aws-sdk 2.1640.0 → 2.1641.0

package/lib/core.js

@@ -20,7 +20,7 @@ AWS.util.update(AWS, {
   /**
    * @constant
    */
-  VERSION: '2.1640.0',
+  VERSION: '2.1641.0',
 
   /**
    * @api private

package/lib/credentials/cognito_identity_credentials.js

@@ -23,6 +23,15 @@ var STS = require('../../clients/sts');
  * identity providers. See {constructor} for an example on creating a credentials
  * object with proper property values.
  *
+ * DISCLAIMER: This convenience method leverages the Enhanced (simplified) Authflow. The underlying
+ * implementation calls Cognito's `getId()` and `GetCredentialsForIdentity()`.
+ * In this flow there is no way to explicitly set a session policy, resulting in
+ * STS attaching the default policy and limiting the permissions of the federated role.
+ * To be able to explicitly set a session policy, do not use this convenience method.
+ * Instead, you can use the Cognito client to call `getId()`, `GetOpenIdToken()` and then use
+ * that token with your desired session policy to call STS's `AssumeRoleWithWebIdentity()`
+ * For further reading refer to: https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html
+ *
  * ## Refreshing Credentials from Identity Service
  *
  * In addition to AWS credentials expiring after a given amount of time, the

package/lib/shared-ini/ini-loader.d.ts

@@ -24,7 +24,30 @@ export class IniLoader{
  * Load configurations from config/credentials files and cache them 
  * for later use. If no file is specified it will try to load default
  * files.
- * @returns {object} object of all profile information in the file
+ * @returns {Record<string, string>} object of all profile information in the file
  */
   loadFrom(options: LoadFileOptions): IniFileContent;
+
+  /**
+ * Load sso sessions from config/credentials files and cache them 
+ * for later use. If no file is specified it will try to load default
+ * files.
+ * @returns {Record<string, string>} object of all sso sessions information in the file
+ */
+  loadSsoSessionsFrom(options: LoadFileOptions): IniFileContent;
+
+  /**
+   * Get default file path for config/credentials files.
+   * 
+   * @param isConfig whether the file is a config file or a credentials file
+   * @returns {string} default file path
+   */
+  getDefaultFilePath(isConfig: boolean): string;
+
+  /**
+   * Get Home directory of the current user.
+   * 
+   * @returns {string} home directory path
+   * */
+   getHomeDir(): string;
 }

package/lib/shared-ini/ini-loader.js

@@ -103,9 +103,6 @@ AWS.IniLoader = AWS.util.inherit({
     return this.resolvedSsoSessions[filename];
   },
 
-  /**
-   * @api private
-   */
   getDefaultFilePath: function getDefaultFilePath(isConfig) {
     return path.join(
       this.getHomeDir(),
@@ -114,9 +111,6 @@ AWS.IniLoader = AWS.util.inherit({
     );
   },
 
-  /**
-   * @api private
-   */
   getHomeDir: function getHomeDir() {
     var env = process.env;
     var home = env.HOME ||

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aws-sdk",
   "description": "AWS SDK for JavaScript",
-  "version": "2.1640.0",
+  "version": "2.1641.0",
   "author": {
     "name": "Amazon Web Services",
     "email": "",

package/scripts/region-checker/allowlist.js

@@ -9,9 +9,9 @@ var allowlist = {
         262
     ],
     '/credentials/cognito_identity_credentials.js': [
-        78,
-        79,
-        109
+        87,
+        88,
+        118
     ],
     '/credentials/shared_ini_file_credentials.js': [
         4,