1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

/*
 * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 * SPDX-License-Identifier: Apache-2.0
 */

use crate::provider_config::ProviderConfig;
use aws_runtime::env_config::EnvConfigValue;
use aws_smithy_types::error::display::DisplayErrorContext;
use aws_types::endpoint_config::AccountIdEndpointMode;
use std::str::FromStr;

mod env {
    pub(super) const ACCOUNT_ID_ENDPOINT_MODE: &str = "AWS_ACCOUNT_ID_ENDPOINT_MODE";
}

mod profile_key {
    pub(super) const ACCOUNT_ID_ENDPOINT_MODE: &str = "account_id_endpoint_mode";
}

/// Load the value for the Account-based endpoint mode
///
/// This checks the following sources:
/// 1. The environment variable `AWS_ACCOUNT_ID_ENDPOINT_MODE=preferred/disabled/required`
/// 2. The profile key `account_id_endpoint_mode=preferred/disabled/required`
///
/// If invalid values are found, the provider will return `None` and an error will be logged.
pub(crate) async fn account_id_endpoint_mode_provider(
    provider_config: &ProviderConfig,
) -> Option<AccountIdEndpointMode> {
    let env = provider_config.env();
    let profiles = provider_config.profile().await;

    EnvConfigValue::new()
        .env(env::ACCOUNT_ID_ENDPOINT_MODE)
        .profile(profile_key::ACCOUNT_ID_ENDPOINT_MODE)
        .validate(&env, profiles, AccountIdEndpointMode::from_str)
        .map_err(|err| tracing::warn!(err = %DisplayErrorContext(&err), "invalid value for `AccountIdEndpointMode`"))
        .unwrap_or(None)
}

#[cfg(test)]
mod test {
    use super::account_id_endpoint_mode_provider;
    use super::env;
    #[allow(deprecated)]
    use crate::profile::profile_file::{ProfileFileKind, ProfileFiles};
    use crate::provider_config::ProviderConfig;
    use aws_types::os_shim_internal::{Env, Fs};
    use tracing_test::traced_test;

    #[tokio::test]
    #[traced_test]
    async fn log_error_on_invalid_value() {
        let conf = ProviderConfig::empty().with_env(Env::from_slice(&[(
            env::ACCOUNT_ID_ENDPOINT_MODE,
            "invalid",
        )]));
        assert_eq!(None, account_id_endpoint_mode_provider(&conf).await);
        assert!(logs_contain("invalid value for `AccountIdEndpointMode`"));
    }

    #[tokio::test]
    #[traced_test]
    async fn environment_priority() {
        let conf = ProviderConfig::empty()
            .with_env(Env::from_slice(&[(
                env::ACCOUNT_ID_ENDPOINT_MODE,
                "disabled",
            )]))
            .with_profile_config(
                Some(
                    #[allow(deprecated)]
                    ProfileFiles::builder()
                        .with_file(
                            #[allow(deprecated)]
                            ProfileFileKind::Config,
                            "conf",
                        )
                        .build(),
                ),
                None,
            )
            .with_fs(Fs::from_slice(&[(
                "conf",
                "[default]\naccount_id_endpoint_mode = required",
            )]));
        assert_eq!(
            "disabled".to_owned(),
            account_id_endpoint_mode_provider(&conf)
                .await
                .unwrap()
                .to_string(),
        );
    }
}