cdk-assets 4.3.3 → 4.3.4

package/bin/docker-credential-cdk-assets.js

@@ -4055,7 +4055,7 @@ var require_semver2 = __commonJS({
 // ../@aws-cdk/cloud-assembly-schema/cli-version.json
 var require_cli_version = __commonJS({
   "../@aws-cdk/cloud-assembly-schema/cli-version.json"(exports2, module2) {
-    module2.exports = { version: "2.1103.0" };
+    module2.exports = { version: "2.1104.0" };
   }
 });
 
@@ -60029,27 +60029,76 @@ var require_createBufferedReadable = __commonJS({
   }
 });
 
+// ../../node_modules/@smithy/util-stream/dist-cjs/getAwsChunkedEncodingStream.browser.js
+var require_getAwsChunkedEncodingStream_browser = __commonJS({
+  "../../node_modules/@smithy/util-stream/dist-cjs/getAwsChunkedEncodingStream.browser.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.getAwsChunkedEncodingStream = void 0;
+    var getAwsChunkedEncodingStream = /* @__PURE__ */ __name((readableStream, options) => {
+      const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
+      const checksumRequired = base64Encoder !== void 0 && bodyLengthChecker !== void 0 && checksumAlgorithmFn !== void 0 && checksumLocationName !== void 0 && streamHasher !== void 0;
+      const digest = checksumRequired ? streamHasher(checksumAlgorithmFn, readableStream) : void 0;
+      const reader = readableStream.getReader();
+      return new ReadableStream({
+        async pull(controller) {
+          const { value, done } = await reader.read();
+          if (done) {
+            controller.enqueue(`0\r
+`);
+            if (checksumRequired) {
+              const checksum = base64Encoder(await digest);
+              controller.enqueue(`${checksumLocationName}:${checksum}\r
+`);
+              controller.enqueue(`\r
+`);
+            }
+            controller.close();
+          } else {
+            controller.enqueue(`${(bodyLengthChecker(value) || 0).toString(16)}\r
+${value}\r
+`);
+          }
+        }
+      });
+    }, "getAwsChunkedEncodingStream");
+    exports2.getAwsChunkedEncodingStream = getAwsChunkedEncodingStream;
+  }
+});
+
 // ../../node_modules/@smithy/util-stream/dist-cjs/getAwsChunkedEncodingStream.js
 var require_getAwsChunkedEncodingStream = __commonJS({
   "../../node_modules/@smithy/util-stream/dist-cjs/getAwsChunkedEncodingStream.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.getAwsChunkedEncodingStream = void 0;
-    var stream_1 = require("stream");
-    var getAwsChunkedEncodingStream = /* @__PURE__ */ __name((readableStream, options) => {
+    exports2.getAwsChunkedEncodingStream = getAwsChunkedEncodingStream;
+    var node_stream_1 = require("node:stream");
+    var getAwsChunkedEncodingStream_browser_1 = require_getAwsChunkedEncodingStream_browser();
+    var stream_type_check_1 = require_stream_type_check();
+    function getAwsChunkedEncodingStream(stream2, options) {
+      const readable = stream2;
+      const readableStream = stream2;
+      if ((0, stream_type_check_1.isReadableStream)(readableStream)) {
+        return (0, getAwsChunkedEncodingStream_browser_1.getAwsChunkedEncodingStream)(readableStream, options);
+      }
       const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
       const checksumRequired = base64Encoder !== void 0 && checksumAlgorithmFn !== void 0 && checksumLocationName !== void 0 && streamHasher !== void 0;
-      const digest = checksumRequired ? streamHasher(checksumAlgorithmFn, readableStream) : void 0;
-      const awsChunkedEncodingStream = new stream_1.Readable({ read: /* @__PURE__ */ __name(() => {
-      }, "read") });
-      readableStream.on("data", (data2) => {
+      const digest = checksumRequired ? streamHasher(checksumAlgorithmFn, readable) : void 0;
+      const awsChunkedEncodingStream = new node_stream_1.Readable({
+        read: /* @__PURE__ */ __name(() => {
+        }, "read")
+      });
+      readable.on("data", (data2) => {
         const length = bodyLengthChecker(data2) || 0;
+        if (length === 0) {
+          return;
+        }
         awsChunkedEncodingStream.push(`${length.toString(16)}\r
 `);
         awsChunkedEncodingStream.push(data2);
         awsChunkedEncodingStream.push("\r\n");
       });
-      readableStream.on("end", async () => {
+      readable.on("end", async () => {
         awsChunkedEncodingStream.push(`0\r
 `);
         if (checksumRequired) {
@@ -60062,8 +60111,8 @@ var require_getAwsChunkedEncodingStream = __commonJS({
         awsChunkedEncodingStream.push(null);
       });
       return awsChunkedEncodingStream;
-    }, "getAwsChunkedEncodingStream");
-    exports2.getAwsChunkedEncodingStream = getAwsChunkedEncodingStream;
+    }
+    __name(getAwsChunkedEncodingStream, "getAwsChunkedEncodingStream");
   }
 });
 
@@ -61387,6 +61436,18 @@ var require_dist_cjs17 = __commonJS({
         return utilUtf8.toUtf8(this);
       }
     };
+    Object.defineProperty(exports2, "isBlob", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return streamTypeCheck.isBlob;
+      }, "get")
+    });
+    Object.defineProperty(exports2, "isReadableStream", {
+      enumerable: true,
+      get: /* @__PURE__ */ __name(function() {
+        return streamTypeCheck.isReadableStream;
+      }, "get")
+    });
     exports2.Uint8ArrayBlobAdapter = Uint8ArrayBlobAdapter2;
     Object.keys(ChecksumStream).forEach(function(k4) {
       if (k4 !== "default" && !Object.prototype.hasOwnProperty.call(exports2, k4)) Object.defineProperty(exports2, k4, {
@@ -61444,14 +61505,6 @@ var require_dist_cjs17 = __commonJS({
         }, "get")
       });
     });
-    Object.keys(streamTypeCheck).forEach(function(k4) {
-      if (k4 !== "default" && !Object.prototype.hasOwnProperty.call(exports2, k4)) Object.defineProperty(exports2, k4, {
-        enumerable: true,
-        get: /* @__PURE__ */ __name(function() {
-          return streamTypeCheck[k4];
-        }, "get")
-      });
-    });
   }
 });
 
@@ -61831,11 +61884,14 @@ function member(memberSchema, memberName) {
   const internalCtorAccess = NormalizedSchema;
   return new internalCtorAccess(memberSchema, memberName);
 }
-var NormalizedSchema, isMemberSchema, isStaticSchema;
+var anno, NormalizedSchema, isMemberSchema, isStaticSchema;
 var init_NormalizedSchema = __esm({
   "../../node_modules/@smithy/core/dist-es/submodules/schema/schemas/NormalizedSchema.js"() {
     init_deref();
     init_translateTraits();
+    anno = {
+      it: /* @__PURE__ */ Symbol.for("@smithy/nor-struct-it")
+    };
     NormalizedSchema = class _NormalizedSchema {
       static {
         __name(this, "NormalizedSchema");
@@ -61943,7 +61999,12 @@ var init_NormalizedSchema = __esm({
       }
       isStructSchema() {
         const sc = this.getSchema();
-        return sc[0] === 3 || sc[0] === -3;
+        const id = sc[0];
+        return id === 3 || id === -3 || id === 4;
+      }
+      isUnionSchema() {
+        const sc = this.getSchema();
+        return sc[0] === 4;
       }
       isBlobSchema() {
         const sc = this.getSchema();
@@ -61979,9 +62040,7 @@ var init_NormalizedSchema = __esm({
         return !!streaming || this.getSchema() === 42;
       }
       isIdempotencyToken() {
-        const match2 = /* @__PURE__ */ __name((traits2) => (traits2 & 4) === 4 || !!traits2?.idempotencyToken, "match");
-        const { normalizedTraits, traits, memberTraits } = this;
-        return match2(normalizedTraits) || match2(traits) || match2(memberTraits);
+        return !!this.getMergedTraits().idempotencyToken;
       }
       getMergedTraits() {
         return this.normalizedTraits ?? (this.normalizedTraits = {
@@ -62053,9 +62112,19 @@ var init_NormalizedSchema = __esm({
           throw new Error("@smithy/core/schema - cannot iterate non-struct schema.");
         }
         const struct2 = this.getSchema();
-        for (let i4 = 0; i4 < struct2[4].length; ++i4) {
-          yield [struct2[4][i4], member([struct2[5][i4], 0], struct2[4][i4])];
+        const z2 = struct2[4].length;
+        let it = struct2[anno.it];
+        if (it && z2 === it.length) {
+          yield* it;
+          return;
+        }
+        it = Array(z2);
+        for (let i4 = 0; i4 < z2; ++i4) {
+          const k4 = struct2[4][i4];
+          const v4 = member([struct2[5][i4], 0], k4);
+          yield it[i4] = [k4, v4];
         }
+        struct2[anno.it] = it;
       }
     };
     __name(member, "member");
@@ -63750,6 +63819,11 @@ var init_EventStreamSerde = __esm({
                   [unionMember]: out
                 };
               }
+              if (body.byteLength === 0) {
+                return {
+                  [unionMember]: {}
+                };
+              }
             }
             return {
               [unionMember]: await this.deserializer.read(eventStreamSchema, body)
@@ -63931,6 +64005,9 @@ var init_HttpProtocol = __esm({
         }
       }
       setHostPrefix(request, operationSchema, input) {
+        if (this.serdeContext?.disableHostPrefix) {
+          return;
+        }
         const inputNs = NormalizedSchema.of(operationSchema.input);
         const opTraits = translateTraits(operationSchema.traits ?? {});
         if (opTraits.endpoint) {
@@ -64061,6 +64138,11 @@ var init_HttpBindingProtocol = __esm({
           const memberTraits = memberNs.getMergedTraits() ?? {};
           const inputMemberValue = input[memberName];
           if (inputMemberValue == null && !memberNs.isIdempotencyToken()) {
+            if (memberTraits.httpLabel) {
+              if (request.path.includes(`{${memberName}+}`) || request.path.includes(`{${memberName}}`)) {
+                throw new Error(`No value provided for input HTTP label: ${memberName}.`);
+              }
+            }
             continue;
           }
           if (memberTraits.httpPayload) {
@@ -67815,6 +67897,7 @@ var init_CborCodec = __esm({
     init_protocols();
     init_schema4();
     init_serde();
+    init_serde();
     import_util_base643 = __toESM(require_dist_cjs11());
     init_cbor();
     init_parseCborBody();
@@ -67894,10 +67977,23 @@ var init_CborCodec = __esm({
                 newObject[key] = value;
               }
             }
+            const isUnion = ns.isUnionSchema();
+            if (isUnion && Array.isArray(sourceObject.$unknown)) {
+              const [k4, v4] = sourceObject.$unknown;
+              newObject[k4] = v4;
+            } else if (typeof sourceObject.__type === "string") {
+              for (const [k4, v4] of Object.entries(sourceObject)) {
+                if (!(k4 in newObject)) {
+                  newObject[k4] = this.serialize(15, v4);
+                }
+              }
+            }
           } else if (ns.isDocumentSchema()) {
             for (const key of Object.keys(sourceObject)) {
               newObject[key] = this.serialize(ns.getValueSchema(), sourceObject[key]);
             }
+          } else if (ns.isBigDecimalSchema()) {
+            return sourceObject;
           }
           return newObject;
         }
@@ -67973,12 +68069,31 @@ var init_CborCodec = __esm({
               }
             }
           } else if (ns.isStructSchema()) {
+            const isUnion = ns.isUnionSchema();
+            let keys;
+            if (isUnion) {
+              keys = new Set(Object.keys(value).filter((k4) => k4 !== "__type"));
+            }
             for (const [key, memberSchema] of ns.structIterator()) {
-              const v4 = this.readValue(memberSchema, value[key]);
-              if (v4 != null) {
-                newObject[key] = v4;
+              if (isUnion) {
+                keys.delete(key);
+              }
+              if (value[key] != null) {
+                newObject[key] = this.readValue(memberSchema, value[key]);
               }
             }
+            if (isUnion && keys?.size === 1 && Object.keys(newObject).length === 0) {
+              const k4 = keys.values().next().value;
+              newObject.$unknown = [k4, value[k4]];
+            } else if (typeof value.__type === "string") {
+              for (const [k4, v4] of Object.entries(value)) {
+                if (!(k4 in newObject)) {
+                  newObject[k4] = v4;
+                }
+              }
+            }
+          } else if (value instanceof NumericValue) {
+            return value;
           }
           return newObject;
         } else {
@@ -73975,9 +74090,9 @@ var require_dist_cjs38 = __commonJS({
   }
 });
 
