await accountIdEndpointModeProvider();
             if (!validateAccountIdEndpointMode(accIdMode)) {
                 throw new Error(`Invalid value for accountIdEndpointMode: ${accIdMode}. Valid values are: "required", "preferred", "disabled".`);

package/node_modules/@aws-sdk/core/dist-es/submodules/client/index.js

@@ -1 +1,3 @@
 export * from "./emitWarningIfUnsupportedVersion";
+export * from "./setCredentialFeature";
+export * from "./setFeature";

package/node_modules/@aws-sdk/core/dist-es/submodules/client/setCredentialFeature.js

@@ -0,0 +1,7 @@
+export function setCredentialFeature(credentials, feature, value) {
+    if (!credentials.$source) {
+        credentials.$source = {};
+    }
+    credentials.$source[feature] = value;
+    return credentials;
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js

@@ -6,18 +6,20 @@ const throwSigningPropertyError = (name, property) => {
     }
     return property;
 };
-const validateSigningProperties = async (signingProperties) => {
+export const validateSigningProperties = async (signingProperties) => {
     const context = throwSigningPropertyError("context", signingProperties.context);
     const config = throwSigningPropertyError("config", signingProperties.config);
     const authScheme = context.endpointV2?.properties?.authSchemes?.[0];
     const signerFunction = throwSigningPropertyError("signer", config.signer);
     const signer = await signerFunction(authScheme);
     const signingRegion = signingProperties?.signingRegion;
+    const signingRegionSet = signingProperties?.signingRegionSet;
     const signingName = signingProperties?.signingName;
     return {
         config,
         signer,
         signingRegion,
+        signingRegionSet,
         signingName,
     };
 };
@@ -26,7 +28,17 @@ export class AwsSdkSigV4Signer {
         if (!HttpRequest.isInstance(httpRequest)) {
             throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
         }
-        const { config, signer, signingRegion, signingName } = await validateSigningProperties(signingProperties);
+        const validatedProps = await validateSigningProperties(signingProperties);
+        const { config, signer } = validatedProps;
+        let { signingRegion, signingName } = validatedProps;
+        const handlerExecutionContext = signingProperties.context;
+        if (handlerExecutionContext?.authSchemes?.length ?? 0 > 1) {
+            const [first, second] = handlerExecutionContext.authSchemes;
+            if (first?.name === "sigv4a" && second?.name === "sigv4") {
+                signingRegion = second?.signingRegion ?? signingRegion;
+                signingName = second?.signingName ?? signingName;
+            }
+        }
         const signedRequest = await signer.sign(httpRequest, {
             signingDate: getSkewCorrectedDate(config.systemClockOffset),
             signingRegion: signingRegion,

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/index.js

@@ -1,2 +1,4 @@
-export * from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
+export * from "./resolveAwsSdkSigV4AConfig";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.js

@@ -1,8 +1,11 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
 import { doesIdentityRequireRefresh, isIdentityExpired, memoizeIdentityProvider, normalizeProvider, } from "@smithy/core";
 import { SignatureV4 } from "@smithy/signature-v4";
 export const resolveAwsSdkSigV4Config = (config) => {
+    let isUserSupplied = false;
     let normalizedCreds;
     if (config.credentials) {
+        isUserSupplied = true;
         normalizedCreds = memoizeIdentityProvider(config.credentials, isIdentityExpired, doesIdentityRequireRefresh);
     }
     if (!normalizedCreds) {
@@ -75,7 +78,9 @@ export const resolveAwsSdkSigV4Config = (config) => {
         ...config,
         systemClockOffset,
         signingEscapePath,
-        credentials: normalizedCreds,
+        credentials: isUserSupplied
+            ? async () => normalizedCreds().then((creds) => setCredentialFeature(creds, "CREDENTIALS_CODE", "e"))
+            : normalizedCreds,
         signer,
     };
 };

package/node_modules/@aws-sdk/core/dist-types/submodules/client/index.d.ts

@@ -1 +1,3 @@
 export * from "./emitWarningIfUnsupportedVersion";
+export * from "./setCredentialFeature";
+export * from "./setFeature";

package/node_modules/@aws-sdk/core/dist-types/submodules/client/setCredentialFeature.d.ts

