AWS SDK

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/operation/create_token_with_iam/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::create_token_with_iam::_create_token_with_iam_output::CreateTokenWithIamOutputBuilder;
--
 pub use crate::operation::create_token_with_iam::_create_token_with_iam_input::CreateTokenWithIamInputBuilder;
-3
 pub use crate::operation::create_token_with_iam::_create_token_with_iam_output::CreateTokenWithIamOutputBuilder;
-+
 impl crate::operation::create_token_with_iam::builders::CreateTokenWithIamInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::create_token_with_iam::CreateTokenWithIamOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::create_token_with_iam::CreateTokenWithIAMError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.create_token_with_iam();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `CreateTokenWithIAM`.
 ///
 /// <p>Creates and returns access and refresh tokens for authorized client applications that are authenticated using any IAM entity, such as a service role or user. These tokens might contain defined scopes that specify permissions such as <code>read:profile</code> or <code>write:data</code>. Through downscoping, you can use the scopes parameter to request tokens with reduced permissions compared to the original client application's permissions or, if applicable, the refresh token's scopes. The access token can be used to fetch short-lived credentials for the assigned Amazon Web Services accounts or to access application APIs using <code>bearer</code> authentication.</p><note>
 /// <p>This API is used with Signature Version 4. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html">Amazon Web Services Signature Version 4 for API Requests</a>.</p>
 /// </note>
 #[derive(::std::clone::Clone, ::std::fmt::Debug)]
 pub struct CreateTokenWithIAMFluentBuilder {
     handle: ::std::sync::Arc<crate::client::Handle>,
     inner: crate::operation::create_token_with_iam::builders::CreateTokenWithIamInputBuilder,
     config_override: ::std::option::Option<crate::config::Builder>,
-33
+}
 impl
     crate::client::customize::internal::CustomizableSend<

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/operation/register_client.rs

@@ -378,378 +417,417 @@

↥ Expand context

     fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
         match self {
             Self::InternalServerException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidClientMetadataException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidRedirectUriException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidRequestException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidScopeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::SlowDownException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::UnsupportedGrantTypeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::Unhandled(_inner) => &_inner.meta,
-388
+        }
-389
+    }
-390
+}
 impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for RegisterClientError {
     fn create_unhandled_error(
         source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
         meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
     ) -> Self {
         Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
             source,

             meta: meta.unwrap_or_default(),
         })
-400
+    }
-401
+}
 impl ::aws_types::request_id::RequestId for crate::operation::register_client::RegisterClientError {
     fn request_id(&self) -> Option<&str> {
         self.meta().request_id()
-405
+    }
-406
+}
-407
 pub use crate::operation::register_client::_register_client_output::RegisterClientOutput;
--
 pub use crate::operation::register_client::_register_client_input::RegisterClientInput;
-409
 pub use crate::operation::register_client::_register_client_output::RegisterClientOutput;
-+
 mod _register_client_input;
-413
 mod _register_client_output;
-415
 /// Builders
 pub mod builders;

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/operation/register_client/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::register_client::_register_client_output::RegisterClientOutputBuilder;
--
 pub use crate::operation::register_client::_register_client_input::RegisterClientInputBuilder;
-3
 pub use crate::operation::register_client::_register_client_output::RegisterClientOutputBuilder;
-+
 impl crate::operation::register_client::builders::RegisterClientInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::register_client::RegisterClientOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::register_client::RegisterClientError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.register_client();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `RegisterClient`.
 ///
 /// <p>Registers a public&nbsp;client with IAM Identity Center. This allows clients to&nbsp;perform authorization using the&nbsp;authorization code&nbsp;grant&nbsp;with Proof Key for Code Exchange (PKCE) or&nbsp;the&nbsp;device code&nbsp;grant.</p>
 #[derive(::std::clone::Clone, ::std::fmt::Debug)]
 pub struct RegisterClientFluentBuilder {
     handle: ::std::sync::Arc<crate::client::Handle>,
     inner: crate::operation::register_client::builders::RegisterClientInputBuilder,
     config_override: ::std::option::Option<crate::config::Builder>,
-31
+}
 impl
     crate::client::customize::internal::CustomizableSend<
         crate::operation::register_client::RegisterClientOutput,
         crate::operation::register_client::RegisterClientError,

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/operation/start_device_authorization.rs