-// ../../node_modules/@smithy/credential-provider-imds/dist-cjs/index.js
+// ../../node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js
 var require_dist_cjs39 = __commonJS({
-  "../../node_modules/@smithy/credential-provider-imds/dist-cjs/index.js"(exports2) {
+  "../../node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js"(exports2) {
     "use strict";
     var propertyProvider = require_dist_cjs23();
     var url = require("url");
@@ -74875,8 +74990,358 @@ var require_dist_cjs43 = __commonJS({
   }
 });
 
-// ../../node_modules/@smithy/util-defaults-mode-node/dist-cjs/index.js
+// ../../node_modules/@smithy/credential-provider-imds/dist-cjs/index.js
 var require_dist_cjs44 = __commonJS({
+  "../../node_modules/@smithy/credential-provider-imds/dist-cjs/index.js"(exports2) {
+    "use strict";
+    var propertyProvider = require_dist_cjs23();
+    var url = require("url");
+    var buffer = require("buffer");
+    var http = require("http");
+    var nodeConfigProvider = require_dist_cjs33();
+    var urlParser = require_dist_cjs21();
+    function httpRequest(options) {
+      return new Promise((resolve6, reject) => {
+        const req = http.request({
+          method: "GET",
+          ...options,
+          hostname: options.hostname?.replace(/^\[(.+)\]$/, "$1")
+        });
+        req.on("error", (err) => {
+          reject(Object.assign(new propertyProvider.ProviderError("Unable to connect to instance metadata service"), err));
+          req.destroy();
+        });
+        req.on("timeout", () => {
+          reject(new propertyProvider.ProviderError("TimeoutError from instance metadata service"));
+          req.destroy();
+        });
+        req.on("response", (res) => {
+          const { statusCode = 400 } = res;
+          if (statusCode < 200 || 300 <= statusCode) {
+            reject(Object.assign(new propertyProvider.ProviderError("Error response received from instance metadata service"), { statusCode }));
+            req.destroy();
+          }
+          const chunks = [];
+          res.on("data", (chunk) => {
+            chunks.push(chunk);
+          });
+          res.on("end", () => {
+            resolve6(buffer.Buffer.concat(chunks));
+            req.destroy();
+          });
+        });
+        req.end();
+      });
+    }
+    __name(httpRequest, "httpRequest");
+    var isImdsCredentials = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string", "isImdsCredentials");
+    var fromImdsCredentials = /* @__PURE__ */ __name((creds) => ({
+      accessKeyId: creds.AccessKeyId,
+      secretAccessKey: creds.SecretAccessKey,
+      sessionToken: creds.Token,
+      expiration: new Date(creds.Expiration),
+      ...creds.AccountId && { accountId: creds.AccountId }
+    }), "fromImdsCredentials");
+    var DEFAULT_TIMEOUT = 1e3;
+    var DEFAULT_MAX_RETRIES = 0;
+    var providerConfigFromInit = /* @__PURE__ */ __name(({ maxRetries = DEFAULT_MAX_RETRIES, timeout = DEFAULT_TIMEOUT }) => ({ maxRetries, timeout }), "providerConfigFromInit");
+    var retry = /* @__PURE__ */ __name((toRetry, maxRetries) => {
+      let promise = toRetry();
+      for (let i4 = 0; i4 < maxRetries; i4++) {
+        promise = promise.catch(toRetry);
+      }
+      return promise;
+    }, "retry");
+    var ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+    var ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+    var ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+    var fromContainerMetadata = /* @__PURE__ */ __name((init = {}) => {
+      const { timeout, maxRetries } = providerConfigFromInit(init);
+      return () => retry(async () => {
+        const requestOptions = await getCmdsUri({ logger: init.logger });
+        const credsResponse = JSON.parse(await requestFromEcsImds(timeout, requestOptions));
+        if (!isImdsCredentials(credsResponse)) {
+          throw new propertyProvider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+            logger: init.logger
+          });
+        }
+        return fromImdsCredentials(credsResponse);
+      }, maxRetries);
+    }, "fromContainerMetadata");
+    var requestFromEcsImds = /* @__PURE__ */ __name(async (timeout, options) => {
+      if (process.env[ENV_CMDS_AUTH_TOKEN]) {
+        options.headers = {
+          ...options.headers,
+          Authorization: process.env[ENV_CMDS_AUTH_TOKEN]
+        };
+      }
+      const buffer2 = await httpRequest({
+        ...options,
+        timeout
+      });
+      return buffer2.toString();
+    }, "requestFromEcsImds");
+    var CMDS_IP = "169.254.170.2";
+    var GREENGRASS_HOSTS = {
+      localhost: true,
+      "127.0.0.1": true
+    };
+    var GREENGRASS_PROTOCOLS = {
+      "http:": true,
+      "https:": true
+    };
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger2 }) => {
+      if (process.env[ENV_CMDS_RELATIVE_URI]) {
+        return {
+          hostname: CMDS_IP,
+          path: process.env[ENV_CMDS_RELATIVE_URI]
+        };
+      }
+      if (process.env[ENV_CMDS_FULL_URI]) {
+        const parsed = url.parse(process.env[ENV_CMDS_FULL_URI]);
+        if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
+          throw new propertyProvider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
+            tryNextLink: false,
+            logger: logger2
+          });
+        }
+        if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
+          throw new propertyProvider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
+            tryNextLink: false,
+            logger: logger2
+          });
+        }
+        return {
+          ...parsed,
+          port: parsed.port ? parseInt(parsed.port, 10) : void 0
+        };
+      }
+      throw new propertyProvider.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
+        tryNextLink: false,
+        logger: logger2
+      });
+    }, "getCmdsUri");
+    var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends propertyProvider.CredentialsProviderError {
+      static {
+        __name(this, "InstanceMetadataV1FallbackError");
+      }
+      tryNextLink;
+      name = "InstanceMetadataV1FallbackError";
+      constructor(message, tryNextLink = true) {
+        super(message, tryNextLink);
+        this.tryNextLink = tryNextLink;
+        Object.setPrototypeOf(this, _InstanceMetadataV1FallbackError.prototype);
+      }
+    };
+    exports2.Endpoint = void 0;
+    (function(Endpoint) {
+      Endpoint["IPv4"] = "http://169.254.169.254";
+      Endpoint["IPv6"] = "http://[fd00:ec2::254]";
+    })(exports2.Endpoint || (exports2.Endpoint = {}));
+    var ENV_ENDPOINT_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT";
+    var CONFIG_ENDPOINT_NAME = "ec2_metadata_service_endpoint";
+    var ENDPOINT_CONFIG_OPTIONS = {
+      environmentVariableSelector: /* @__PURE__ */ __name((env) => env[ENV_ENDPOINT_NAME], "environmentVariableSelector"),
+      configFileSelector: /* @__PURE__ */ __name((profile) => profile[CONFIG_ENDPOINT_NAME], "configFileSelector"),
+      default: void 0
+    };
+    var EndpointMode;
+    (function(EndpointMode2) {
+      EndpointMode2["IPv4"] = "IPv4";
+      EndpointMode2["IPv6"] = "IPv6";
+    })(EndpointMode || (EndpointMode = {}));
+    var ENV_ENDPOINT_MODE_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE";
+    var CONFIG_ENDPOINT_MODE_NAME = "ec2_metadata_service_endpoint_mode";
+    var ENDPOINT_MODE_CONFIG_OPTIONS = {
+      environmentVariableSelector: /* @__PURE__ */ __name((env) => env[ENV_ENDPOINT_MODE_NAME], "environmentVariableSelector"),
+      configFileSelector: /* @__PURE__ */ __name((profile) => profile[CONFIG_ENDPOINT_MODE_NAME], "configFileSelector"),
+      default: EndpointMode.IPv4
+    };
+    var getInstanceMetadataEndpoint = /* @__PURE__ */ __name(async () => urlParser.parseUrl(await getFromEndpointConfig() || await getFromEndpointModeConfig()), "getInstanceMetadataEndpoint");
+    var getFromEndpointConfig = /* @__PURE__ */ __name(async () => nodeConfigProvider.loadConfig(ENDPOINT_CONFIG_OPTIONS)(), "getFromEndpointConfig");
+    var getFromEndpointModeConfig = /* @__PURE__ */ __name(async () => {
+      const endpointMode = await nodeConfigProvider.loadConfig(ENDPOINT_MODE_CONFIG_OPTIONS)();
+      switch (endpointMode) {
+        case EndpointMode.IPv4:
+          return exports2.Endpoint.IPv4;
+        case EndpointMode.IPv6:
+          return exports2.Endpoint.IPv6;
+        default:
+          throw new Error(`Unsupported endpoint mode: ${endpointMode}. Select from ${Object.values(EndpointMode)}`);
+      }
+    }, "getFromEndpointModeConfig");
+    var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
+    var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
+    var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger2) => {
+      const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
+      const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
+      logger2.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
+      const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
+      return {
+        ...credentials,
+        ...originalExpiration ? { originalExpiration } : {},
+        expiration: newExpiration
+      };
+    }, "getExtendedInstanceMetadataCredentials");
+    var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
+      const logger2 = options?.logger || console;
+      let pastCredentials;
+      return async () => {
+        let credentials;
+        try {
+          credentials = await provider();
+          if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger2);
+          }
+        } catch (e4) {
+          if (pastCredentials) {
+            logger2.warn("Credential renew failed: ", e4);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger2);
+          } else {
+            throw e4;
+          }
+        }
+        pastCredentials = credentials;
+        return credentials;
+      };
+    }, "staticStabilityProvider");
+    var IMDS_PATH = "/latest/meta-data/iam/security-credentials/";
+    var IMDS_TOKEN_PATH = "/latest/api/token";
+    var AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED";
+    var PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled";
+    var X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token";
+    var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
+    var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
+      let disableFetchToken = false;
+      const { logger: logger2, profile } = init;
+      const { timeout, maxRetries } = providerConfigFromInit(init);
+      const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
+        const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
+        if (isImdsV1Fallback) {
+          let fallbackBlockedFromProfile = false;
+          let fallbackBlockedFromProcessEnv = false;
+          const configValue = await nodeConfigProvider.loadConfig({
+            environmentVariableSelector: /* @__PURE__ */ __name((env) => {
+              const envValue = env[AWS_EC2_METADATA_V1_DISABLED];
+              fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
+              if (envValue === void 0) {
+                throw new propertyProvider.CredentialsProviderError(`${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`, { logger: init.logger });
+              }
+              return fallbackBlockedFromProcessEnv;
+            }, "environmentVariableSelector"),
+            configFileSelector: /* @__PURE__ */ __name((profile2) => {
+              const profileValue = profile2[PROFILE_AWS_EC2_METADATA_V1_DISABLED];
+              fallbackBlockedFromProfile = !!profileValue && profileValue !== "false";
+              return fallbackBlockedFromProfile;
+            }, "configFileSelector"),
+            default: false
+          }, {
+            profile
+          })();
+          if (init.ec2MetadataV1Disabled || configValue) {
+            const causes = [];
+            if (init.ec2MetadataV1Disabled)
+              causes.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");
+            if (fallbackBlockedFromProfile)
+              causes.push(`config file profile (${PROFILE_AWS_EC2_METADATA_V1_DISABLED})`);
+            if (fallbackBlockedFromProcessEnv)
+              causes.push(`process environment variable (${AWS_EC2_METADATA_V1_DISABLED})`);
+            throw new InstanceMetadataV1FallbackError(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${causes.join(", ")}].`);
+          }
+        }
+        const imdsProfile = (await retry(async () => {
+          let profile2;
+          try {
+            profile2 = await getProfile(options);
+          } catch (err) {
+            if (err.statusCode === 401) {
+              disableFetchToken = false;
+            }
+            throw err;
+          }
+          return profile2;
+        }, maxRetries2)).trim();
+        return retry(async () => {
+          let creds;
+          try {
+            creds = await getCredentialsFromProfile(imdsProfile, options, init);
+          } catch (err) {
+            if (err.statusCode === 401) {
+              disableFetchToken = false;
+            }
+            throw err;
+          }
+          return creds;
+        }, maxRetries2);
+      }, "getCredentials");
+      return async () => {
+        const endpoint = await getInstanceMetadataEndpoint();
+        if (disableFetchToken) {
+          logger2?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          return getCredentials(maxRetries, { ...endpoint, timeout });
+        } else {
+          let token;
+          try {
+            token = (await getMetadataToken({ ...endpoint, timeout })).toString();
+          } catch (error2) {
+            if (error2?.statusCode === 400) {
+              throw Object.assign(error2, {
+                message: "EC2 Metadata token request returned error"
+              });
+            } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
+              disableFetchToken = true;
+            }
+            logger2?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            return getCredentials(maxRetries, { ...endpoint, timeout });
+          }
+          return getCredentials(maxRetries, {
+            ...endpoint,
+            headers: {
+              [X_AWS_EC2_METADATA_TOKEN]: token
+            },
+            timeout
+          });
+        }
+      };
+    }, "getInstanceMetadataProvider");
+    var getMetadataToken = /* @__PURE__ */ __name(async (options) => httpRequest({
+      ...options,
+      path: IMDS_TOKEN_PATH,
+      method: "PUT",
+      headers: {
+        "x-aws-ec2-metadata-token-ttl-seconds": "21600"
+      }
+    }), "getMetadataToken");
+    var getProfile = /* @__PURE__ */ __name(async (options) => (await httpRequest({ ...options, path: IMDS_PATH })).toString(), "getProfile");
+    var getCredentialsFromProfile = /* @__PURE__ */ __name(async (profile, options, init) => {
+      const credentialsResponse = JSON.parse((await httpRequest({
+        ...options,
+        path: IMDS_PATH + profile
+      })).toString());
+      if (!isImdsCredentials(credentialsResponse)) {
+        throw new propertyProvider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+          logger: init.logger
+        });
+      }
+      return fromImdsCredentials(credentialsResponse);
+    }, "getCredentialsFromProfile");
+    exports2.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES;
+    exports2.DEFAULT_TIMEOUT = DEFAULT_TIMEOUT;
+    exports2.ENV_CMDS_AUTH_TOKEN = ENV_CMDS_AUTH_TOKEN;
+    exports2.ENV_CMDS_FULL_URI = ENV_CMDS_FULL_URI;
+    exports2.ENV_CMDS_RELATIVE_URI = ENV_CMDS_RELATIVE_URI;
+    exports2.fromContainerMetadata = fromContainerMetadata;
+    exports2.fromInstanceMetadata = fromInstanceMetadata;
+    exports2.getInstanceMetadataEndpoint = getInstanceMetadataEndpoint;
+    exports2.httpRequest = httpRequest;
+    exports2.providerConfigFromInit = providerConfigFromInit;
+  }
+});
+
+// ../../node_modules/@smithy/util-defaults-mode-node/dist-cjs/index.js
+var require_dist_cjs45 = __commonJS({
   "../../node_modules/@smithy/util-defaults-mode-node/dist-cjs/index.js"(exports2) {
     "use strict";
     var configResolver = require_dist_cjs30();
@@ -74937,7 +75402,7 @@ var require_dist_cjs44 = __commonJS({
       }
       if (!process.env[ENV_IMDS_DISABLED]) {
         try {
-          const { getInstanceMetadataEndpoint, httpRequest } = await Promise.resolve().then(() => __toESM(require_dist_cjs39()));
+          const { getInstanceMetadataEndpoint, httpRequest } = await Promise.resolve().then(() => __toESM(require_dist_cjs44()));
           const endpoint = await getInstanceMetadataEndpoint();
           return (await httpRequest({ ...endpoint, path: IMDS_REGION_PATH })).toString();
         } catch (e4) {
@@ -75066,7 +75531,7 @@ var init_runtimeConfig = __esm({
     import_node_http_handler = __toESM(require_dist_cjs14());
     import_smithy_client9 = __toESM(require_dist_cjs26());
     import_util_body_length_node = __toESM(require_dist_cjs43());
-    import_util_defaults_mode_node = __toESM(require_dist_cjs44());
+    import_util_defaults_mode_node = __toESM(require_dist_cjs45());
     import_util_retry = __toESM(require_dist_cjs36());
     init_runtimeConfig_shared();
     getRuntimeConfig2 = /* @__PURE__ */ __name((config) => {
@@ -75132,7 +75597,7 @@ var require_stsRegionDefaultResolver = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/region-config-resolver/dist-cjs/index.js
-var require_dist_cjs45 = __commonJS({
+var require_dist_cjs46 = __commonJS({
   "../../node_modules/@aws-sdk/region-config-resolver/dist-cjs/index.js"(exports2) {
     "use strict";
     var stsRegionDefaultResolver2 = require_stsRegionDefaultResolver();
@@ -75243,7 +75708,7 @@ var init_httpAuthExtensionConfiguration = __esm({
 var import_region_config_resolver, import_protocol_http12, import_smithy_client10, resolveRuntimeExtensions;
 var init_runtimeExtensions = __esm({
   "../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/runtimeExtensions.js"() {
-    import_region_config_resolver = __toESM(require_dist_cjs45());
+    import_region_config_resolver = __toESM(require_dist_cjs46());
     import_protocol_http12 = __toESM(require_dist_cjs2());
     import_smithy_client10 = __toESM(require_dist_cjs26());
     init_httpAuthExtensionConfiguration();
@@ -75803,7 +76268,7 @@ var init_sso_oidc = __esm({
 });
 