@@ -0,0 +1,7 @@
+import type { AttributedAwsCredentialIdentity, AwsSdkCredentialsFeatures } from "@aws-sdk/types";
+/**
+ * @internal
+ *
+ * @returns the credentials with source feature attribution.
+ */
+export declare function setCredentialFeature<F extends keyof AwsSdkCredentialsFeatures>(credentials: AttributedAwsCredentialIdentity, feature: F, value: AwsSdkCredentialsFeatures[F]): AttributedAwsCredentialIdentity;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.d.ts

@@ -1,7 +1,31 @@
-import { AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner } from "@smithy/types";
+import { AuthScheme, AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner, RequestSigner } from "@smithy/types";
+import { AwsSdkSigV4AAuthResolvedConfig } from "./resolveAwsSdkSigV4AConfig";
 /**
  * @internal
  */
+interface AwsSdkSigV4Config extends AwsSdkSigV4AAuthResolvedConfig {
+    systemClockOffset: number;
+    signer: (authScheme?: AuthScheme) => Promise<RequestSigner>;
+}
+/**
+ * @internal
+ */
+interface AwsSdkSigV4AuthSigningProperties {
+    config: AwsSdkSigV4Config;
+    signer: RequestSigner;
+    signingRegion?: string;
+    signingRegionSet?: string[];
+    signingName?: string;
+}
+/**
+ * @internal
+ */
+export declare const validateSigningProperties: (signingProperties: Record<string, unknown>) => Promise<AwsSdkSigV4AuthSigningProperties>;
+/**
+ * @internal
+ * Note: this is not a signing algorithm implementation. The sign method
+ * accepts the real signer as an input parameter.
+ */
 export declare class AwsSdkSigV4Signer implements HttpSigner {
     sign(httpRequest: IHttpRequest, 
     /**
@@ -15,3 +39,4 @@ export declare class AwsSdkSigV4Signer implements HttpSigner {
  * @deprecated renamed to {@link AwsSdkSigV4Signer}
  */
 export declare const AWSSDKSigV4Signer: typeof AwsSdkSigV4Signer;
+export {};

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,2 +1,4 @@
-export * from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
+export * from "./resolveAwsSdkSigV4AConfig";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/index.d.ts

@@ -1 +1,3 @@
 export * from "./emitWarningIfUnsupportedVersion";
+export * from "./setCredentialFeature";
+export * from "./setFeature";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/setCredentialFeature.d.ts

@@ -0,0 +1,11 @@
+import {
+  AttributedAwsCredentialIdentity,
+  AwsSdkCredentialsFeatures,
+} from "@aws-sdk/types";
+export declare function setCredentialFeature<
+  F extends keyof AwsSdkCredentialsFeatures
+>(
+  credentials: AttributedAwsCredentialIdentity,
+  feature: F,
+  value: AwsSdkCredentialsFeatures[F]
+): AttributedAwsCredentialIdentity;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.d.ts

@@ -1,9 +1,26 @@
 import {
+  AuthScheme,
   AwsCredentialIdentity,
   HttpRequest as IHttpRequest,
   HttpResponse,
   HttpSigner,
+  RequestSigner,
 } from "@smithy/types";
+import { AwsSdkSigV4AAuthResolvedConfig } from "./resolveAwsSdkSigV4AConfig";
+interface AwsSdkSigV4Config extends AwsSdkSigV4AAuthResolvedConfig {
+  systemClockOffset: number;
+  signer: (authScheme?: AuthScheme) => Promise<RequestSigner>;
+}
+interface AwsSdkSigV4AuthSigningProperties {
+  config: AwsSdkSigV4Config;
+  signer: RequestSigner;
+  signingRegion?: string;
+  signingRegionSet?: string[];
+  signingName?: string;
+}
+export declare const validateSigningProperties: (
+  signingProperties: Record<string, unknown>
+) => Promise<AwsSdkSigV4AuthSigningProperties>;
 export declare class AwsSdkSigV4Signer implements HttpSigner {
   sign(
     httpRequest: IHttpRequest,
@@ -19,3 +36,4 @@ export declare class AwsSdkSigV4Signer implements HttpSigner {
   ): void;
 }
 export declare const AWSSDKSigV4Signer: typeof AwsSdkSigV4Signer;
+export {};

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,2 +1,8 @@
-export * from "./AwsSdkSigV4Signer";
+export {
+  AwsSdkSigV4Signer,
+  AWSSDKSigV4Signer,
+  validateSigningProperties,
+} from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
+export * from "./resolveAwsSdkSigV4AConfig";
 export * from "./resolveAwsSdkSigV4Config";