1#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct AssumeRoleWithWebIdentity;
6impl AssumeRoleWithWebIdentity {
7 pub fn new() -> Self {
9 Self
10 }
11 pub(crate) async fn orchestrate(
12 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13 input: crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityInput,
14 ) -> ::std::result::Result<
15 crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityOutput,
16 ::aws_smithy_runtime_api::client::result::SdkError<
17 crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError,
18 ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
19 >,
20 > {
21 let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<
22 ::aws_smithy_runtime_api::client::interceptors::context::Error,
23 ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
24 >| {
25 err.map_service_error(|err| {
26 err.downcast::<crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError>()
27 .expect("correct error type")
28 })
29 };
30 let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
31 .await
32 .map_err(map_err)?;
33 let output = context.finalize().map_err(map_err)?;
34 ::std::result::Result::Ok(
35 output
36 .downcast::<crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityOutput>()
37 .expect("correct output type"),
38 )
39 }
40
41 pub(crate) async fn orchestrate_with_stop_point(
42 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
43 input: crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityInput,
44 stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
45 ) -> ::std::result::Result<
46 ::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext,
47 ::aws_smithy_runtime_api::client::result::SdkError<
48 ::aws_smithy_runtime_api::client::interceptors::context::Error,
49 ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
50 >,
51 > {
52 let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
53 use ::tracing::Instrument;
54 ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point("STS", "AssumeRoleWithWebIdentity", input, runtime_plugins, stop_point)
55 .instrument(::tracing::debug_span!(
58 "STS.AssumeRoleWithWebIdentity",
59 "rpc.service" = "STS",
60 "rpc.method" = "AssumeRoleWithWebIdentity",
61 "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
62 "rpc.system" = "aws-api",
63 ))
64 .await
65 }
66
67 pub(crate) fn operation_runtime_plugins(
68 client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
69 client_config: &crate::config::Config,
70 config_override: ::std::option::Option<crate::config::Builder>,
71 ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
72 let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
73 runtime_plugins = runtime_plugins.with_client_plugin(crate::auth_plugin::DefaultAuthOptionsPlugin::new(vec![
74 ::aws_runtime::auth::sigv4::SCHEME_ID,
75 ::aws_smithy_runtime::client::auth::no_auth::NO_AUTH_SCHEME_ID,
76 ]));
77 if let ::std::option::Option::Some(config_override) = config_override {
78 for plugin in config_override.runtime_plugins.iter().cloned() {
79 runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
80 }
81 runtime_plugins = runtime_plugins.with_operation_plugin(crate::config::ConfigOverrideRuntimePlugin::new(
82 config_override,
83 client_config.config.clone(),
84 &client_config.runtime_components,
85 ));
86 }
87 runtime_plugins
88 }
89}
90impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for AssumeRoleWithWebIdentity {
91 fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
92 let mut cfg = ::aws_smithy_types::config_bag::Layer::new("AssumeRoleWithWebIdentity");
93
94 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(
95 AssumeRoleWithWebIdentityRequestSerializer,
96 ));
97 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(
98 AssumeRoleWithWebIdentityResponseDeserializer,
99 ));
100
101 cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
102 ::aws_smithy_runtime_api::client::auth::static_resolver::StaticAuthSchemeOptionResolverParams::new(),
103 ));
104
105 cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
106 cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
107 "AssumeRoleWithWebIdentity",
108 "STS",
109 ));
110 let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
111 signing_options.double_uri_encode = true;
112 signing_options.content_sha256_header = false;
113 signing_options.normalize_uri_path = true;
114 signing_options.payload_override = None;
115
116 cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
117 signing_options,
118 ..::std::default::Default::default()
119 });
120
121 ::std::option::Option::Some(cfg.freeze())
122 }
123
124 fn runtime_components(
125 &self,
126 _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder,
127 ) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
128 #[allow(unused_mut)]
129 let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("AssumeRoleWithWebIdentity")
130 .with_interceptor(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default())
131 .with_interceptor(AssumeRoleWithWebIdentityEndpointParamsInterceptor)
132 .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<
133 crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError,
134 >::new())
135 .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<
136 crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError,
137 >::new())
138 .with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<
139 crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError,
140 >::new());
141
142 ::std::borrow::Cow::Owned(rcb)
143 }
144}
145
146#[derive(Debug)]
147struct AssumeRoleWithWebIdentityResponseDeserializer;
148impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for AssumeRoleWithWebIdentityResponseDeserializer {
149 fn deserialize_nonstreaming(
