serverless-spy 2.2.6 → 2.2.7

package/node_modules/@aws-sdk/client-sts/dist-es/commands/AssumeRootCommand.js

@@ -0,0 +1,23 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { AssumeRootResponseFilterSensitiveLog } from "../models/models_0";
+import { de_AssumeRootCommand, se_AssumeRootCommand } from "../protocols/Aws_query";
+export { $Command };
+export class AssumeRootCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("AWSSecurityTokenServiceV20110615", "AssumeRoot", {})
+    .n("STSClient", "AssumeRootCommand")
+    .f(void 0, AssumeRootResponseFilterSensitiveLog)
+    .ser(se_AssumeRootCommand)
+    .de(de_AssumeRootCommand)
+    .build() {
+}

package/node_modules/@aws-sdk/client-sts/dist-es/commands/DecodeAuthorizationMessageCommand.js

@@ -6,9 +6,7 @@ import { de_DecodeAuthorizationMessageCommand, se_DecodeAuthorizationMessageComm
 export { $Command };
 export class DecodeAuthorizationMessageCommand extends $Command
     .classBuilder()
-    .ep({
-    ...commonParams,
-})
+    .ep(commonParams)
     .m(function (Command, cs, config, o) {
     return [
         getSerdePlugin(config, this.serialize, this.deserialize),

package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetAccessKeyInfoCommand.js

@@ -6,9 +6,7 @@ import { de_GetAccessKeyInfoCommand, se_GetAccessKeyInfoCommand } from "../proto
 export { $Command };
 export class GetAccessKeyInfoCommand extends $Command
     .classBuilder()
-    .ep({
-    ...commonParams,
-})
+    .ep(commonParams)
     .m(function (Command, cs, config, o) {
     return [
         getSerdePlugin(config, this.serialize, this.deserialize),

package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetCallerIdentityCommand.js

@@ -6,9 +6,7 @@ import { de_GetCallerIdentityCommand, se_GetCallerIdentityCommand } from "../pro
 export { $Command };
 export class GetCallerIdentityCommand extends $Command
     .classBuilder()
-    .ep({
-    ...commonParams,
-})
+    .ep(commonParams)
     .m(function (Command, cs, config, o) {
     return [
         getSerdePlugin(config, this.serialize, this.deserialize),

package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetFederationTokenCommand.js

@@ -7,9 +7,7 @@ import { de_GetFederationTokenCommand, se_GetFederationTokenCommand } from "../p
 export { $Command };
 export class GetFederationTokenCommand extends $Command
     .classBuilder()
-    .ep({
-    ...commonParams,
-})
+    .ep(commonParams)
     .m(function (Command, cs, config, o) {
     return [
         getSerdePlugin(config, this.serialize, this.deserialize),

package/node_modules/@aws-sdk/client-sts/dist-es/commands/GetSessionTokenCommand.js

@@ -7,9 +7,7 @@ import { de_GetSessionTokenCommand, se_GetSessionTokenCommand } from "../protoco
 export { $Command };
 export class GetSessionTokenCommand extends $Command
     .classBuilder()
-    .ep({
-    ...commonParams,
-})
+    .ep(commonParams)
     .m(function (Command, cs, config, o) {
     return [
         getSerdePlugin(config, this.serialize, this.deserialize),

package/node_modules/@aws-sdk/client-sts/dist-es/commands/index.js

@@ -1,6 +1,7 @@
 export * from "./AssumeRoleCommand";
 export * from "./AssumeRoleWithSAMLCommand";
 export * from "./AssumeRoleWithWebIdentityCommand";
+export * from "./AssumeRootCommand";
 export * from "./DecodeAuthorizationMessageCommand";
 export * from "./GetAccessKeyInfoCommand";
 export * from "./GetCallerIdentityCommand";