@@ -359,359 +398,398 @@

↥ Expand context

-359
+}
 impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for StartDeviceAuthorizationError {
     fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
         match self {
             Self::InternalServerException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidClientException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidRequestException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::SlowDownException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::UnauthorizedClientException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::Unhandled(_inner) => &_inner.meta,
-369
+        }
-370
+    }
-371
+}
 impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for StartDeviceAuthorizationError {
     fn create_unhandled_error(
         source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
         meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
     ) -> Self {
         Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
             source,

             meta: meta.unwrap_or_default(),
         })
-381
+    }
-382
+}
 impl ::aws_types::request_id::RequestId for crate::operation::start_device_authorization::StartDeviceAuthorizationError {
     fn request_id(&self) -> Option<&str> {
         self.meta().request_id()
-386
+    }
-387
+}
-388
 pub use crate::operation::start_device_authorization::_start_device_authorization_output::StartDeviceAuthorizationOutput;
--
 pub use crate::operation::start_device_authorization::_start_device_authorization_input::StartDeviceAuthorizationInput;
-390
 pub use crate::operation::start_device_authorization::_start_device_authorization_output::StartDeviceAuthorizationOutput;
-+
 mod _start_device_authorization_input;
-394
 mod _start_device_authorization_output;
-396
 /// Builders
 pub mod builders;

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/operation/start_device_authorization/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::start_device_authorization::_start_device_authorization_output::StartDeviceAuthorizationOutputBuilder;
--
 pub use crate::operation::start_device_authorization::_start_device_authorization_input::StartDeviceAuthorizationInputBuilder;
-3
 pub use crate::operation::start_device_authorization::_start_device_authorization_output::StartDeviceAuthorizationOutputBuilder;
-+
 impl crate::operation::start_device_authorization::builders::StartDeviceAuthorizationInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::start_device_authorization::StartDeviceAuthorizationOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::start_device_authorization::StartDeviceAuthorizationError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.start_device_authorization();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `StartDeviceAuthorization`.
 ///
 /// <p>Initiates device authorization by requesting a pair of verification codes from the authorization service.</p>
 #[derive(::std::clone::Clone, ::std::fmt::Debug)]
 pub struct StartDeviceAuthorizationFluentBuilder {
     handle: ::std::sync::Arc<crate::client::Handle>,
     inner: crate::operation::start_device_authorization::builders::StartDeviceAuthorizationInputBuilder,
     config_override: ::std::option::Option<crate::config::Builder>,
-31
+}
 impl
     crate::client::customize::internal::CustomizableSend<
         crate::operation::start_device_authorization::StartDeviceAuthorizationOutput,
         crate::operation::start_device_authorization::StartDeviceAuthorizationError,

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/primitives.rs

@@ -1,1 +6,9 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use ::aws_smithy_types::date_time::Format as DateTimeFormat;
 pub use ::aws_smithy_types::Blob;
 pub use ::aws_smithy_types::DateTime;
-5
 /// Event stream related primitives such as `Message` or `Header`.
 pub mod event_stream;
-8
 pub(crate) mod sealed_enum_unknown;

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/types.rs

@@ -1,1 +18,18 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::types::_invalid_request_exception_reason::InvalidRequestExceptionReason;
--
 pub use crate::types::_access_denied_exception_reason::AccessDeniedExceptionReason;
-3
 pub use crate::types::_invalid_request_exception_reason::InvalidRequestExceptionReason;
-+
 pub use crate::types::_aws_additional_details::AwsAdditionalDetails;
-7
 mod _access_denied_exception_reason;
-9
 mod _aws_additional_details;
-11
 mod _invalid_request_exception_reason;
-13
 /// Builders
 pub mod builders;