 // ../../node_modules/@aws-sdk/token-providers/dist-cjs/index.js
-var require_dist_cjs46 = __commonJS({
+var require_dist_cjs47 = __commonJS({
   "../../node_modules/@aws-sdk/token-providers/dist-cjs/index.js"(exports2) {
     "use strict";
     var client = (init_client(), __toCommonJS(client_exports));
@@ -76258,7 +76723,7 @@ var require_runtimeConfig = __commonJS({
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -76298,7 +76763,7 @@ var require_runtimeConfig = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-sso/dist-cjs/index.js
-var require_dist_cjs47 = __commonJS({
+var require_dist_cjs48 = __commonJS({
   "../../node_modules/@aws-sdk/client-sso/dist-cjs/index.js"(exports2) {
     "use strict";
     var middlewareHostHeader = require_dist_cjs3();
@@ -76314,7 +76779,7 @@ var require_dist_cjs47 = __commonJS({
     var smithyClient = require_dist_cjs26();
     var httpAuthSchemeProvider = require_httpAuthSchemeProvider2();
     var runtimeConfig = require_runtimeConfig();
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var protocolHttp = require_dist_cjs2();
     var resolveClientEndpointParameters4 = /* @__PURE__ */ __name((options) => {
       return Object.assign(options, {
@@ -76727,7 +77192,7 @@ var require_dist_cjs47 = __commonJS({
 var require_loadSso_CVy8iqsZ = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-sso/dist-cjs/loadSso-CVy8iqsZ.js"(exports2) {
     "use strict";
-    var clientSso = require_dist_cjs47();
+    var clientSso = require_dist_cjs48();
     Object.defineProperty(exports2, "GetRoleCredentialsCommand", {
       enumerable: true,
       get: /* @__PURE__ */ __name(function() {
@@ -76744,13 +77209,13 @@ var require_loadSso_CVy8iqsZ = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-sso/dist-cjs/index.js
-var require_dist_cjs48 = __commonJS({
+var require_dist_cjs49 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-sso/dist-cjs/index.js"(exports2) {
     "use strict";
     var propertyProvider = require_dist_cjs23();
     var sharedIniFileLoader = require_dist_cjs32();
     var client = (init_client(), __toCommonJS(client_exports));
-    var tokenProviders = require_dist_cjs46();
+    var tokenProviders = require_dist_cjs47();
     var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
     var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
     var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger2 }) => {
@@ -77119,7 +77584,7 @@ var init_runtimeConfig2 = __esm({
     import_node_http_handler2 = __toESM(require_dist_cjs14());
     import_smithy_client16 = __toESM(require_dist_cjs26());
     import_util_body_length_node2 = __toESM(require_dist_cjs43());
-    import_util_defaults_mode_node2 = __toESM(require_dist_cjs44());
+    import_util_defaults_mode_node2 = __toESM(require_dist_cjs45());
     import_util_retry2 = __toESM(require_dist_cjs36());
     init_runtimeConfig_shared2();
     getRuntimeConfig4 = /* @__PURE__ */ __name((config) => {
@@ -77205,7 +77670,7 @@ var init_httpAuthExtensionConfiguration2 = __esm({
 var import_region_config_resolver2, import_protocol_http13, import_smithy_client17, resolveRuntimeExtensions2;
 var init_runtimeExtensions2 = __esm({
   "../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/runtimeExtensions.js"() {
-    import_region_config_resolver2 = __toESM(require_dist_cjs45());
+    import_region_config_resolver2 = __toESM(require_dist_cjs46());
     import_protocol_http13 = __toESM(require_dist_cjs2());
     import_smithy_client17 = __toESM(require_dist_cjs26());
     init_httpAuthExtensionConfiguration2();
@@ -77588,7 +78053,7 @@ var init_signin = __esm({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js
-var require_dist_cjs49 = __commonJS({
+var require_dist_cjs50 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js"(exports2) {
     "use strict";
     var client = (init_client(), __toCommonJS(client_exports));
@@ -78086,7 +78551,7 @@ var init_runtimeConfig3 = __esm({
     import_node_http_handler3 = __toESM(require_dist_cjs14());
     import_smithy_client23 = __toESM(require_dist_cjs26());
     import_util_body_length_node3 = __toESM(require_dist_cjs43());
-    import_util_defaults_mode_node3 = __toESM(require_dist_cjs44());
+    import_util_defaults_mode_node3 = __toESM(require_dist_cjs45());
     import_util_retry3 = __toESM(require_dist_cjs36());
     init_runtimeConfig_shared3();
     getRuntimeConfig6 = /* @__PURE__ */ __name((config) => {
@@ -78184,7 +78649,7 @@ var init_httpAuthExtensionConfiguration3 = __esm({
 var import_region_config_resolver3, import_protocol_http14, import_smithy_client24, resolveRuntimeExtensions3;
 var init_runtimeExtensions3 = __esm({
   "../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeExtensions.js"() {
-    import_region_config_resolver3 = __toESM(require_dist_cjs45());
+    import_region_config_resolver3 = __toESM(require_dist_cjs46());
     import_protocol_http14 = __toESM(require_dist_cjs2());
     import_smithy_client24 = __toESM(require_dist_cjs26());
     init_httpAuthExtensionConfiguration3();
@@ -78648,7 +79113,7 @@ var import_region_config_resolver4, getAccountIdFromAssumedRoleUser, resolveRegi
 var init_defaultStsRoleAssumers = __esm({
   "../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js"() {
     init_client();
-    import_region_config_resolver4 = __toESM(require_dist_cjs45());
+    import_region_config_resolver4 = __toESM(require_dist_cjs46());
     init_AssumeRoleCommand();
     init_AssumeRoleWithWebIdentityCommand();
     getAccountIdFromAssumedRoleUser = /* @__PURE__ */ __name((assumedRoleUser) => {
@@ -78836,7 +79301,7 @@ var init_sts = __esm({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js
-var require_dist_cjs50 = __commonJS({
+var require_dist_cjs51 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js"(exports2) {
     "use strict";
     var sharedIniFileLoader = require_dist_cjs32();
@@ -79023,7 +79488,7 @@ var require_fromTokenFile = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/index.js
-var require_dist_cjs51 = __commonJS({
+var require_dist_cjs52 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/index.js"(exports2) {
     "use strict";
     var fromTokenFile = require_fromTokenFile();
@@ -79048,13 +79513,13 @@ var require_dist_cjs51 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js
-var require_dist_cjs52 = __commonJS({
+var require_dist_cjs53 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js"(exports2) {
     "use strict";
     var sharedIniFileLoader = require_dist_cjs32();
     var propertyProvider = require_dist_cjs23();
     var client = (init_client(), __toCommonJS(client_exports));
-    var credentialProviderLogin = require_dist_cjs49();
+    var credentialProviderLogin = require_dist_cjs50();
     var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger2) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
@@ -79157,12 +79622,12 @@ var require_dist_cjs52 = __commonJS({
       return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC");
     }, "resolveLoginCredentials");
     var isProcessProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string", "isProcessProfile");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (options, profile) => Promise.resolve().then(() => __toESM(require_dist_cjs50())).then(({ fromProcess }) => fromProcess({
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (options, profile) => Promise.resolve().then(() => __toESM(require_dist_cjs51())).then(({ fromProcess }) => fromProcess({
       ...options,
       profile
     })().then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v"))), "resolveProcessCredentials");
     var resolveSsoCredentials = /* @__PURE__ */ __name(async (profile, profileData, options = {}, callerClientConfig) => {
-      const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs48()));
+      const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs49()));
       return fromSSO({
         profile,
         logger: options.logger,
@@ -79192,7 +79657,7 @@ var require_dist_cjs52 = __commonJS({
       return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n");
     }, "resolveStaticCredentials");
     var isWebIdentityProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, "isWebIdentityProfile");
-    var resolveWebIdentityCredentials = /* @__PURE__ */ __name(async (profile, options, callerClientConfig) => Promise.resolve().then(() => __toESM(require_dist_cjs51())).then(({ fromTokenFile }) => fromTokenFile({
+    var resolveWebIdentityCredentials = /* @__PURE__ */ __name(async (profile, options, callerClientConfig) => Promise.resolve().then(() => __toESM(require_dist_cjs52())).then(({ fromTokenFile }) => fromTokenFile({
       webIdentityTokenFile: profile.web_identity_token_file,
       roleArn: profile.role_arn,
       roleSessionName: profile.role_session_name,
@@ -79239,7 +79704,7 @@ var require_dist_cjs52 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-node/dist-cjs/index.js
-var require_dist_cjs53 = __commonJS({
+var require_dist_cjs54 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-node/dist-cjs/index.js"(exports2) {
     "use strict";
     var credentialProviderEnv = require_dist_cjs38();
@@ -79348,22 +79813,22 @@ var require_dist_cjs53 = __commonJS({
         if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
           throw new propertyProvider.CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).", { logger: init.logger });
         }
-        const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs48()));
+        const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs49()));
         return fromSSO(init)(awsIdentityProperties);
       },
       async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");
-        const { fromIni } = await Promise.resolve().then(() => __toESM(require_dist_cjs52()));
+        const { fromIni } = await Promise.resolve().then(() => __toESM(require_dist_cjs53()));
         return fromIni(init)(awsIdentityProperties);
       },
       async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");
-        const { fromProcess } = await Promise.resolve().then(() => __toESM(require_dist_cjs50()));
+        const { fromProcess } = await Promise.resolve().then(() => __toESM(require_dist_cjs51()));
         return fromProcess(init)(awsIdentityProperties);
       },
       async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");
-        const { fromTokenFile } = await Promise.resolve().then(() => __toESM(require_dist_cjs51()));
+        const { fromTokenFile } = await Promise.resolve().then(() => __toESM(require_dist_cjs52()));
         return fromTokenFile(init)(awsIdentityProperties);
       },
       async () => {
@@ -79514,7 +79979,7 @@ var require_runtimeConfig2 = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var package_json_1 = tslib_1.__importDefault(require_package());
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var credential_provider_node_1 = require_dist_cjs53();
+    var credential_provider_node_1 = require_dist_cjs54();
     var util_user_agent_node_1 = require_dist_cjs41();
     var config_resolver_1 = require_dist_cjs30();
     var hash_node_1 = require_dist_cjs42();
@@ -79523,7 +79988,7 @@ var require_runtimeConfig2 = __commonJS({
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared2();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -79564,7 +80029,7 @@ var require_runtimeConfig2 = __commonJS({
 });
 