package/node_modules/@aws-sdk/client-sts/dist-es/defaultStsRoleAssumers.js

@@ -1,6 +1,16 @@
+import { setCredentialFeature } from "@aws-sdk/core/client";
 import { AssumeRoleCommand } from "./commands/AssumeRoleCommand";
 import { AssumeRoleWithWebIdentityCommand, } from "./commands/AssumeRoleWithWebIdentityCommand";
 const ASSUME_ROLE_DEFAULT_REGION = "us-east-1";
+const getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {
+    if (typeof assumedRoleUser?.Arn === "string") {
+        const arnComponents = assumedRoleUser.Arn.split(":");
+        if (arnComponents.length > 4 && arnComponents[4] !== "") {
+            return arnComponents[4];
+        }
+    }
+    return undefined;
+};
 const resolveRegion = async (_region, _parentRegion, credentialProviderLogger) => {
     const region = typeof _region === "function" ? await _region() : _region;
     const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
@@ -15,24 +25,29 @@ export const getDefaultRoleAssumer = (stsOptions, stsClientCtor) => {
         if (!stsClient) {
             const { logger = stsOptions?.parentClientConfig?.logger, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, } = stsOptions;
             const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger);
+            const isCompatibleRequestHandler = !isH2(requestHandler);
             stsClient = new stsClientCtor({
                 credentialDefaultProvider: () => async () => closureSourceCreds,
                 region: resolvedRegion,
-                requestHandler: requestHandler,
+                requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,
                 logger: logger,
             });
         }
-        const { Credentials } = await stsClient.send(new AssumeRoleCommand(params));
+        const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));
         if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
             throw new Error(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);
         }
-        return {
+        const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+        const credentials = {
             accessKeyId: Credentials.AccessKeyId,
             secretAccessKey: Credentials.SecretAccessKey,
             sessionToken: Credentials.SessionToken,
             expiration: Credentials.Expiration,
-            credentialScope: Credentials.CredentialScope,
+            ...(Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope }),
+            ...(accountId && { accountId }),
         };
+        setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE", "i");
+        return credentials;
     };
 };
 export const getDefaultRoleAssumerWithWebIdentity = (stsOptions, stsClientCtor) => {
@@ -41,23 +56,31 @@ export const getDefaultRoleAssumerWithWebIdentity = (stsOptions, stsClientCtor)
         if (!stsClient) {
             const { logger = stsOptions?.parentClientConfig?.logger, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, } = stsOptions;
             const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger);
+            const isCompatibleRequestHandler = !isH2(requestHandler);
             stsClient = new stsClientCtor({
                 region: resolvedRegion,
-                requestHandler: requestHandler,
+                requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,
                 logger: logger,
             });
         }
-        const { Credentials } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
+        const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
         if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
             throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${params.RoleArn}`);
         }
-        return {
+        const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+        const credentials = {
             accessKeyId: Credentials.AccessKeyId,
             secretAccessKey: Credentials.SecretAccessKey,
             sessionToken: Credentials.SessionToken,
             expiration: Credentials.Expiration,
-            credentialScope: Credentials.CredentialScope,
+            ...(Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope }),
+            ...(accountId && { accountId }),
         };
+        if (accountId) {
+            setCredentialFeature(credentials, "RESOLVED_ACCOUNT_ID", "T");
+        }
+        setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE_WEB_ID", "k");
+        return credentials;
     };
 };
 export const decorateDefaultCredentialProvider = (provider) => (input) => provider({
@@ -65,3 +88,6 @@ export const decorateDefaultCredentialProvider = (provider) => (input) => provid
     roleAssumerWithWebIdentity: getDefaultRoleAssumerWithWebIdentity(input, input.stsClientCtor),
     ...input,
 });
+const isH2 = (requestHandler) => {
+    return requestHandler?.metadata?.handlerProtocol === "h2";
+};