↧ Expand context

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/types/error.rs

@@ -1,1 +58,58 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::types::error::_unauthorized_client_exception::UnauthorizedClientException;
 pub use crate::types::error::_access_denied_exception::AccessDeniedException;
-3
 pub use crate::types::error::_slow_down_exception::SlowDownException;
 pub use crate::types::error::_authorization_pending_exception::AuthorizationPendingException;
-5
 pub use crate::types::error::_invalid_request_exception::InvalidRequestException;
 pub use crate::types::error::_expired_token_exception::ExpiredTokenException;
-+
 pub use crate::types::error::_internal_server_exception::InternalServerException;
-9
 pub use crate::types::error::_invalid_client_exception::InvalidClientException;
-11
 pub use crate::types::error::_internal_server_exception::InternalServerException;
 pub use crate::types::error::_invalid_grant_exception::InvalidGrantException;
-13
 pub use crate::types::error::_unsupported_grant_type_exception::UnsupportedGrantTypeException;
 pub use crate::types::error::_invalid_request_exception::InvalidRequestException;
-15
 pub use crate::types::error::_invalid_scope_exception::InvalidScopeException;
-17
 pub use crate::types::error::_invalid_redirect_uri_exception::InvalidRedirectUriException;
--
 pub use crate::types::error::_invalid_client_metadata_exception::InvalidClientMetadataException;
 pub use crate::types::error::_slow_down_exception::SlowDownException;
-19
 pub use crate::types::error::_invalid_request_region_exception::InvalidRequestRegionException;
 pub use crate::types::error::_unauthorized_client_exception::UnauthorizedClientException;
-21
 pub use crate::types::error::_invalid_grant_exception::InvalidGrantException;
 pub use crate::types::error::_unsupported_grant_type_exception::UnsupportedGrantTypeException;
-23
 pub use crate::types::error::_expired_token_exception::ExpiredTokenException;
 pub use crate::types::error::_invalid_request_region_exception::InvalidRequestRegionException;
-25
 pub use crate::types::error::_authorization_pending_exception::AuthorizationPendingException;
 pub use crate::types::error::_invalid_client_metadata_exception::InvalidClientMetadataException;
-27
 pub use crate::types::error::_access_denied_exception::AccessDeniedException;
 pub use crate::types::error::_invalid_redirect_uri_exception::InvalidRedirectUriException;
-29
 mod _access_denied_exception;
-31
 mod _authorization_pending_exception;
-33
 mod _expired_token_exception;
-35
 mod _internal_server_exception;
-37
 mod _invalid_client_exception;

↧ Expand context

-39
 mod _invalid_client_metadata_exception;
-41
 mod _invalid_grant_exception;
-43
 mod _invalid_redirect_uri_exception;
-45
 mod _invalid_request_exception;
-47
 mod _invalid_request_region_exception;
-49
 mod _invalid_scope_exception;
-51
 mod _slow_down_exception;
-53
 mod _unauthorized_client_exception;
-55
 mod _unsupported_grant_type_exception;
-57
 /// Builders

tmp-codegen-diff/aws-sdk/sdk/ssooidc/src/types/error/builders.rs

@@ -1,1 +0,28 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::types::error::_unauthorized_client_exception::UnauthorizedClientExceptionBuilder;
 pub use crate::types::error::_access_denied_exception::AccessDeniedExceptionBuilder;
-3
 pub use crate::types::error::_slow_down_exception::SlowDownExceptionBuilder;
 pub use crate::types::error::_authorization_pending_exception::AuthorizationPendingExceptionBuilder;
-5
 pub use crate::types::error::_invalid_request_exception::InvalidRequestExceptionBuilder;
 pub use crate::types::error::_expired_token_exception::ExpiredTokenExceptionBuilder;
-+
 pub use crate::types::error::_internal_server_exception::InternalServerExceptionBuilder;
-9
 pub use crate::types::error::_invalid_client_exception::InvalidClientExceptionBuilder;
-11
 pub use crate::types::error::_internal_server_exception::InternalServerExceptionBuilder;
 pub use crate::types::error::_invalid_grant_exception::InvalidGrantExceptionBuilder;
-13
 pub use crate::types::error::_unsupported_grant_type_exception::UnsupportedGrantTypeExceptionBuilder;
 pub use crate::types::error::_invalid_request_exception::InvalidRequestExceptionBuilder;
-15
 pub use crate::types::error::_invalid_scope_exception::InvalidScopeExceptionBuilder;
-17
 pub use crate::types::error::_invalid_redirect_uri_exception::InvalidRedirectUriExceptionBuilder;
--
 pub use crate::types::error::_invalid_client_metadata_exception::InvalidClientMetadataExceptionBuilder;
 pub use crate::types::error::_slow_down_exception::SlowDownExceptionBuilder;
-19
 pub use crate::types::error::_invalid_request_region_exception::InvalidRequestRegionExceptionBuilder;
 pub use crate::types::error::_unauthorized_client_exception::UnauthorizedClientExceptionBuilder;
-21
 pub use crate::types::error::_invalid_grant_exception::InvalidGrantExceptionBuilder;
 pub use crate::types::error::_unsupported_grant_type_exception::UnsupportedGrantTypeExceptionBuilder;
-23
 pub use crate::types::error::_expired_token_exception::ExpiredTokenExceptionBuilder;
 pub use crate::types::error::_invalid_request_region_exception::InvalidRequestRegionExceptionBuilder;
-25
 pub use crate::types::error::_authorization_pending_exception::AuthorizationPendingExceptionBuilder;
 pub use crate::types::error::_invalid_client_metadata_exception::InvalidClientMetadataExceptionBuilder;
-27
 pub use crate::types::error::_access_denied_exception::AccessDeniedExceptionBuilder;
 pub use crate::types::error::_invalid_redirect_uri_exception::InvalidRedirectUriExceptionBuilder;