150 &self,
151 response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
152 ) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
153 let (success, status) = (response.status().is_success(), response.status().as_u16());
154 let headers = response.headers();
155 let body = response.body().bytes().expect("body loaded");
156 #[allow(unused_mut)]
157 let mut force_error = false;
158 ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
159 let parse_result = if !success && status != 200 || force_error {
160 crate::protocol_serde::shape_assume_role_with_web_identity::de_assume_role_with_web_identity_http_error(status, headers, body)
161 } else {
162 crate::protocol_serde::shape_assume_role_with_web_identity::de_assume_role_with_web_identity_http_response(status, headers, body)
163 };
164 crate::protocol_serde::type_erase_result(parse_result)
165 }
166}
167#[derive(Debug)]
168struct AssumeRoleWithWebIdentityRequestSerializer;
169impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for AssumeRoleWithWebIdentityRequestSerializer {
170 #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
171 fn serialize_input(
172 &self,
173 input: ::aws_smithy_runtime_api::client::interceptors::context::Input,
174 _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
175 ) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
176 let input = input
177 .downcast::<crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityInput>()
178 .expect("correct type");
179 let _header_serialization_settings = _cfg
180 .load::<crate::serialization_settings::HeaderSerializationSettings>()
181 .cloned()
182 .unwrap_or_default();
183 let mut request_builder = {
184 fn uri_base(
185 _input: &crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityInput,
186 output: &mut ::std::string::String,
187 ) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
188 use ::std::fmt::Write as _;
189 ::std::write!(output, "/").expect("formatting should succeed");
190 ::std::result::Result::Ok(())
191 }
192 #[allow(clippy::unnecessary_wraps)]
193 fn update_http_builder(
194 input: &crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityInput,
195 builder: ::http::request::Builder,
196 ) -> ::std::result::Result<::http::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
197 let mut uri = ::std::string::String::new();
198 uri_base(input, &mut uri)?;
199 ::std::result::Result::Ok(builder.method("POST").uri(uri))
200 }
201 let mut builder = update_http_builder(&input, ::http::request::Builder::new())?;
202 builder = _header_serialization_settings.set_default_header(builder, ::http::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
203 builder
204 };
205 let body = ::aws_smithy_types::body::SdkBody::from(
206 crate::protocol_serde::shape_assume_role_with_web_identity_input::ser_assume_role_with_web_identity_input_input_input(&input)?,
207 );
208 if let Some(content_length) = body.content_length() {
209 let content_length = content_length.to_string();
210 request_builder = _header_serialization_settings.set_default_header(request_builder, ::http::header::CONTENT_LENGTH, &content_length);
211 }
212 ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
213 }
214}
215#[derive(Debug)]
216struct AssumeRoleWithWebIdentityEndpointParamsInterceptor;
217
218impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleWithWebIdentityEndpointParamsInterceptor {
219 fn name(&self) -> &'static str {
220 "AssumeRoleWithWebIdentityEndpointParamsInterceptor"
221 }
222
223 fn read_before_execution(
224 &self,
225 context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<
226 '_,
227 ::aws_smithy_runtime_api::client::interceptors::context::Input,
228 ::aws_smithy_runtime_api::client::interceptors::context::Output,
229 ::aws_smithy_runtime_api::client::interceptors::context::Error,
230 >,
231 cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
232 ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
233 let _input = context
234 .input()
235 .downcast_ref::<AssumeRoleWithWebIdentityInput>()
236 .ok_or("failed to downcast to AssumeRoleWithWebIdentityInput")?;
237
238 let params = crate::config::endpoint::Params::builder()
239 .set_region(cfg.load::<::aws_types::region::Region>().map(|r| r.as_ref().to_owned()))
240 .set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
241 .set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
242 .set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
243 .build()
244 .map_err(|err| {
245 ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err)
246 })?;
247 cfg.interceptor_state()
248 .store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
249 ::std::result::Result::Ok(())
250 }
251}
252
253#[non_exhaustive]
258#[derive(::std::fmt::Debug)]
259pub enum AssumeRoleWithWebIdentityError {
260 ExpiredTokenException(crate::types::error::ExpiredTokenException),
262 IdpCommunicationErrorException(crate::types::error::IdpCommunicationErrorException),
264 IdpRejectedClaimException(crate::types::error::IdpRejectedClaimException),
267 InvalidIdentityTokenException(crate::types::error::InvalidIdentityTokenException),
269 MalformedPolicyDocumentException(crate::types::error::MalformedPolicyDocumentException),
271 PackedPolicyTooLargeException(crate::types::error::PackedPolicyTooLargeException),
274 RegionDisabledException(crate::types::error::RegionDisabledException),
276 #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
278 variable wildcard pattern and check `.code()`:
279 \
280 `err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
281 \
282 See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-AssumeRoleWithWebIdentityError) for what information is available for the error.")]