package/node_modules/@aws-sdk/client-sts/dist-es/endpoint/endpointResolver.js

@@ -1,8 +1,14 @@
-import { resolveEndpoint } from "@smithy/util-endpoints";
+import { awsEndpointFunctions } from "@aws-sdk/util-endpoints";
+import { customEndpointFunctions, EndpointCache, resolveEndpoint } from "@smithy/util-endpoints";
 import { ruleSet } from "./ruleset";
+const cache = new EndpointCache({
+    size: 50,
+    params: ["Endpoint", "Region", "UseDualStack", "UseFIPS", "UseGlobalEndpoint"],
+});
 export const defaultEndpointResolver = (endpointParams, context = {}) => {
-    return resolveEndpoint(ruleSet, {
+    return cache.get(endpointParams, () => resolveEndpoint(ruleSet, {
         endpointParams: endpointParams,
         logger: context.logger,
-    });
+    }));
 };
+customEndpointFunctions.aws = awsEndpointFunctions;

package/node_modules/@aws-sdk/client-sts/dist-es/index.js

@@ -2,6 +2,5 @@ export * from "./STSClient";
 export * from "./STS";
 export * from "./commands";
 export * from "./models";
-import "@aws-sdk/util-endpoints";
 export * from "./defaultRoleAssumers";
 export { STSServiceException } from "./models/STSServiceException";

package/node_modules/@aws-sdk/client-sts/dist-es/models/models_0.js

@@ -120,6 +120,10 @@ export const AssumeRoleWithWebIdentityResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Credentials && { Credentials: CredentialsFilterSensitiveLog(obj.Credentials) }),
 });
+export const AssumeRootResponseFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Credentials && { Credentials: CredentialsFilterSensitiveLog(obj.Credentials) }),
+});
 export const GetFederationTokenResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Credentials && { Credentials: CredentialsFilterSensitiveLog(obj.Credentials) }),