tmp-codegen-diff/aws-sdk/sdk/sts/src/lib.rs

@@ -1,1 +44,45 @@

↥ Expand context

 #![allow(deprecated)]
 #![allow(unknown_lints)]
 #![allow(clippy::module_inception)]
 #![allow(clippy::upper_case_acronyms)]

 #![allow(clippy::large_enum_variant)]
 #![allow(clippy::wrong_self_convention)]
 #![allow(clippy::should_implement_trait)]
 #![allow(clippy::disallowed_names)]
 #![allow(clippy::vec_init_then_push)]
 #![allow(clippy::type_complexity)]
 #![allow(clippy::needless_return)]
 #![allow(clippy::derive_partial_eq_without_eq)]
 #![allow(clippy::result_large_err)]
 #![allow(clippy::unnecessary_map_on_constructor)]
 #![allow(clippy::useless_conversion)]
 #![allow(clippy::deprecated_semver)]
 #![allow(rustdoc::bare_urls)]
 #![allow(rustdoc::redundant_explicit_links)]
 #![allow(rustdoc::broken_intra_doc_links)]
 #![allow(rustdoc::invalid_html_tags)]
 #![forbid(unsafe_code)]
 #![warn(missing_docs)]
 #![cfg_attr(docsrs, feature(doc_cfg))]
 //! Security Token Service (STS) enables you to request temporary, limited-privilege credentials for users. This guide provides descriptions of the STS API. For more information about using this service, see [Temporary Security Credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html).
 //!

↧ Expand context

 //! ## Getting Started
 //!
 //! > Examples are available for many services and operations, check out the
 //! > [usage examples](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/rustv1).
 //!
 //! The SDK provides one crate per AWS service. You must add [Tokio](https://crates.io/crates/tokio)
 //! as a dependency within your Rust project to execute asynchronous code. To add `aws-sdk-sts` to
 //! your project, add the following to your **Cargo.toml** file:
 //!
 //! ```toml
 //! [dependencies]
 //! aws-config = { version = "1.1.7", features = ["behavior-version-latest"] }
 //! aws-sdk-sts = "0.0.0-local"
 //! tokio = { version = "1", features = ["full"] }
 //! ```
 //!
 //! Then in code, a client can be created with the following:
 //!
 //! ```rust,ignore
 //! use aws_sdk_sts as sts;

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role.rs

@@ -356,356 +395,395 @@

↥ Expand context

-356
+    }
-357
+}
 impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleError {
     fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
         match self {
             Self::ExpiredTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::MalformedPolicyDocumentException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::PackedPolicyTooLargeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::RegionDisabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::Unhandled(_inner) => &_inner.meta,
-366
+        }
-367
+    }
-368
+}
 impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleError {
     fn create_unhandled_error(
         source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
         meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
     ) -> Self {
         Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
             source,

             meta: meta.unwrap_or_default(),
         })
-378
+    }
-379
+}
 impl ::aws_types::request_id::RequestId for crate::operation::assume_role::AssumeRoleError {
     fn request_id(&self) -> Option<&str> {
         self.meta().request_id()
-383
+    }
-384
+}
-385
 pub use crate::operation::assume_role::_assume_role_output::AssumeRoleOutput;
--
 pub use crate::operation::assume_role::_assume_role_input::AssumeRoleInput;
-387
 pub use crate::operation::assume_role::_assume_role_output::AssumeRoleOutput;
-+
 mod _assume_role_input;
-391
 mod _assume_role_output;
-393
 /// Builders
 pub mod builders;