283 Unhandled(crate::error::sealed_unhandled::Unhandled),
284}
285impl AssumeRoleWithWebIdentityError {
286 pub fn unhandled(
288 err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>,
289 ) -> Self {
290 Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
291 source: err.into(),
292 meta: ::std::default::Default::default(),
293 })
294 }
295
296 pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
298 Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
299 source: err.clone().into(),
300 meta: err,
301 })
302 }
303 pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
308 match self {
309 Self::ExpiredTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
310 Self::IdpCommunicationErrorException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
311 Self::IdpRejectedClaimException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
312 Self::InvalidIdentityTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
313 Self::MalformedPolicyDocumentException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
314 Self::PackedPolicyTooLargeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
315 Self::RegionDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
316 Self::Unhandled(e) => &e.meta,
317 }
318 }
319 pub fn is_expired_token_exception(&self) -> bool {
321 matches!(self, Self::ExpiredTokenException(_))
322 }
323 pub fn is_idp_communication_error_exception(&self) -> bool {
325 matches!(self, Self::IdpCommunicationErrorException(_))
326 }
327 pub fn is_idp_rejected_claim_exception(&self) -> bool {
329 matches!(self, Self::IdpRejectedClaimException(_))
330 }
331 pub fn is_invalid_identity_token_exception(&self) -> bool {
333 matches!(self, Self::InvalidIdentityTokenException(_))
334 }
335 pub fn is_malformed_policy_document_exception(&self) -> bool {
337 matches!(self, Self::MalformedPolicyDocumentException(_))
338 }
339 pub fn is_packed_policy_too_large_exception(&self) -> bool {
341 matches!(self, Self::PackedPolicyTooLargeException(_))
342 }
343 pub fn is_region_disabled_exception(&self) -> bool {
345 matches!(self, Self::RegionDisabledException(_))
346 }
347}
348impl ::std::error::Error for AssumeRoleWithWebIdentityError {
349 fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
350 match self {
351 Self::ExpiredTokenException(_inner) => ::std::option::Option::Some(_inner),
352 Self::IdpCommunicationErrorException(_inner) => ::std::option::Option::Some(_inner),
353 Self::IdpRejectedClaimException(_inner) => ::std::option::Option::Some(_inner),
354 Self::InvalidIdentityTokenException(_inner) => ::std::option::Option::Some(_inner),
355 Self::MalformedPolicyDocumentException(_inner) => ::std::option::Option::Some(_inner),
356 Self::PackedPolicyTooLargeException(_inner) => ::std::option::Option::Some(_inner),
357 Self::RegionDisabledException(_inner) => ::std::option::Option::Some(_inner),
358 Self::Unhandled(_inner) => ::std::option::Option::Some(&*_inner.source),
359 }
360 }
361}
362impl ::std::fmt::Display for AssumeRoleWithWebIdentityError {
363 fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
364 match self {
365 Self::ExpiredTokenException(_inner) => _inner.fmt(f),
366 Self::IdpCommunicationErrorException(_inner) => _inner.fmt(f),
367 Self::IdpRejectedClaimException(_inner) => _inner.fmt(f),
368 Self::InvalidIdentityTokenException(_inner) => _inner.fmt(f),
369 Self::MalformedPolicyDocumentException(_inner) => _inner.fmt(f),
370 Self::PackedPolicyTooLargeException(_inner) => _inner.fmt(f),
371 Self::RegionDisabledException(_inner) => _inner.fmt(f),
372 Self::Unhandled(_inner) => {
373 if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
374 write!(f, "unhandled error ({code})")
375 } else {
376 f.write_str("unhandled error")
377 }
378 }
379 }
380 }
381}
382impl ::aws_smithy_types::retry::ProvideErrorKind for AssumeRoleWithWebIdentityError {
383 fn code(&self) -> ::std::option::Option<&str> {
384 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
385 }
386 fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
387 match self {
388 Self::IdpCommunicationErrorException(inner) => ::std::option::Option::Some(inner.retryable_error_kind()),
389 _ => ::std::option::Option::None,
390 }
391 }
392}
393impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleWithWebIdentityError {
394 fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
395 match self {
396 Self::ExpiredTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
397 Self::IdpCommunicationErrorException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
398 Self::IdpRejectedClaimException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
399 Self::InvalidIdentityTokenException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
400 Self::MalformedPolicyDocumentException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
401 Self::PackedPolicyTooLargeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
402 Self::RegionDisabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
403 Self::Unhandled(_inner) => &_inner.meta,
404 }
405 }
406}
407impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleWithWebIdentityError {
408 fn create_unhandled_error(
409 source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
410 meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
411 ) -> Self {
412 Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
413 source,
414 meta: meta.unwrap_or_default(),
415 })
416 }
417}
418impl ::aws_types::request_id::RequestId for crate::operation::assume_role_with_web_identity::AssumeRoleWithWebIdentityError {
419 fn request_id(&self) -> Option<&str> {
420 self.meta().request_id()
421 }
422}
423
424pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_output::AssumeRoleWithWebIdentityOutput;
425
426pub use crate::operation::assume_role_with_web_identity::_assume_role_with_web_identity_input::AssumeRoleWithWebIdentityInput;
427
428mod _assume_role_with_web_identity_input;
429
430mod _assume_role_with_web_identity_output;
431
432pub mod builders;