package/node_modules/@aws-sdk/client-sts/dist-es/protocols/Aws_query.js

@@ -1,6 +1,6 @@
+import { parseXmlBody as parseBody, parseXmlErrorBody as parseErrorBody } from "@aws-sdk/core";
 import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
-import { collectBody, decorateServiceException as __decorateServiceException, expectNonNull as __expectNonNull, expectString as __expectString, extendedEncodeURIComponent as __extendedEncodeURIComponent, getValueFromTextNode as __getValueFromTextNode, parseRfc3339DateTimeWithOffset as __parseRfc3339DateTimeWithOffset, strictParseInt32 as __strictParseInt32, withBaseException, } from "@smithy/smithy-client";
-import { XMLParser } from "fast-xml-parser";
+import { collectBody, decorateServiceException as __decorateServiceException, expectNonNull as __expectNonNull, expectString as __expectString, extendedEncodeURIComponent as __extendedEncodeURIComponent, parseRfc3339DateTimeWithOffset as __parseRfc3339DateTimeWithOffset, strictParseInt32 as __strictParseInt32, withBaseException, } from "@smithy/smithy-client";
 import { ExpiredTokenException, IDPCommunicationErrorException, IDPRejectedClaimException, InvalidAuthorizationMessageException, InvalidIdentityTokenException, MalformedPolicyDocumentException, PackedPolicyTooLargeException, RegionDisabledException, } from "../models/models_0";
 import { STSServiceException as __BaseException } from "../models/STSServiceException";
 export const se_AssumeRoleCommand = async (input, context) => {
@@ -33,6 +33,16 @@ export const se_AssumeRoleWithWebIdentityCommand = async (input, context) => {
     });
     return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
+export const se_AssumeRootCommand = async (input, context) => {
+    const headers = SHARED_HEADERS;
+    let body;
+    body = buildFormUrlencodedString({
+        ...se_AssumeRootRequest(input, context),
+        [_A]: _ARs,
+        [_V]: _,
+    });
+    return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
 export const se_DecodeAuthorizationMessageCommand = async (input, context) => {
     const headers = SHARED_HEADERS;
     let body;
@@ -122,6 +132,19 @@ export const de_AssumeRoleWithWebIdentityCommand = async (output, context) => {
     };
     return response;
 };
+export const de_AssumeRootCommand = async (output, context) => {
+    if (output.statusCode >= 300) {
+        return de_CommandError(output, context);
+    }
+    const data = await parseBody(output.body, context);
+    let contents = {};
+    contents = de_AssumeRootResponse(data.AssumeRootResult, context);
+    const response = {
+        $metadata: deserializeMetadata(output),
+        ...contents,
+    };
+    return response;
+};
 export const de_DecodeAuthorizationMessageCommand = async (output, context) => {
     if (output.statusCode >= 300) {
         return de_CommandError(output, context);
@@ -428,6 +451,23 @@ const se_AssumeRoleWithWebIdentityRequest = (input, context) => {
     }
     return entries;
 };
+const se_AssumeRootRequest = (input, context) => {
+    const entries = {};
+    if (input[_TP] != null) {
+        entries[_TP] = input[_TP];
+    }
+    if (input[_TPA] != null) {
+        const memberEntries = se_PolicyDescriptorType(input[_TPA], context);
+        Object.entries(memberEntries).forEach(([key, value]) => {
+            const loc = `TaskPolicyArn.${key}`;
+            entries[loc] = value;
+        });
+    }
+    if (input[_DS] != null) {
+        entries[_DS] = input[_DS];
+    }
+    return entries;
+};
 const se_DecodeAuthorizationMessageRequest = (input, context) => {
     const entries = {};
     if (input[_EM] != null) {
@@ -658,6 +698,16 @@ const de_AssumeRoleWithWebIdentityResponse = (output, context) => {
     }
     return contents;
 };
+const de_AssumeRootResponse = (output, context) => {
+    const contents = {};
+    if (output[_C] != null) {
+        contents[_C] = de_Credentials(output[_C], context);
+    }
+    if (output[_SI] != null) {
+        contents[_SI] = __expectString(output[_SI]);
+    }
+    return contents;
+};
 const de_Credentials = (output, context) => {
     const contents = {};
     if (output[_AKI] != null) {
@@ -824,6 +874,7 @@ const _ARI = "AssumedRoleId";
 const _ARU = "AssumedRoleUser";
 const _ARWSAML = "AssumeRoleWithSAML";
 const _ARWWI = "AssumeRoleWithWebIdentity";
+const _ARs = "AssumeRoot";
 const _Ac = "Account";
 const _Ar = "Arn";
 const _Au = "Audience";
@@ -865,6 +916,8 @@ const _ST = "SubjectType";
 const _STe = "SessionToken";
 const _T = "Tags";
 const _TC = "TokenCode";
+const _TP = "TargetPrincipal";
+const _TPA = "TaskPolicyArn";
 const _TTK = "TransitiveTagKeys";
 const _UI = "UserId";
 const _V = "Version";
@@ -872,38 +925,6 @@ const _Va = "Value";
 const _WIT = "WebIdentityToken";
 const _a = "arn";
 const _m = "message";
-const parseBody = (streamBody, context) => collectBodyString(streamBody, context).then((encoded) => {
-    if (encoded.length) {
-        const parser = new XMLParser({
-            attributeNamePrefix: "",
-            htmlEntities: true,
-            ignoreAttributes: false,
-            ignoreDeclaration: true,
-            parseTagValue: false,
-            trimValues: false,
-            tagValueProcessor: (_, val) => (val.trim() === "" && val.includes("\n") ? "" : undefined),
-        });
-        parser.addEntity("#xD", "\r");
-        parser.addEntity("#10", "\n");
-        const parsedObj = parser.parse(encoded);
-        const textNodeName = "#text";
-        const key = Object.keys(parsedObj)[0];
-        const parsedObjToReturn = parsedObj[key];
-        if (parsedObjToReturn[textNodeName]) {
-            parsedObjToReturn[key] = parsedObjToReturn[textNodeName];
-            delete parsedObjToReturn[textNodeName];
-        }
-        return __getValueFromTextNode(parsedObjToReturn);
-    }
-    return {};
-});
-const parseErrorBody = async (errorBody, context) => {
-    const value = await parseBody(errorBody, context);
-    if (value.Error) {
-        value.Error.message = value.Error.message ?? value.Error.Message;
-    }
-    return value;
-};
 const buildFormUrlencodedString = (formEntries) => Object.entries(formEntries)
     .map(([key, value]) => __extendedEncodeURIComponent(key) + "=" + __extendedEncodeURIComponent(value))
     .join("&");

package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.browser.js

@@ -1,6 +1,6 @@
 import packageInfo from "../package.json";
 import { Sha256 } from "@aws-crypto/sha256-browser";
-import { defaultUserAgent } from "@aws-sdk/util-user-agent-browser";
+import { createDefaultUserAgentProvider } from "@aws-sdk/util-user-agent-browser";
 import { DEFAULT_USE_DUALSTACK_ENDPOINT, DEFAULT_USE_FIPS_ENDPOINT } from "@smithy/config-resolver";
 import { FetchHttpHandler as RequestHandler, streamCollector } from "@smithy/fetch-http-handler";
 import { invalidProvider } from "@smithy/invalid-dependency";
@@ -21,7 +21,7 @@ export const getRuntimeConfig = (config) => {
         bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
         credentialDefaultProvider: config?.credentialDefaultProvider ?? ((_) => () => Promise.reject(new Error("Credential is missing"))),
         defaultUserAgentProvider: config?.defaultUserAgentProvider ??
-            defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
+            createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
         maxAttempts: config?.maxAttempts ?? DEFAULT_MAX_ATTEMPTS,
         region: config?.region ?? invalidProvider("Region is missing"),
         requestHandler: RequestHandler.create(config?.requestHandler ?? defaultConfigProvider),

package/node_modules/@aws-sdk/client-sts/dist-es/runtimeConfig.js

@@ -1,7 +1,7 @@
 import packageInfo from "../package.json";
-import { defaultProvider as credentialDefaultProvider } from "./credentialDefaultProvider";
 import { AwsSdkSigV4Signer, emitWarningIfUnsupportedVersion as awsCheckVersion } from "@aws-sdk/core";
-import { defaultUserAgent } from "@aws-sdk/util-user-agent-node";
+import { defaultProvider as credentialDefaultProvider } from "@aws-sdk/credential-provider-node";
+import { NODE_APP_ID_CONFIG_OPTIONS, createDefaultUserAgentProvider } from "@aws-sdk/util-user-agent-node";
 import { NODE_REGION_CONFIG_FILE_OPTIONS, NODE_REGION_CONFIG_OPTIONS, NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, } from "@smithy/config-resolver";
 import { NoAuthSigner } from "@smithy/core";
 import { Hash } from "@smithy/hash-node";
@@ -28,7 +28,7 @@ export const getRuntimeConfig = (config) => {
         bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
         credentialDefaultProvider: config?.credentialDefaultProvider ?? credentialDefaultProvider,
         defaultUserAgentProvider: config?.defaultUserAgentProvider ??
-            defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
+            createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
         httpAuthSchemes: config?.httpAuthSchemes ?? [
             {
                 schemeId: "aws.auth#sigv4",
@@ -54,5 +54,6 @@ export const getRuntimeConfig = (config) => {
         streamCollector: config?.streamCollector ?? streamCollector,
         useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS),
         useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS),
+        userAgentAppId: config?.userAgentAppId ?? loadNodeConfig(NODE_APP_ID_CONFIG_OPTIONS),
     };
 };

package/node_modules/@aws-sdk/client-sts/dist-types/STS.d.ts

@@ -2,6 +2,7 @@ import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
 import { AssumeRoleCommandInput, AssumeRoleCommandOutput } from "./commands/AssumeRoleCommand";
 import { AssumeRoleWithSAMLCommandInput, AssumeRoleWithSAMLCommandOutput } from "./commands/AssumeRoleWithSAMLCommand";
 import { AssumeRoleWithWebIdentityCommandInput, AssumeRoleWithWebIdentityCommandOutput } from "./commands/AssumeRoleWithWebIdentityCommand";
+import { AssumeRootCommandInput, AssumeRootCommandOutput } from "./commands/AssumeRootCommand";
 import { DecodeAuthorizationMessageCommandInput, DecodeAuthorizationMessageCommandOutput } from "./commands/DecodeAuthorizationMessageCommand";
 import { GetAccessKeyInfoCommandInput, GetAccessKeyInfoCommandOutput } from "./commands/GetAccessKeyInfoCommand";
 import { GetCallerIdentityCommandInput, GetCallerIdentityCommandOutput } from "./commands/GetCallerIdentityCommand";
@@ -27,6 +28,12 @@ export interface STS {
     assumeRoleWithWebIdentity(args: AssumeRoleWithWebIdentityCommandInput, options?: __HttpHandlerOptions): Promise<AssumeRoleWithWebIdentityCommandOutput>;
     assumeRoleWithWebIdentity(args: AssumeRoleWithWebIdentityCommandInput, cb: (err: any, data?: AssumeRoleWithWebIdentityCommandOutput) => void): void;
     assumeRoleWithWebIdentity(args: AssumeRoleWithWebIdentityCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AssumeRoleWithWebIdentityCommandOutput) => void): void;
+    /**
+     * @see {@link AssumeRootCommand}
+     */
+    assumeRoot(args: AssumeRootCommandInput, options?: __HttpHandlerOptions): Promise<AssumeRootCommandOutput>;
+    assumeRoot(args: AssumeRootCommandInput, cb: (err: any, data?: AssumeRootCommandOutput) => void): void;
+    assumeRoot(args: AssumeRootCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AssumeRootCommandOutput) => void): void;
     /**
      * @see {@link DecodeAuthorizationMessageCommand}
      */
@@ -42,6 +49,7 @@ export interface STS {
     /**
      * @see {@link GetCallerIdentityCommand}
      */
+    getCallerIdentity(): Promise<GetCallerIdentityCommandOutput>;
     getCallerIdentity(args: GetCallerIdentityCommandInput, options?: __HttpHandlerOptions): Promise<GetCallerIdentityCommandOutput>;
     getCallerIdentity(args: GetCallerIdentityCommandInput, cb: (err: any, data?: GetCallerIdentityCommandOutput) => void): void;
     getCallerIdentity(args: GetCallerIdentityCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetCallerIdentityCommandOutput) => void): void;
@@ -54,16 +62,17 @@ export interface STS {
     /**
      * @see {@link GetSessionTokenCommand}
      */
+    getSessionToken(): Promise<GetSessionTokenCommandOutput>;
     getSessionToken(args: GetSessionTokenCommandInput, options?: __HttpHandlerOptions): Promise<GetSessionTokenCommandOutput>;
     getSessionToken(args: GetSessionTokenCommandInput, cb: (err: any, data?: GetSessionTokenCommandOutput) => void): void;
     getSessionToken(args: GetSessionTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetSessionTokenCommandOutput) => void): void;
 }
 /**
- * @public
  * <fullname>Security Token Service</fullname>
  *          <p>Security Token Service (STS) enables you to request temporary, limited-privilege
  *       credentials for users. This guide provides descriptions of the STS API. For
  *       more information about using this service, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary Security Credentials</a>.</p>
+ * @public
  */
 export declare class STS extends STSClient implements STS {
 }

package/node_modules/@aws-sdk/client-sts/dist-types/STSClient.d.ts

@@ -10,6 +10,7 @@ import { HttpAuthSchemeInputConfig, HttpAuthSchemeResolvedConfig } from "./auth/
 import { AssumeRoleCommandInput, AssumeRoleCommandOutput } from "./commands/AssumeRoleCommand";
 import { AssumeRoleWithSAMLCommandInput, AssumeRoleWithSAMLCommandOutput } from "./commands/AssumeRoleWithSAMLCommand";
 import { AssumeRoleWithWebIdentityCommandInput, AssumeRoleWithWebIdentityCommandOutput } from "./commands/AssumeRoleWithWebIdentityCommand";
+import { AssumeRootCommandInput, AssumeRootCommandOutput } from "./commands/AssumeRootCommand";
 import { DecodeAuthorizationMessageCommandInput, DecodeAuthorizationMessageCommandOutput } from "./commands/DecodeAuthorizationMessageCommand";
 import { GetAccessKeyInfoCommandInput, GetAccessKeyInfoCommandOutput } from "./commands/GetAccessKeyInfoCommand";
 import { GetCallerIdentityCommandInput, GetCallerIdentityCommandOutput } from "./commands/GetCallerIdentityCommand";
@@ -21,11 +22,11 @@ export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = AssumeRoleCommandInput | AssumeRoleWithSAMLCommandInput | AssumeRoleWithWebIdentityCommandInput | DecodeAuthorizationMessageCommandInput | GetAccessKeyInfoCommandInput | GetCallerIdentityCommandInput | GetFederationTokenCommandInput | GetSessionTokenCommandInput;
+export type ServiceInputTypes = AssumeRoleCommandInput | AssumeRoleWithSAMLCommandInput | AssumeRoleWithWebIdentityCommandInput | AssumeRootCommandInput | DecodeAuthorizationMessageCommandInput | GetAccessKeyInfoCommandInput | GetCallerIdentityCommandInput | GetFederationTokenCommandInput | GetSessionTokenCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = AssumeRoleCommandOutput | AssumeRoleWithSAMLCommandOutput | AssumeRoleWithWebIdentityCommandOutput | DecodeAuthorizationMessageCommandOutput | GetAccessKeyInfoCommandOutput | GetCallerIdentityCommandOutput | GetFederationTokenCommandOutput | GetSessionTokenCommandOutput;
+export type ServiceOutputTypes = AssumeRoleCommandOutput | AssumeRoleWithSAMLCommandOutput | AssumeRoleWithWebIdentityCommandOutput | AssumeRootCommandOutput | DecodeAuthorizationMessageCommandOutput | GetAccessKeyInfoCommandOutput | GetCallerIdentityCommandOutput | GetFederationTokenCommandOutput | GetSessionTokenCommandOutput;
 /**
  * @public
  */
@@ -98,15 +99,15 @@ export interface ClientDefaults extends Partial<__SmithyConfiguration<__HttpHand
      * Enables FIPS compatible endpoints.
      */
     useFipsEndpoint?: boolean | __Provider<boolean>;
+    /**
+     * The AWS region to which this client will send requests
+     */
+    region?: string | __Provider<string>;
     /**
      * The provider populating default tracking information to be sent with `user-agent`, `x-amz-user-agent` header
      * @internal
      */
     defaultUserAgentProvider?: Provider<__UserAgent>;
-    /**
-     * The AWS region to which this client will send requests
-     */
-    region?: string | __Provider<string>;
     /**
      * Default credentials provider; Not available in browser runtime.
      * @deprecated
@@ -139,7 +140,7 @@ export interface ClientDefaults extends Partial<__SmithyConfiguration<__HttpHand
 /**
  * @public
  */
-export type STSClientConfigType = Partial<__SmithyConfiguration<__HttpHandlerOptions>> & ClientDefaults & RegionInputConfig & EndpointInputConfig<EndpointParameters> & RetryInputConfig & HostHeaderInputConfig & UserAgentInputConfig & HttpAuthSchemeInputConfig & ClientInputEndpointParameters;
+export type STSClientConfigType = Partial<__SmithyConfiguration<__HttpHandlerOptions>> & ClientDefaults & UserAgentInputConfig & RetryInputConfig & RegionInputConfig & HostHeaderInputConfig & EndpointInputConfig<EndpointParameters> & HttpAuthSchemeInputConfig & ClientInputEndpointParameters;
 /**
  * @public
  *
@@ -150,7 +151,7 @@ export interface STSClientConfig extends STSClientConfigType {
 /**
  * @public
  */
-export type STSClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHandlerOptions> & Required<ClientDefaults> & RuntimeExtensionsConfig & RegionResolvedConfig & EndpointResolvedConfig<EndpointParameters> & RetryResolvedConfig & HostHeaderResolvedConfig & UserAgentResolvedConfig & HttpAuthSchemeResolvedConfig & ClientResolvedEndpointParameters;
+export type STSClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHandlerOptions> & Required<ClientDefaults> & RuntimeExtensionsConfig & UserAgentResolvedConfig & RetryResolvedConfig & RegionResolvedConfig & HostHeaderResolvedConfig & EndpointResolvedConfig<EndpointParameters> & HttpAuthSchemeResolvedConfig & ClientResolvedEndpointParameters;
 /**
  * @public
  *
@@ -159,11 +160,11 @@ export type STSClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHa
 export interface STSClientResolvedConfig extends STSClientResolvedConfigType {
 }
 /**
- * @public
  * <fullname>Security Token Service</fullname>
  *          <p>Security Token Service (STS) enables you to request temporary, limited-privilege
  *       credentials for users. This guide provides descriptions of the STS API. For
  *       more information about using this service, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary Security Credentials</a>.</p>
+ * @public
  */
 export declare class STSClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, STSClientResolvedConfig> {
     /**
@@ -177,6 +178,4 @@ export declare class STSClient extends __Client<__HttpHandlerOptions, ServiceInp
      * Otherwise, sockets might stay open for quite a long time before the server terminates them.
      */
     destroy(): void;
-    private getDefaultHttpAuthSchemeParametersProvider;
-    private getIdentityProviderConfigProvider;
 }

package/node_modules/@aws-sdk/client-sts/dist-types/auth/httpAuthSchemeProvider.d.ts

@@ -40,12 +40,12 @@ export declare const resolveStsAuthConfig: <T>(input: T & StsAuthInputConfig) =>
  */
 export interface HttpAuthSchemeInputConfig extends StsAuthInputConfig, AwsSdkSigV4AuthInputConfig {
     /**
-     * experimentalIdentityAndAuth: Configuration of HttpAuthSchemes for a client which provides default identity providers and signers per auth scheme.
+     * Configuration of HttpAuthSchemes for a client which provides default identity providers and signers per auth scheme.
      * @internal
      */
     httpAuthSchemes?: HttpAuthScheme[];
     /**
-     * experimentalIdentityAndAuth: Configuration of an HttpAuthSchemeProvider for a client which resolves which HttpAuthScheme to use.
+     * Configuration of an HttpAuthSchemeProvider for a client which resolves which HttpAuthScheme to use.
      * @internal
      */
     httpAuthSchemeProvider?: STSHttpAuthSchemeProvider;
@@ -55,12 +55,12 @@ export interface HttpAuthSchemeInputConfig extends StsAuthInputConfig, AwsSdkSig
  */
 export interface HttpAuthSchemeResolvedConfig extends StsAuthResolvedConfig, AwsSdkSigV4AuthResolvedConfig {
     /**
-     * experimentalIdentityAndAuth: Configuration of HttpAuthSchemes for a client which provides default identity providers and signers per auth scheme.
+     * Configuration of HttpAuthSchemes for a client which provides default identity providers and signers per auth scheme.
      * @internal
      */
     readonly httpAuthSchemes: HttpAuthScheme[];
     /**
-     * experimentalIdentityAndAuth: Configuration of an HttpAuthSchemeProvider for a client which resolves which HttpAuthScheme to use.
+     * Configuration of an HttpAuthSchemeProvider for a client which resolves which HttpAuthScheme to use.
      * @internal
      */
     readonly httpAuthSchemeProvider: STSHttpAuthSchemeProvider;