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::assume_role::_assume_role_output::AssumeRoleOutputBuilder;
--
 pub use crate::operation::assume_role::_assume_role_input::AssumeRoleInputBuilder;
-3
 pub use crate::operation::assume_role::_assume_role_output::AssumeRoleOutputBuilder;
-+
 impl crate::operation::assume_role::builders::AssumeRoleInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::assume_role::AssumeRoleOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::assume_role::AssumeRoleError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.assume_role();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `AssumeRole`.
 ///
 /// <p>Returns a set of temporary security credentials that you can use to access Amazon Web Services resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use <code>AssumeRole</code> within your account or for cross-account access. For a comparison of <code>AssumeRole</code> with other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_sts-comparison.html">Compare STS credentials</a> in the <i>IAM User Guide</i>.</p>
 /// <p><b>Permissions</b></p>
 /// <p>The temporary security credentials created by <code>AssumeRole</code> can be used to make API calls to any Amazon Web Services service with the following exception: You cannot call the Amazon Web Services STS <code>GetFederationToken</code> or <code>GetSessionToken</code> API operations.</p>
 /// <p>(Optional) You can pass inline or managed session policies to this operation. You can pass a single JSON policy document to use as an inline session policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as managed session policies. The plaintext that you use for both inline and managed session policies can't exceed 2,048 characters. Passing policies to this operation returns new temporary credentials. The resulting session's permissions are the intersection of the role's identity-based policy and the session policies. You can use the role's temporary credentials in subsequent Amazon Web Services API calls to access resources in the account that owns the role. You cannot use session policies to grant more permissions than those allowed by the identity-based policy of the role that is being assumed. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in the <i>IAM User Guide</i>.</p>
 /// <p>When you create a role, you create two policies: a role trust policy that specifies <i>who</i> can assume the role, and a permissions policy that specifies <i>what</i> can be done with the role. You specify the trusted principal that is allowed to assume the role in the role trust policy.</p>
 /// <p>To assume a role from a different account, your Amazon Web Services account must be trusted by the role. The trust relationship is defined in the role's trust policy when the role is created. That trust policy states which accounts are allowed to delegate that access to users in the account.</p>
 /// <p>A user who wants to access a role in a different account must also have permissions that are delegated from the account administrator. The administrator must attach a policy that allows the user to call <code>AssumeRole</code> for the ARN of the role in the other account.</p>
 /// <p>To allow a user to assume a role in the same account, you can do either of the following:</p>
 /// <ul>
 /// <li>
 /// <p>Attach a policy to the user that allows the user to call <code>AssumeRole</code> (as long as the role's trust policy trusts the account).</p></li>

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role_with_saml.rs

@@ -370,370 +409,409 @@

↥ Expand context

 impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleWithSAMLError {
     fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
         match self {
             Self::ExpiredTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::IdpRejectedClaimException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidIdentityTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::MalformedPolicyDocumentException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::PackedPolicyTooLargeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::RegionDisabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::Unhandled(_inner) => &_inner.meta,
-380
+        }
-381
+    }
-382
+}
 impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleWithSAMLError {
     fn create_unhandled_error(
         source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
         meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
     ) -> Self {
         Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
             source,

             meta: meta.unwrap_or_default(),
         })
-392
+    }
-393
+}
 impl ::aws_types::request_id::RequestId for crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError {
     fn request_id(&self) -> Option<&str> {
         self.meta().request_id()
-397
+    }
-398
+}
-399
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutput;
--
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_input::AssumeRoleWithSamlInput;
-401
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutput;
-+
 mod _assume_role_with_saml_input;
-405
 mod _assume_role_with_saml_output;
-407
 /// Builders
 pub mod builders;