 // ../../node_modules/@smithy/util-waiter/dist-cjs/index.js
-var require_dist_cjs54 = __commonJS({
+var require_dist_cjs55 = __commonJS({
   "../../node_modules/@smithy/util-waiter/dist-cjs/index.js"(exports2) {
     "use strict";
     var getCircularReplacer = /* @__PURE__ */ __name(() => {
@@ -79735,7 +80200,7 @@ var require_dist_cjs54 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-ecr/dist-cjs/index.js
-var require_dist_cjs55 = __commonJS({
+var require_dist_cjs56 = __commonJS({
   "../../node_modules/@aws-sdk/client-ecr/dist-cjs/index.js"(exports2) {
     "use strict";
     var middlewareHostHeader = require_dist_cjs3();
@@ -79751,9 +80216,9 @@ var require_dist_cjs55 = __commonJS({
     var smithyClient = require_dist_cjs26();
     var httpAuthSchemeProvider = require_httpAuthSchemeProvider();
     var runtimeConfig = require_runtimeConfig2();
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var protocolHttp = require_dist_cjs2();
-    var utilWaiter = require_dist_cjs54();
+    var utilWaiter = require_dist_cjs55();
     var resolveClientEndpointParameters4 = /* @__PURE__ */ __name((options) => {
       return Object.assign(options, {
         useDualstackEndpoint: options.useDualstackEndpoint ?? false,
@@ -83651,7 +84116,7 @@ var require_dist_cjs55 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-expect-continue/dist-cjs/index.js
-var require_dist_cjs56 = __commonJS({
+var require_dist_cjs57 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-expect-continue/dist-cjs/index.js"(exports2) {
     "use strict";
     var protocolHttp = require_dist_cjs2();
@@ -83698,7 +84163,7 @@ var require_dist_cjs56 = __commonJS({
 });
 
 // ../../node_modules/@aws-crypto/util/node_modules/@smithy/is-array-buffer/dist-cjs/index.js
-var require_dist_cjs57 = __commonJS({
+var require_dist_cjs58 = __commonJS({
   "../../node_modules/@aws-crypto/util/node_modules/@smithy/is-array-buffer/dist-cjs/index.js"(exports2, module2) {
     var __defProp2 = Object.defineProperty;
     var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -83728,7 +84193,7 @@ var require_dist_cjs57 = __commonJS({
 });
 
 // ../../node_modules/@aws-crypto/util/node_modules/@smithy/util-buffer-from/dist-cjs/index.js
-var require_dist_cjs58 = __commonJS({
+var require_dist_cjs59 = __commonJS({
   "../../node_modules/@aws-crypto/util/node_modules/@smithy/util-buffer-from/dist-cjs/index.js"(exports2, module2) {
     var __defProp2 = Object.defineProperty;
     var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -83754,7 +84219,7 @@ var require_dist_cjs58 = __commonJS({
       fromString: /* @__PURE__ */ __name(() => fromString, "fromString")
     });
     module2.exports = __toCommonJS2(src_exports);
-    var import_is_array_buffer = require_dist_cjs57();
+    var import_is_array_buffer = require_dist_cjs58();
     var import_buffer = require("buffer");
     var fromArrayBuffer = /* @__PURE__ */ __name2((input, offset = 0, length = input.byteLength - offset) => {
       if (!(0, import_is_array_buffer.isArrayBuffer)(input)) {
@@ -83772,7 +84237,7 @@ var require_dist_cjs58 = __commonJS({
 });
 
 // ../../node_modules/@aws-crypto/util/node_modules/@smithy/util-utf8/dist-cjs/index.js
-var require_dist_cjs59 = __commonJS({
+var require_dist_cjs60 = __commonJS({
   "../../node_modules/@aws-crypto/util/node_modules/@smithy/util-utf8/dist-cjs/index.js"(exports2, module2) {
     var __defProp2 = Object.defineProperty;
     var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -83799,7 +84264,7 @@ var require_dist_cjs59 = __commonJS({
       toUtf8: /* @__PURE__ */ __name(() => toUtf810, "toUtf8")
     });
     module2.exports = __toCommonJS2(src_exports);
-    var import_util_buffer_from = require_dist_cjs58();
+    var import_util_buffer_from = require_dist_cjs59();
     var fromUtf87 = /* @__PURE__ */ __name2((input) => {
       const buf = (0, import_util_buffer_from.fromString)(input, "utf8");
       return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength / Uint8Array.BYTES_PER_ELEMENT);
@@ -83831,7 +84296,7 @@ var require_convertToBuffer = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.convertToBuffer = void 0;
-    var util_utf8_1 = require_dist_cjs59();
+    var util_utf8_1 = require_dist_cjs60();
     var fromUtf87 = typeof Buffer !== "undefined" && Buffer.from ? function(input) {
       return Buffer.from(input, "utf8");
     } : util_utf8_1.fromUtf8;
@@ -84669,7 +85134,7 @@ var require_getCrc32ChecksumAlgorithmFunction = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/index.js
-var require_dist_cjs60 = __commonJS({
+var require_dist_cjs61 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/index.js"(exports2) {
     "use strict";
     var core = (init_dist_es2(), __toCommonJS(dist_es_exports2));
@@ -85065,7 +85530,7 @@ For more information please go to https://github.com/aws/aws-sdk-js-v3#functiona
 });
 
 // ../../node_modules/@aws-sdk/util-arn-parser/dist-cjs/index.js
-var require_dist_cjs61 = __commonJS({
+var require_dist_cjs62 = __commonJS({
   "../../node_modules/@aws-sdk/util-arn-parser/dist-cjs/index.js"(exports2) {
     "use strict";
     var validate = /* @__PURE__ */ __name((str) => typeof str === "string" && str.indexOf("arn:") === 0 && str.split(":").length >= 6, "validate");
@@ -85096,13 +85561,13 @@ var require_dist_cjs61 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/index.js
-var require_dist_cjs62 = __commonJS({
+var require_dist_cjs63 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/index.js"(exports2) {
     "use strict";
     var protocolHttp = require_dist_cjs2();
     var smithyClient = require_dist_cjs26();
     var utilStream = require_dist_cjs17();
-    var utilArnParser = require_dist_cjs61();
+    var utilArnParser = require_dist_cjs62();
     var signatureV4 = require_dist_cjs24();
     var utilConfigProvider = require_dist_cjs29();
     var core = (init_dist_es2(), __toCommonJS(dist_es_exports2));
@@ -85662,7 +86127,7 @@ var require_dist_cjs62 = __commonJS({
 });
 
 // ../../node_modules/@smithy/eventstream-serde-config-resolver/dist-cjs/index.js
-var require_dist_cjs63 = __commonJS({
+var require_dist_cjs64 = __commonJS({
   "../../node_modules/@smithy/eventstream-serde-config-resolver/dist-cjs/index.js"(exports2) {
     "use strict";
     var resolveEventStreamSerdeConfig = /* @__PURE__ */ __name((input) => Object.assign(input, {
@@ -85673,10 +86138,10 @@ var require_dist_cjs63 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
-var require_dist_cjs64 = __commonJS({
+var require_dist_cjs65 = __commonJS({
   "../../node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js"(exports2) {
     "use strict";
-    var middlewareSdkS3 = require_dist_cjs62();
+    var middlewareSdkS3 = require_dist_cjs63();
     var signatureV4 = require_dist_cjs24();
     var signatureV4CrtContainer = {
       CrtSignerV4: null
@@ -86021,7 +86486,7 @@ var require_httpAuthSchemeProvider3 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.resolveHttpAuthSchemeConfig = exports2.defaultS3HttpAuthSchemeProvider = exports2.defaultS3HttpAuthSchemeParametersProvider = void 0;
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var signature_v4_multi_region_1 = require_dist_cjs64();
+    var signature_v4_multi_region_1 = require_dist_cjs65();
     var middleware_endpoint_1 = require_dist_cjs34();
     var util_middleware_1 = require_dist_cjs6();
     var endpointResolver_1 = require_endpointResolver3();
@@ -86277,11 +86742,11 @@ var require_package3 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-bucket-endpoint/dist-cjs/index.js
-var require_dist_cjs65 = __commonJS({
+var require_dist_cjs66 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-bucket-endpoint/dist-cjs/index.js"(exports2) {
     "use strict";
     var utilConfigProvider = require_dist_cjs29();
-    var utilArnParser = require_dist_cjs61();
+    var utilArnParser = require_dist_cjs62();
     var protocolHttp = require_dist_cjs2();
     var NODE_DISABLE_MULTIREGION_ACCESS_POINT_ENV_NAME = "AWS_S3_DISABLE_MULTIREGION_ACCESS_POINTS";
     var NODE_DISABLE_MULTIREGION_ACCESS_POINT_INI_NAME = "s3_disable_multiregion_access_points";
@@ -86610,7 +87075,7 @@ var require_dist_cjs65 = __commonJS({
 });
 
 // ../../node_modules/@smithy/eventstream-codec/dist-cjs/index.js
-var require_dist_cjs66 = __commonJS({
+var require_dist_cjs67 = __commonJS({
   "../../node_modules/@smithy/eventstream-codec/dist-cjs/index.js"(exports2) {
     "use strict";
     var crc32 = require_main3();
@@ -87017,10 +87482,10 @@ var require_dist_cjs66 = __commonJS({
 });
 
 // ../../node_modules/@smithy/eventstream-serde-universal/dist-cjs/index.js
-var require_dist_cjs67 = __commonJS({
+var require_dist_cjs68 = __commonJS({
   "../../node_modules/@smithy/eventstream-serde-universal/dist-cjs/index.js"(exports2) {
     "use strict";
-    var eventstreamCodec = require_dist_cjs66();
+    var eventstreamCodec = require_dist_cjs67();
     function getChunkedStream(source) {
       let currentMessageTotalLength = 0;
       let currentMessagePendingLength = 0;
@@ -87149,10 +87614,10 @@ var require_dist_cjs67 = __commonJS({
 });
 
 // ../../node_modules/@smithy/eventstream-serde-node/dist-cjs/index.js
-var require_dist_cjs68 = __commonJS({
+var require_dist_cjs69 = __commonJS({
   "../../node_modules/@smithy/eventstream-serde-node/dist-cjs/index.js"(exports2) {
     "use strict";
-    var eventstreamSerdeUniversal = require_dist_cjs67();
+    var eventstreamSerdeUniversal = require_dist_cjs68();
     var stream2 = require("stream");
     async function* readabletoIterable(readStream) {
       let streamEnded = false;
@@ -87207,7 +87672,7 @@ var require_dist_cjs68 = __commonJS({
 });
 
 // ../../node_modules/@smithy/hash-stream-node/dist-cjs/index.js
-var require_dist_cjs69 = __commonJS({
+var require_dist_cjs70 = __commonJS({
   "../../node_modules/@smithy/hash-stream-node/dist-cjs/index.js"(exports2) {
     "use strict";
     var fs12 = require("fs");
@@ -87284,7 +87749,7 @@ var require_runtimeConfig_shared3 = __commonJS({
     exports2.getRuntimeConfig = void 0;
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
     var protocols_1 = (init_protocols2(), __toCommonJS(protocols_exports2));
-    var signature_v4_multi_region_1 = require_dist_cjs64();
+    var signature_v4_multi_region_1 = require_dist_cjs65();
     var smithy_client_1 = require_dist_cjs26();
     var url_parser_1 = require_dist_cjs21();
     var util_base64_1 = require_dist_cjs11();
@@ -87345,21 +87810,21 @@ var require_runtimeConfig3 = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var package_json_1 = tslib_1.__importDefault(require_package3());
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var credential_provider_node_1 = require_dist_cjs53();
-    var middleware_bucket_endpoint_1 = require_dist_cjs65();
-    var middleware_flexible_checksums_1 = require_dist_cjs60();
-    var middleware_sdk_s3_1 = require_dist_cjs62();
+    var credential_provider_node_1 = require_dist_cjs54();
+    var middleware_bucket_endpoint_1 = require_dist_cjs66();
+    var middleware_flexible_checksums_1 = require_dist_cjs61();
+    var middleware_sdk_s3_1 = require_dist_cjs63();
     var util_user_agent_node_1 = require_dist_cjs41();
     var config_resolver_1 = require_dist_cjs30();
-    var eventstream_serde_node_1 = require_dist_cjs68();
+    var eventstream_serde_node_1 = require_dist_cjs69();
     var hash_node_1 = require_dist_cjs42();
-    var hash_stream_node_1 = require_dist_cjs69();
+    var hash_stream_node_1 = require_dist_cjs70();
     var middleware_retry_1 = require_dist_cjs37();
     var node_config_provider_1 = require_dist_cjs33();
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared3();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -87409,7 +87874,7 @@ var require_runtimeConfig3 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-ssec/dist-cjs/index.js
-var require_dist_cjs70 = __commonJS({
+var require_dist_cjs71 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-ssec/dist-cjs/index.js"(exports2) {
     "use strict";
     function ssecMiddleware(options) {
@@ -87483,7 +87948,7 @@ var require_dist_cjs70 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/middleware-location-constraint/dist-cjs/index.js
-var require_dist_cjs71 = __commonJS({
+var require_dist_cjs72 = __commonJS({
   "../../node_modules/@aws-sdk/middleware-location-constraint/dist-cjs/index.js"(exports2) {
     "use strict";
     function locationConstraintMiddleware(options) {
@@ -87518,31 +87983,31 @@ var require_dist_cjs71 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-s3/dist-cjs/index.js
-var require_dist_cjs72 = __commonJS({
+var require_dist_cjs73 = __commonJS({
   "../../node_modules/@aws-sdk/client-s3/dist-cjs/index.js"(exports2) {
     "use strict";
-    var middlewareExpectContinue = require_dist_cjs56();
-    var middlewareFlexibleChecksums = require_dist_cjs60();
+    var middlewareExpectContinue = require_dist_cjs57();
+    var middlewareFlexibleChecksums = require_dist_cjs61();
     var middlewareHostHeader = require_dist_cjs3();
     var middlewareLogger = require_dist_cjs4();
     var middlewareRecursionDetection = require_dist_cjs5();
-    var middlewareSdkS3 = require_dist_cjs62();
+    var middlewareSdkS3 = require_dist_cjs63();
     var middlewareUserAgent = require_dist_cjs28();
     var configResolver = require_dist_cjs30();
     var core = (init_dist_es(), __toCommonJS(dist_es_exports));
     var schema = (init_schema4(), __toCommonJS(schema_exports));
-    var eventstreamSerdeConfigResolver = require_dist_cjs63();
+    var eventstreamSerdeConfigResolver = require_dist_cjs64();
     var middlewareContentLength = require_dist_cjs31();
     var middlewareEndpoint = require_dist_cjs34();
     var middlewareRetry = require_dist_cjs37();
     var smithyClient = require_dist_cjs26();
     var httpAuthSchemeProvider = require_httpAuthSchemeProvider3();
     var runtimeConfig = require_runtimeConfig3();
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var protocolHttp = require_dist_cjs2();
-    var middlewareSsec = require_dist_cjs70();
-    var middlewareLocationConstraint = require_dist_cjs71();
-    var utilWaiter = require_dist_cjs54();
+    var middlewareSsec = require_dist_cjs71();
+    var middlewareLocationConstraint = require_dist_cjs72();
+    var utilWaiter = require_dist_cjs55();
     var resolveClientEndpointParameters4 = /* @__PURE__ */ __name((options) => {
       return Object.assign(options, {
         useFipsEndpoint: options.useFipsEndpoint ?? false,
@@ -96224,7 +96689,7 @@ var require_runtimeConfig4 = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var package_json_1 = tslib_1.__importDefault(require_package4());
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var credential_provider_node_1 = require_dist_cjs53();
+    var credential_provider_node_1 = require_dist_cjs54();
     var util_user_agent_node_1 = require_dist_cjs41();
     var config_resolver_1 = require_dist_cjs30();
     var hash_node_1 = require_dist_cjs42();
@@ -96233,7 +96698,7 @@ var require_runtimeConfig4 = __commonJS({
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared4();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -96274,7 +96739,7 @@ var require_runtimeConfig4 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-secrets-manager/dist-cjs/index.js
-var require_dist_cjs73 = __commonJS({
+var require_dist_cjs74 = __commonJS({
   "../../node_modules/@aws-sdk/client-secrets-manager/dist-cjs/index.js"(exports2) {
     "use strict";
     var middlewareHostHeader = require_dist_cjs3();
@@ -96290,7 +96755,7 @@ var require_dist_cjs73 = __commonJS({
     var smithyClient = require_dist_cjs26();
     var httpAuthSchemeProvider = require_httpAuthSchemeProvider4();
     var runtimeConfig = require_runtimeConfig4();
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var protocolHttp = require_dist_cjs2();
     var resolveClientEndpointParameters4 = /* @__PURE__ */ __name((options) => {
       return Object.assign(options, {
@@ -97991,7 +98456,7 @@ var require_runtimeConfig5 = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var package_json_1 = tslib_1.__importDefault(require_package5());
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var credential_provider_node_1 = require_dist_cjs53();
+    var credential_provider_node_1 = require_dist_cjs54();
     var util_user_agent_node_1 = require_dist_cjs41();
     var config_resolver_1 = require_dist_cjs30();
     var core_2 = (init_dist_es(), __toCommonJS(dist_es_exports));
@@ -98001,7 +98466,7 @@ var require_runtimeConfig5 = __commonJS({
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared5();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -98107,7 +98572,7 @@ var require_runtimeExtensions = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.resolveRuntimeExtensions = void 0;
-    var region_config_resolver_1 = require_dist_cjs45();
+    var region_config_resolver_1 = require_dist_cjs46();
     var protocol_http_1 = require_dist_cjs2();
     var smithy_client_1 = require_dist_cjs26();
     var httpAuthExtensionConfiguration_1 = require_httpAuthExtensionConfiguration();
@@ -98186,7 +98651,7 @@ var require_STSClient = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-sts/dist-cjs/index.js
-var require_dist_cjs74 = __commonJS({
+var require_dist_cjs75 = __commonJS({
   "../../node_modules/@aws-sdk/client-sts/dist-cjs/index.js"(exports2) {
     "use strict";
     var STSClient3 = require_STSClient();
@@ -98195,7 +98660,7 @@ var require_dist_cjs74 = __commonJS({
     var EndpointParameters = require_EndpointParameters();
     var schema = (init_schema4(), __toCommonJS(schema_exports));
     var client = (init_client(), __toCommonJS(client_exports));
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var STSServiceException2 = class _STSServiceException extends smithyClient.ServiceException {
       static {
         __name(this, "STSServiceException");
@@ -99488,7 +99953,7 @@ var require_runtimeConfig6 = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var package_json_1 = tslib_1.__importDefault(require_package6());
     var core_1 = (init_dist_es2(), __toCommonJS(dist_es_exports2));
-    var credential_provider_node_1 = require_dist_cjs53();
+    var credential_provider_node_1 = require_dist_cjs54();
     var util_user_agent_node_1 = require_dist_cjs41();
     var config_resolver_1 = require_dist_cjs30();
     var hash_node_1 = require_dist_cjs42();
@@ -99497,7 +99962,7 @@ var require_runtimeConfig6 = __commonJS({
     var node_http_handler_1 = require_dist_cjs14();
     var smithy_client_1 = require_dist_cjs26();
     var util_body_length_node_1 = require_dist_cjs43();
-    var util_defaults_mode_node_1 = require_dist_cjs44();
+    var util_defaults_mode_node_1 = require_dist_cjs45();
     var util_retry_1 = require_dist_cjs36();
     var runtimeConfig_shared_1 = require_runtimeConfig_shared6();
     var getRuntimeConfig7 = /* @__PURE__ */ __name((config) => {
@@ -99538,7 +100003,7 @@ var require_runtimeConfig6 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/client-cognito-identity/dist-cjs/index.js
-var require_dist_cjs75 = __commonJS({
+var require_dist_cjs76 = __commonJS({
   "../../node_modules/@aws-sdk/client-cognito-identity/dist-cjs/index.js"(exports2) {
     "use strict";
     var middlewareHostHeader = require_dist_cjs3();
@@ -99554,7 +100019,7 @@ var require_dist_cjs75 = __commonJS({
     var smithyClient = require_dist_cjs26();
     var httpAuthSchemeProvider = require_httpAuthSchemeProvider6();
     var runtimeConfig = require_runtimeConfig6();
-    var regionConfigResolver = require_dist_cjs45();
+    var regionConfigResolver = require_dist_cjs46();
     var protocolHttp = require_dist_cjs2();
     var resolveClientEndpointParameters4 = /* @__PURE__ */ __name((options) => {
       return Object.assign(options, {
@@ -100724,7 +101189,7 @@ var require_dist_cjs75 = __commonJS({
 var require_loadCognitoIdentity_BPNvueUJ = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-cognito-identity/dist-cjs/loadCognitoIdentity-BPNvueUJ.js"(exports2) {
     "use strict";
-    var clientCognitoIdentity = require_dist_cjs75();
+    var clientCognitoIdentity = require_dist_cjs76();
     Object.defineProperty(exports2, "CognitoIdentityClient", {
       enumerable: true,
       get: /* @__PURE__ */ __name(function() {
@@ -100747,7 +101212,7 @@ var require_loadCognitoIdentity_BPNvueUJ = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-provider-cognito-identity/dist-cjs/index.js
-var require_dist_cjs76 = __commonJS({
+var require_dist_cjs77 = __commonJS({
   "../../node_modules/@aws-sdk/credential-provider-cognito-identity/dist-cjs/index.js"(exports2) {
     "use strict";
     var propertyProvider = require_dist_cjs23();
@@ -100965,7 +101430,7 @@ var require_fromCognitoIdentity = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromCognitoIdentity = void 0;
-    var credential_provider_cognito_identity_1 = require_dist_cjs76();
+    var credential_provider_cognito_identity_1 = require_dist_cjs77();
     var fromCognitoIdentity = /* @__PURE__ */ __name((options) => (0, credential_provider_cognito_identity_1.fromCognitoIdentity)({
       ...options
     }), "fromCognitoIdentity");
@@ -100979,7 +101444,7 @@ var require_fromCognitoIdentityPool = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromCognitoIdentityPool = void 0;
-    var credential_provider_cognito_identity_1 = require_dist_cjs76();
+    var credential_provider_cognito_identity_1 = require_dist_cjs77();
     var fromCognitoIdentityPool = /* @__PURE__ */ __name((options) => (0, credential_provider_cognito_identity_1.fromCognitoIdentityPool)({
       ...options
     }), "fromCognitoIdentityPool");
@@ -100987,13 +101452,363 @@ var require_fromCognitoIdentityPool = __commonJS({
   }
 });
 
+// ../../node_modules/@aws-sdk/credential-providers/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js
+var require_dist_cjs78 = __commonJS({
+  "../../node_modules/@aws-sdk/credential-providers/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js"(exports2) {
+    "use strict";
+    var propertyProvider = require_dist_cjs23();
+    var url = require("url");
+    var buffer = require("buffer");
+    var http = require("http");
+    var nodeConfigProvider = require_dist_cjs33();
+    var urlParser = require_dist_cjs21();
+    function httpRequest(options) {
+      return new Promise((resolve6, reject) => {
+        const req = http.request({
+          method: "GET",
+          ...options,
+          hostname: options.hostname?.replace(/^\[(.+)\]$/, "$1")
+        });
+        req.on("error", (err) => {
+          reject(Object.assign(new propertyProvider.ProviderError("Unable to connect to instance metadata service"), err));
+          req.destroy();
+        });
+        req.on("timeout", () => {
+          reject(new propertyProvider.ProviderError("TimeoutError from instance metadata service"));
+          req.destroy();
+        });
+        req.on("response", (res) => {
+          const { statusCode = 400 } = res;
+          if (statusCode < 200 || 300 <= statusCode) {
+            reject(Object.assign(new propertyProvider.ProviderError("Error response received from instance metadata service"), { statusCode }));
+            req.destroy();
+          }
+          const chunks = [];
+          res.on("data", (chunk) => {
+            chunks.push(chunk);
+          });
+          res.on("end", () => {
+            resolve6(buffer.Buffer.concat(chunks));
+            req.destroy();
+          });
+        });
+        req.end();
+      });
+    }
+    __name(httpRequest, "httpRequest");
+    var isImdsCredentials = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string", "isImdsCredentials");
+    var fromImdsCredentials = /* @__PURE__ */ __name((creds) => ({
+      accessKeyId: creds.AccessKeyId,
+      secretAccessKey: creds.SecretAccessKey,
+      sessionToken: creds.Token,
+      expiration: new Date(creds.Expiration),
+      ...creds.AccountId && { accountId: creds.AccountId }
+    }), "fromImdsCredentials");
+    var DEFAULT_TIMEOUT = 1e3;
+    var DEFAULT_MAX_RETRIES = 0;
+    var providerConfigFromInit = /* @__PURE__ */ __name(({ maxRetries = DEFAULT_MAX_RETRIES, timeout = DEFAULT_TIMEOUT }) => ({ maxRetries, timeout }), "providerConfigFromInit");
+    var retry = /* @__PURE__ */ __name((toRetry, maxRetries) => {
+      let promise = toRetry();
+      for (let i4 = 0; i4 < maxRetries; i4++) {
+        promise = promise.catch(toRetry);
+      }
+      return promise;
+    }, "retry");
+    var ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+    var ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+    var ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+    var fromContainerMetadata = /* @__PURE__ */ __name((init = {}) => {
+      const { timeout, maxRetries } = providerConfigFromInit(init);
+      return () => retry(async () => {
+        const requestOptions = await getCmdsUri({ logger: init.logger });
+        const credsResponse = JSON.parse(await requestFromEcsImds(timeout, requestOptions));
+        if (!isImdsCredentials(credsResponse)) {
+          throw new propertyProvider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+            logger: init.logger
+          });
+        }
+        return fromImdsCredentials(credsResponse);
+      }, maxRetries);
+    }, "fromContainerMetadata");
+    var requestFromEcsImds = /* @__PURE__ */ __name(async (timeout, options) => {
+      if (process.env[ENV_CMDS_AUTH_TOKEN]) {
+        options.headers = {
+          ...options.headers,
+          Authorization: process.env[ENV_CMDS_AUTH_TOKEN]
+        };
+      }
+      const buffer2 = await httpRequest({
+        ...options,
+        timeout
+      });
+      return buffer2.toString();
+    }, "requestFromEcsImds");
+    var CMDS_IP = "169.254.170.2";
+    var GREENGRASS_HOSTS = {
+      localhost: true,
+      "127.0.0.1": true
+    };
+    var GREENGRASS_PROTOCOLS = {
+      "http:": true,
+      "https:": true
+    };
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger2 }) => {
+      if (process.env[ENV_CMDS_RELATIVE_URI]) {
+        return {
+          hostname: CMDS_IP,
+          path: process.env[ENV_CMDS_RELATIVE_URI]
+        };
+      }
+      if (process.env[ENV_CMDS_FULL_URI]) {
+        const parsed = url.parse(process.env[ENV_CMDS_FULL_URI]);
+        if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
+          throw new propertyProvider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
+            tryNextLink: false,
+            logger: logger2
+          });
+        }
+        if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
+          throw new propertyProvider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
+            tryNextLink: false,
+            logger: logger2
+          });
+        }
+        return {
+          ...parsed,
+          port: parsed.port ? parseInt(parsed.port, 10) : void 0
+        };
+      }
+      throw new propertyProvider.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
+        tryNextLink: false,
+        logger: logger2
+      });
+    }, "getCmdsUri");
+    var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends propertyProvider.CredentialsProviderError {
+      static {
+        __name(this, "InstanceMetadataV1FallbackError");
+      }
+      tryNextLink;
+      name = "InstanceMetadataV1FallbackError";
+      constructor(message, tryNextLink = true) {
+        super(message, tryNextLink);
+        this.tryNextLink = tryNextLink;
+        Object.setPrototypeOf(this, _InstanceMetadataV1FallbackError.prototype);
+      }
+    };
+    exports2.Endpoint = void 0;
+    (function(Endpoint) {
+      Endpoint["IPv4"] = "http://169.254.169.254";
+      Endpoint["IPv6"] = "http://[fd00:ec2::254]";
+    })(exports2.Endpoint || (exports2.Endpoint = {}));
+    var ENV_ENDPOINT_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT";
+    var CONFIG_ENDPOINT_NAME = "ec2_metadata_service_endpoint";
+    var ENDPOINT_CONFIG_OPTIONS = {
+      environmentVariableSelector: /* @__PURE__ */ __name((env) => env[ENV_ENDPOINT_NAME], "environmentVariableSelector"),
+      configFileSelector: /* @__PURE__ */ __name((profile) => profile[CONFIG_ENDPOINT_NAME], "configFileSelector"),
+      default: void 0
+    };
+    var EndpointMode;
+    (function(EndpointMode2) {
+      EndpointMode2["IPv4"] = "IPv4";
+      EndpointMode2["IPv6"] = "IPv6";
+    })(EndpointMode || (EndpointMode = {}));
+    var ENV_ENDPOINT_MODE_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE";
+    var CONFIG_ENDPOINT_MODE_NAME = "ec2_metadata_service_endpoint_mode";
+    var ENDPOINT_MODE_CONFIG_OPTIONS = {
+      environmentVariableSelector: /* @__PURE__ */ __name((env) => env[ENV_ENDPOINT_MODE_NAME], "environmentVariableSelector"),
+      configFileSelector: /* @__PURE__ */ __name((profile) => profile[CONFIG_ENDPOINT_MODE_NAME], "configFileSelector"),
+      default: EndpointMode.IPv4
+    };
+    var getInstanceMetadataEndpoint = /* @__PURE__ */ __name(async () => urlParser.parseUrl(await getFromEndpointConfig() || await getFromEndpointModeConfig()), "getInstanceMetadataEndpoint");
+    var getFromEndpointConfig = /* @__PURE__ */ __name(async () => nodeConfigProvider.loadConfig(ENDPOINT_CONFIG_OPTIONS)(), "getFromEndpointConfig");
+    var getFromEndpointModeConfig = /* @__PURE__ */ __name(async () => {
+      const endpointMode = await nodeConfigProvider.loadConfig(ENDPOINT_MODE_CONFIG_OPTIONS)();
+      switch (endpointMode) {
+        case EndpointMode.IPv4:
+          return exports2.Endpoint.IPv4;
+        case EndpointMode.IPv6:
+          return exports2.Endpoint.IPv6;
+        default:
+          throw new Error(`Unsupported endpoint mode: ${endpointMode}. Select from ${Object.values(EndpointMode)}`);
+      }
+    }, "getFromEndpointModeConfig");
+    var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
+    var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
+    var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger2) => {
+      const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
+      const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
+      logger2.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
+      const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
+      return {
+        ...credentials,
+        ...originalExpiration ? { originalExpiration } : {},
+        expiration: newExpiration
+      };
+    }, "getExtendedInstanceMetadataCredentials");
+    var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
+      const logger2 = options?.logger || console;
+      let pastCredentials;
+      return async () => {
+        let credentials;
+        try {
+          credentials = await provider();
+          if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger2);
+          }
+        } catch (e4) {
+          if (pastCredentials) {
+            logger2.warn("Credential renew failed: ", e4);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger2);
+          } else {
+            throw e4;
+          }
+        }
+        pastCredentials = credentials;
+        return credentials;
+      };
+    }, "staticStabilityProvider");
+    var IMDS_PATH = "/latest/meta-data/iam/security-credentials/";
+    var IMDS_TOKEN_PATH = "/latest/api/token";
+    var AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED";
+    var PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled";
+    var X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token";
+    var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
+    var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
+      let disableFetchToken = false;
+      const { logger: logger2, profile } = init;
+      const { timeout, maxRetries } = providerConfigFromInit(init);
+      const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
+        const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
+        if (isImdsV1Fallback) {
+          let fallbackBlockedFromProfile = false;
+          let fallbackBlockedFromProcessEnv = false;
+          const configValue = await nodeConfigProvider.loadConfig({
+            environmentVariableSelector: /* @__PURE__ */ __name((env) => {
+              const envValue = env[AWS_EC2_METADATA_V1_DISABLED];
+              fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
+              if (envValue === void 0) {
+                throw new propertyProvider.CredentialsProviderError(`${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`, { logger: init.logger });
+              }
+              return fallbackBlockedFromProcessEnv;
+            }, "environmentVariableSelector"),
+            configFileSelector: /* @__PURE__ */ __name((profile2) => {
+              const profileValue = profile2[PROFILE_AWS_EC2_METADATA_V1_DISABLED];
+              fallbackBlockedFromProfile = !!profileValue && profileValue !== "false";
+              return fallbackBlockedFromProfile;
+            }, "configFileSelector"),
+            default: false
+          }, {
+            profile
+          })();
+          if (init.ec2MetadataV1Disabled || configValue) {
+            const causes = [];
+            if (init.ec2MetadataV1Disabled)
+              causes.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");
+            if (fallbackBlockedFromProfile)
+              causes.push(`config file profile (${PROFILE_AWS_EC2_METADATA_V1_DISABLED})`);
+            if (fallbackBlockedFromProcessEnv)
+              causes.push(`process environment variable (${AWS_EC2_METADATA_V1_DISABLED})`);
+            throw new InstanceMetadataV1FallbackError(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${causes.join(", ")}].`);
+          }
+        }
+        const imdsProfile = (await retry(async () => {
+          let profile2;
+          try {
+            profile2 = await getProfile(options);
+          } catch (err) {
+            if (err.statusCode === 401) {
+              disableFetchToken = false;
+            }
+            throw err;
+          }
+          return profile2;
+        }, maxRetries2)).trim();
+        return retry(async () => {
+          let creds;
+          try {
+            creds = await getCredentialsFromProfile(imdsProfile, options, init);
+          } catch (err) {
+            if (err.statusCode === 401) {
+              disableFetchToken = false;
+            }
+            throw err;
+          }
+          return creds;
+        }, maxRetries2);
+      }, "getCredentials");
+      return async () => {
+        const endpoint = await getInstanceMetadataEndpoint();
+        if (disableFetchToken) {
+          logger2?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          return getCredentials(maxRetries, { ...endpoint, timeout });
+        } else {
+          let token;
+          try {
+            token = (await getMetadataToken({ ...endpoint, timeout })).toString();
+          } catch (error2) {
+            if (error2?.statusCode === 400) {
+              throw Object.assign(error2, {
+                message: "EC2 Metadata token request returned error"
+              });
+            } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
+              disableFetchToken = true;
+            }
+            logger2?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            return getCredentials(maxRetries, { ...endpoint, timeout });
+          }
+          return getCredentials(maxRetries, {
+            ...endpoint,
+            headers: {
+              [X_AWS_EC2_METADATA_TOKEN]: token
+            },
+            timeout
+          });
+        }
+      };
+    }, "getInstanceMetadataProvider");
+    var getMetadataToken = /* @__PURE__ */ __name(async (options) => httpRequest({
+      ...options,
+      path: IMDS_TOKEN_PATH,
+      method: "PUT",
+      headers: {
+        "x-aws-ec2-metadata-token-ttl-seconds": "21600"
+      }
+    }), "getMetadataToken");
+    var getProfile = /* @__PURE__ */ __name(async (options) => (await httpRequest({ ...options, path: IMDS_PATH })).toString(), "getProfile");
+    var getCredentialsFromProfile = /* @__PURE__ */ __name(async (profile, options, init) => {
+      const credentialsResponse = JSON.parse((await httpRequest({
+        ...options,
+        path: IMDS_PATH + profile
+      })).toString());
+      if (!isImdsCredentials(credentialsResponse)) {
+        throw new propertyProvider.CredentialsProviderError("Invalid response received from instance metadata service.", {
+          logger: init.logger
+        });
+      }
+      return fromImdsCredentials(credentialsResponse);
+    }, "getCredentialsFromProfile");
+    exports2.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES;
+    exports2.DEFAULT_TIMEOUT = DEFAULT_TIMEOUT;
+    exports2.ENV_CMDS_AUTH_TOKEN = ENV_CMDS_AUTH_TOKEN;
+    exports2.ENV_CMDS_FULL_URI = ENV_CMDS_FULL_URI;
+    exports2.ENV_CMDS_RELATIVE_URI = ENV_CMDS_RELATIVE_URI;
+    exports2.fromContainerMetadata = fromContainerMetadata;
+    exports2.fromInstanceMetadata = fromInstanceMetadata;
+    exports2.getInstanceMetadataEndpoint = getInstanceMetadataEndpoint;
+    exports2.httpRequest = httpRequest;
+    exports2.providerConfigFromInit = providerConfigFromInit;
+  }
+});
+
 // ../../node_modules/@aws-sdk/credential-providers/dist-cjs/fromContainerMetadata.js
 var require_fromContainerMetadata = __commonJS({
   "../../node_modules/@aws-sdk/credential-providers/dist-cjs/fromContainerMetadata.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromContainerMetadata = void 0;
-    var credential_provider_imds_1 = require_dist_cjs39();
+    var credential_provider_imds_1 = require_dist_cjs78();
     var fromContainerMetadata = /* @__PURE__ */ __name((init) => {
       init?.logger?.debug("@smithy/credential-provider-imds", "fromContainerMetadata");
       return (0, credential_provider_imds_1.fromContainerMetadata)(init);
@@ -101015,24 +101830,24 @@ var require_fromEnv = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-providers/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js
-var require_dist_cjs77 = __commonJS({
+var require_dist_cjs79 = __commonJS({
   "../../node_modules/@aws-sdk/credential-providers/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js"(exports2) {
     "use strict";
     var sharedIniFileLoader = require_dist_cjs32();
     var propertyProvider = require_dist_cjs23();
     var client = (init_client(), __toCommonJS(client_exports));
-    var credentialProviderLogin = require_dist_cjs49();
+    var credentialProviderLogin = require_dist_cjs50();
     var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger2) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
           const { fromHttp } = await Promise.resolve().then(() => __toESM(require_dist_cjs40()));
-          const { fromContainerMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs39()));
+          const { fromContainerMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs78()));
           logger2?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
           return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         }, "EcsContainer"),
         Ec2InstanceMetadata: /* @__PURE__ */ __name(async (options) => {
           logger2?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
-          const { fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs39()));
+          const { fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs78()));
           return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         }, "Ec2InstanceMetadata"),
         Environment: /* @__PURE__ */ __name(async (options) => {
@@ -101124,12 +101939,12 @@ var require_dist_cjs77 = __commonJS({
       return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC");
     }, "resolveLoginCredentials");
     var isProcessProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string", "isProcessProfile");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (options, profile) => Promise.resolve().then(() => __toESM(require_dist_cjs50())).then(({ fromProcess }) => fromProcess({
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (options, profile) => Promise.resolve().then(() => __toESM(require_dist_cjs51())).then(({ fromProcess }) => fromProcess({
       ...options,
       profile
     })().then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v"))), "resolveProcessCredentials");
     var resolveSsoCredentials = /* @__PURE__ */ __name(async (profile, profileData, options = {}, callerClientConfig) => {
-      const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs48()));
+      const { fromSSO } = await Promise.resolve().then(() => __toESM(require_dist_cjs49()));
       return fromSSO({
         profile,
         logger: options.logger,
@@ -101159,7 +101974,7 @@ var require_dist_cjs77 = __commonJS({
       return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n");
     }, "resolveStaticCredentials");
     var isWebIdentityProfile = /* @__PURE__ */ __name((arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, "isWebIdentityProfile");
-    var resolveWebIdentityCredentials = /* @__PURE__ */ __name(async (profile, options, callerClientConfig) => Promise.resolve().then(() => __toESM(require_dist_cjs51())).then(({ fromTokenFile }) => fromTokenFile({
+    var resolveWebIdentityCredentials = /* @__PURE__ */ __name(async (profile, options, callerClientConfig) => Promise.resolve().then(() => __toESM(require_dist_cjs52())).then(({ fromTokenFile }) => fromTokenFile({
       webIdentityTokenFile: profile.web_identity_token_file,
       roleArn: profile.role_arn,
       roleSessionName: profile.role_session_name,
@@ -101211,7 +102026,7 @@ var require_fromIni = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromIni = void 0;
-    var credential_provider_ini_1 = require_dist_cjs77();
+    var credential_provider_ini_1 = require_dist_cjs79();
     var fromIni = /* @__PURE__ */ __name((init = {}) => (0, credential_provider_ini_1.fromIni)({
       ...init
     }), "fromIni");
@@ -101226,7 +102041,7 @@ var require_fromInstanceMetadata = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromInstanceMetadata = void 0;
     var client_1 = (init_client(), __toCommonJS(client_exports));
-    var credential_provider_imds_1 = require_dist_cjs39();
+    var credential_provider_imds_1 = require_dist_cjs78();
     var fromInstanceMetadata = /* @__PURE__ */ __name((init) => {
       init?.logger?.debug("@smithy/credential-provider-imds", "fromInstanceMetadata");
       return async () => (0, credential_provider_imds_1.fromInstanceMetadata)(init)().then((creds) => (0, client_1.setCredentialFeature)(creds, "CREDENTIALS_IMDS", "0"));
@@ -101241,7 +102056,7 @@ var require_fromLoginCredentials = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromLoginCredentials = void 0;
-    var credential_provider_login_1 = require_dist_cjs49();
+    var credential_provider_login_1 = require_dist_cjs50();
     var fromLoginCredentials = /* @__PURE__ */ __name((init) => (0, credential_provider_login_1.fromLoginCredentials)({
       ...init
     }), "fromLoginCredentials");
@@ -101255,7 +102070,7 @@ var require_fromNodeProviderChain = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromNodeProviderChain = void 0;
-    var credential_provider_node_1 = require_dist_cjs53();
+    var credential_provider_node_1 = require_dist_cjs54();
     var fromNodeProviderChain2 = /* @__PURE__ */ __name((init = {}) => (0, credential_provider_node_1.defaultProvider)({
       ...init
     }), "fromNodeProviderChain");
@@ -101269,7 +102084,7 @@ var require_fromProcess = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromProcess = void 0;
-    var credential_provider_process_1 = require_dist_cjs50();
+    var credential_provider_process_1 = require_dist_cjs51();
     var fromProcess = /* @__PURE__ */ __name((init) => (0, credential_provider_process_1.fromProcess)(init), "fromProcess");
     exports2.fromProcess = fromProcess;
   }
@@ -101281,7 +102096,7 @@ var require_fromSSO = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromSSO = void 0;
-    var credential_provider_sso_1 = require_dist_cjs48();
+    var credential_provider_sso_1 = require_dist_cjs49();
     var fromSSO = /* @__PURE__ */ __name((init = {}) => {
       return (0, credential_provider_sso_1.fromSSO)({ ...init });
     }, "fromSSO");
@@ -101491,7 +102306,7 @@ var require_fromTokenFile2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromTokenFile = void 0;
-    var credential_provider_web_identity_1 = require_dist_cjs51();
+    var credential_provider_web_identity_1 = require_dist_cjs52();
     var fromTokenFile = /* @__PURE__ */ __name((init = {}) => (0, credential_provider_web_identity_1.fromTokenFile)({
       ...init
     }), "fromTokenFile");
@@ -101505,7 +102320,7 @@ var require_fromWebToken2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fromWebToken = void 0;
-    var credential_provider_web_identity_1 = require_dist_cjs51();
+    var credential_provider_web_identity_1 = require_dist_cjs52();
     var fromWebToken = /* @__PURE__ */ __name((init) => (0, credential_provider_web_identity_1.fromWebToken)({
       ...init
     }), "fromWebToken");
@@ -101514,7 +102329,7 @@ var require_fromWebToken2 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/credential-providers/dist-cjs/index.js
-var require_dist_cjs78 = __commonJS({
+var require_dist_cjs80 = __commonJS({
   "../../node_modules/@aws-sdk/credential-providers/dist-cjs/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -101541,9 +102356,9 @@ var require_dist_cjs78 = __commonJS({
   }
 });
 