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role_with_saml/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutputBuilder;
--
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_input::AssumeRoleWithSamlInputBuilder;
-3
 pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutputBuilder;
-+
 impl crate::operation::assume_role_with_saml::builders::AssumeRoleWithSamlInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::assume_role_with_saml::AssumeRoleWithSamlOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.assume_role_with_saml();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `AssumeRoleWithSAML`.
 ///
 /// <p>Returns a set of temporary security credentials for users who have been authenticated via a SAML authentication response. This operation provides a mechanism for tying an enterprise identity store or directory to role-based Amazon Web Services access without user-specific credentials or configuration. For a comparison of <code>AssumeRoleWithSAML</code> with the other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_sts-comparison.html">Compare STS credentials</a> in the <i>IAM User Guide</i>.</p>
 /// <p>The temporary security credentials returned by this operation consist of an access key ID, a secret access key, and a security token. Applications can use these temporary security credentials to sign calls to Amazon Web Services services.</p>
 /// <p><b>Session Duration</b></p>
 /// <p>By default, the temporary security credentials created by <code>AssumeRoleWithSAML</code> last for one hour. However, you can use the optional <code>DurationSeconds</code> parameter to specify the duration of your session. Your role session lasts for the duration that you specify, or until the time specified in the SAML authentication response's <code>SessionNotOnOrAfter</code> value, whichever is shorter. You can provide a <code>DurationSeconds</code> value from 900 seconds (15 minutes) up to the maximum session duration setting for the role. This setting can have a value from 1 hour to 12 hours. To learn how to view the maximum value for your role, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session">View the Maximum Session Duration Setting for a Role</a> in the <i>IAM User Guide</i>. The maximum session duration limit applies when you use the <code>AssumeRole*</code> API operations or the <code>assume-role*</code> CLI commands. However the limit does not apply when you use those operations to create a console URL. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html">Using IAM Roles</a> in the <i>IAM User Guide</i>.</p><note>
 /// <p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-role-chaining">Role chaining</a> limits your CLI or Amazon Web Services API role session to a maximum of one hour. When you use the <code>AssumeRole</code> API operation to assume a role, you can specify the duration of your role session with the <code>DurationSeconds</code> parameter. You can specify a parameter value of up to 43200 seconds (12 hours), depending on the maximum session duration setting for your role. However, if you assume a role using role chaining and provide a <code>DurationSeconds</code> parameter value greater than one hour, the operation fails.</p>
 /// </note>
 /// <p><b>Permissions</b></p>
 /// <p>The temporary security credentials created by <code>AssumeRoleWithSAML</code> can be used to make API calls to any Amazon Web Services service with the following exception: you cannot call the STS <code>GetFederationToken</code> or <code>GetSessionToken</code> API operations.</p>
 /// <p>(Optional) You can pass inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policies</a> to this operation. You can pass a single JSON policy document to use as an inline session policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as managed session policies. The plaintext that you use for both inline and managed session policies can't exceed 2,048 characters. Passing policies to this operation returns new temporary credentials. The resulting session's permissions are the intersection of the role's identity-based policy and the session policies. You can use the role's temporary credentials in subsequent Amazon Web Services API calls to access resources in the account that owns the role. You cannot use session policies to grant more permissions than those allowed by the identity-based policy of the role that is being assumed. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in the <i>IAM User Guide</i>.</p>
 /// <p>Calling <code>AssumeRoleWithSAML</code> does not require the use of Amazon Web Services security credentials. The identity of the caller is validated by using keys in the metadata document that is uploaded for the SAML provider entity for your identity provider.</p><important>
 /// <p>Calling <code>AssumeRoleWithSAML</code> can result in an entry in your CloudTrail logs. The entry includes the value in the <code>NameID</code> element of the SAML assertion. We recommend that you use a <code>NameIDType</code> that is not associated with any personally identifiable information (PII). For example, you could instead use the persistent identifier (<code>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</code>).</p>

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role_with_web_identity.rs

@@ -386,386 +425,425 @@

↥ Expand context

     fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
         match self {
             Self::ExpiredTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::IdpCommunicationErrorException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::IdpRejectedClaimException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::InvalidIdentityTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::MalformedPolicyDocumentException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::PackedPolicyTooLargeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::RegionDisabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
             Self::Unhandled(_inner) => &_inner.meta,
-396
+        }
-397
+    }
-398
+}
 impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleWithWebIdentityError {
     fn create_unhandled_error(
         source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
         meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
     ) -> Self {
         Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
             source,

             meta: meta.unwrap_or_default(),
         })
-408
+    }
-409
+}
 impl ::aws_types::request_id::RequestId for crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError {
     fn request_id(&self) -> Option<&str> {
         self.meta().request_id()
-413
+    }
-414
+}
-415
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_output::AssumeRoleWithWebIdentityOutput;
--
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_input::AssumeRoleWithWebIdentityInput;
-417
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_output::AssumeRoleWithWebIdentityOutput;
-+
 mod _assume_role_with_web_identity_input;
-421
 mod _assume_role_with_web_identity_output;
-423
 /// Builders
 pub mod builders;

tmp-codegen-diff/aws-sdk/sdk/sts/src/operation/assume_role_with_web_identity/builders.rs