-// ../../node_modules/@smithy/abort-controller/dist-cjs/index.js
-var require_dist_cjs79 = __commonJS({
-  "../../node_modules/@smithy/abort-controller/dist-cjs/index.js"(exports2) {
+// ../../node_modules/@aws-sdk/lib-storage/node_modules/@smithy/abort-controller/dist-cjs/index.js
+var require_dist_cjs81 = __commonJS({
+  "../../node_modules/@aws-sdk/lib-storage/node_modules/@smithy/abort-controller/dist-cjs/index.js"(exports2) {
     "use strict";
     var AbortSignal = class {
       static {
@@ -101618,11 +102433,11 @@ var require_runtimeConfig7 = __commonJS({
 });
 
 // ../../node_modules/@aws-sdk/lib-storage/dist-cjs/index.js
-var require_dist_cjs80 = __commonJS({
+var require_dist_cjs82 = __commonJS({
   "../../node_modules/@aws-sdk/lib-storage/dist-cjs/index.js"(exports2) {
     "use strict";
-    var clientS3 = require_dist_cjs72();
-    var abortController = require_dist_cjs79();
+    var clientS3 = require_dist_cjs73();
+    var abortController = require_dist_cjs81();
     var middlewareEndpoint = require_dist_cjs34();
     var smithyClient = require_dist_cjs26();
     var events = require("events");
@@ -102128,12 +102943,12 @@ var init_aws = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/aws.ts"() {
     "use strict";
     os4 = __toESM(require("os"));
-    import_client_ecr = __toESM(require_dist_cjs55());
-    import_client_s3 = __toESM(require_dist_cjs72());
-    import_client_secrets_manager = __toESM(require_dist_cjs73());
-    import_client_sts = __toESM(require_dist_cjs74());
-    import_credential_providers = __toESM(require_dist_cjs78());
-    import_lib_storage = __toESM(require_dist_cjs80());
+    import_client_ecr = __toESM(require_dist_cjs56());
+    import_client_s3 = __toESM(require_dist_cjs73());
+    import_client_secrets_manager = __toESM(require_dist_cjs74());
+    import_client_sts = __toESM(require_dist_cjs75());
+    import_credential_providers = __toESM(require_dist_cjs80());
+    import_lib_storage = __toESM(require_dist_cjs82());
     import_config_resolver7 = __toESM(require_dist_cjs30());
     import_node_config_provider4 = __toESM(require_dist_cjs33());
     USER_AGENT = "cdk-assets";