@@ -1,1 +35,35 @@

 // Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_output::AssumeRoleWithWebIdentityOutputBuilder;
--
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_input::AssumeRoleWithWebIdentityInputBuilder;
-3
 pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_output::AssumeRoleWithWebIdentityOutputBuilder;
-+
 impl crate::operation::assume_role_with_web_identity::builders::AssumeRoleWithWebIdentityInputBuilder {
     /// Sends a request with this input using the given client.
     pub async fn send_with(
         self,
         client: &crate::Client,
     ) -> ::std::result::Result<
         crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityOutput,
         ::aws_smithy_runtime_api::client::result::SdkError<
             crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError,
             ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,

↧ Expand context

         >,
     > {
         let mut fluent_builder = client.assume_role_with_web_identity();
         fluent_builder.inner = self;
         fluent_builder.send().await
-21
+    }
-22
+}
 /// Fluent builder constructing a request to `AssumeRoleWithWebIdentity`.
 ///
 /// <p>Returns a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider. Example providers include the OAuth 2.0 providers Login with Amazon and Facebook, or any OpenID Connect-compatible identity provider such as Google or <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html">Amazon Cognito federated identities</a>.</p><note>
 /// <p>For mobile applications, we recommend that you use Amazon Cognito. You can use Amazon Cognito with the <a href="http://aws.amazon.com/sdkforios/">Amazon Web Services SDK for iOS Developer Guide</a> and the <a href="http://aws.amazon.com/sdkforandroid/">Amazon Web Services SDK for Android Developer Guide</a> to uniquely identify a user. You can also supply the user with a consistent identity throughout the lifetime of an application.</p>
 /// <p>To learn more about Amazon Cognito, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html">Amazon Cognito identity pools</a> in <i>Amazon Cognito Developer Guide</i>.</p>
 /// </note>
 /// <p>Calling <code>AssumeRoleWithWebIdentity</code> does not require the use of Amazon Web Services security credentials. Therefore, you can distribute an application (for example, on mobile devices) that requests temporary security credentials without including long-term Amazon Web Services credentials in the application. You also don't need to deploy server-based proxy services that use long-term Amazon Web Services credentials. Instead, the identity of the caller is validated by using a token from the web identity provider. For a comparison of <code>AssumeRoleWithWebIdentity</code> with the other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_sts-comparison.html">Compare STS credentials</a> in the <i>IAM User Guide</i>.</p>
 /// <p>The temporary security credentials returned by this API consist of an access key ID, a secret access key, and a security token. Applications can use these temporary security credentials to sign calls to Amazon Web Services service API operations.</p>
 /// <p><b>Session Duration</b></p>
 /// <p>By default, the temporary security credentials created by <code>AssumeRoleWithWebIdentity</code> last for one hour. However, you can use the optional <code>DurationSeconds</code> parameter to specify the duration of your session. You can provide a value from 900 seconds (15 minutes) up to the maximum session duration setting for the role. This setting can have a value from 1 hour to 12 hours. To learn how to view the maximum value for your role, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_update-role-settings.html#id_roles_update-session-duration">Update the maximum session duration for a role </a> in the <i>IAM User Guide</i>. The maximum session duration limit applies when you use the <code>AssumeRole*</code> API operations or the <code>assume-role*</code> CLI commands. However the limit does not apply when you use those operations to create a console URL. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html">Using IAM Roles</a> in the <i>IAM User Guide</i>.</p>
 /// <p><b>Permissions</b></p>
 /// <p>The temporary security credentials created by <code>AssumeRoleWithWebIdentity</code> can be used to make API calls to any Amazon Web Services service with the following exception: you cannot call the STS <code>GetFederationToken</code> or <code>GetSessionToken</code> API operations.</p>
 /// <p>(Optional) You can pass inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policies</a> to this operation. You can pass a single JSON policy document to use as an inline session policy. You can also specify up to 10 managed policy Amazon Resource Names (ARNs) to use as managed session policies. The plaintext that you use for both inline and managed session policies can't exceed 2,048 characters. Passing policies to this operation returns new temporary credentials. The resulting session's permissions are the intersection of the role's identity-based policy and the session policies. You can use the role's temporary credentials in subsequent Amazon Web Services API calls to access resources in the account that owns the role. You cannot use session policies to grant more permissions than those allowed by the identity-based policy of the role that is being assumed. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a> in the <i>IAM User Guide</i>.</p>

16 16
17 17	`/// Error types that AWS SSO OIDC can respond with.`
18 18	`pub mod error;`

AWS SDK

Files changed: