aws_sdk_sts/operation/
get_delegated_access_token.rs

1// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
2/// Orchestration and serialization glue logic for `GetDelegatedAccessToken`.
3#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct GetDelegatedAccessToken;
6impl GetDelegatedAccessToken {
7    /// Creates a new `GetDelegatedAccessToken`
8    pub fn new() -> Self {
9        Self
10    }
11    pub(crate) async fn orchestrate(
12                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13                        input: crate::operation::get_delegated_access_token::GetDelegatedAccessTokenInput,
14                    ) -> ::std::result::Result<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenOutput, ::aws_smithy_runtime_api::client::result::SdkError<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
15                        let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>| {
16                            err.map_service_error(|err| {
17                                err.downcast::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError>().expect("correct error type")
18                            })
19                        };
20                        let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
21                            .await
22                            .map_err(map_err)?;
23                        let output = context.finalize().map_err(map_err)?;
24                        ::std::result::Result::Ok(output.downcast::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenOutput>().expect("correct output type"))
25                    }
26
27                    pub(crate) async fn orchestrate_with_stop_point(
28                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
29                        input: crate::operation::get_delegated_access_token::GetDelegatedAccessTokenInput,
30                        stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
31                    ) -> ::std::result::Result<::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext, ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
32                        let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
33                        use ::tracing::Instrument;
34                        ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
35                            "STS",
36                            "GetDelegatedAccessToken",
37                            input,
38                            runtime_plugins,
39                            stop_point
40                        )
41                        // Create a parent span for the entire operation. Includes a random, internal-only,
42                        // seven-digit ID for the operation orchestration so that it can be correlated in the logs.
43                        .instrument(::tracing::debug_span!(
44                                "STS.GetDelegatedAccessToken",
45                                "rpc.service" = "STS",
46                                "rpc.method" = "GetDelegatedAccessToken",
47                                "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
48                                "rpc.system" = "aws-api",
49                            ))
50                        .await
51                    }
52
53                    pub(crate) fn operation_runtime_plugins(
54                        client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
55                        client_config: &crate::config::Config,
56                        config_override: ::std::option::Option<crate::config::Builder>,
57                    ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
58                        let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
59
60                        if let ::std::option::Option::Some(config_override) = config_override {
61                            for plugin in config_override.runtime_plugins.iter().cloned() {
62                                runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
63                            }
64                            runtime_plugins = runtime_plugins.with_operation_plugin(
65                                crate::config::ConfigOverrideRuntimePlugin::new(config_override, client_config.config.clone(), &client_config.runtime_components)
66                            );
67                        }
68                        runtime_plugins
69                    }
70}
71impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for GetDelegatedAccessToken {
72                fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
73                    let mut cfg = ::aws_smithy_types::config_bag::Layer::new("GetDelegatedAccessToken");
74
75                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(GetDelegatedAccessTokenRequestSerializer));
76                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(GetDelegatedAccessTokenResponseDeserializer));
77
78                    cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
79                        crate::config::auth::Params::builder()
80                            .operation_name("GetDelegatedAccessToken")
81                            .build()
82                            .expect("required fields set")
83                    ));
84
85                    cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
86cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
87                            "GetDelegatedAccessToken",
88                            "STS",
89                        ));
90let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
91                            signing_options.double_uri_encode = true;
92                            signing_options.content_sha256_header = false;
93                            signing_options.normalize_uri_path = true;
94                            signing_options.payload_override = None;
95
96                            cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
97                                signing_options,
98                                ..::std::default::Default::default()
99                            });
100
101                    ::std::option::Option::Some(cfg.freeze())
102                }
103
104                fn runtime_components(&self, _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
105                    #[allow(unused_mut)]
106                    let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("GetDelegatedAccessToken")
107                            .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
108.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(GetDelegatedAccessTokenEndpointParamsInterceptor))
109                            .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError>::new())
110.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError>::new())
111.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError>::builder().transient_errors({
112                                            let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
113                                            transient_errors.push("IDPCommunicationError");
114                                            ::std::borrow::Cow::Owned(transient_errors)
115                                            }).build())
116.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError>::new());
117
118                    ::std::borrow::Cow::Owned(rcb)
119                }
120            }
121
122
123#[derive(Debug)]
124            struct GetDelegatedAccessTokenResponseDeserializer;
125            impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for GetDelegatedAccessTokenResponseDeserializer {
126
127
128                fn deserialize_nonstreaming_with_config(&self, response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse, _cfg: &::aws_smithy_types::config_bag::ConfigBag) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
129                    let (success, status) = (response.status().is_success(), response.status().as_u16());
130            let headers = response.headers();
131            let body = response.body().bytes().expect("body loaded");
132            #[allow(unused_mut)]
133            let mut force_error = false;
134            ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
135            let parse_result = if !success && status != 200 || force_error {
136                crate::protocol_serde::shape_get_delegated_access_token::de_get_delegated_access_token_http_error(status, headers, body, _cfg)
137            } else {
138                crate::protocol_serde::shape_get_delegated_access_token::de_get_delegated_access_token_http_response(status, headers, body, _cfg)
139            };
140            crate::protocol_serde::type_erase_result(parse_result)
141                }
142            }
143#[derive(Debug)]
144            struct GetDelegatedAccessTokenRequestSerializer;
145            impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for GetDelegatedAccessTokenRequestSerializer {
146                #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
147                fn serialize_input(&self, input: ::aws_smithy_runtime_api::client::interceptors::context::Input, _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
148                    let input = input.downcast::<crate::operation::get_delegated_access_token::GetDelegatedAccessTokenInput>().expect("correct type");
149                    let _header_serialization_settings = _cfg.load::<crate::serialization_settings::HeaderSerializationSettings>().cloned().unwrap_or_default();
150                    let mut request_builder = {
151                        #[allow(clippy::uninlined_format_args)]
152fn uri_base(_input: &crate::operation::get_delegated_access_token::GetDelegatedAccessTokenInput, output: &mut ::std::string::String) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
153    use ::std::fmt::Write as _;
154    ::std::write!(output, "/").expect("formatting should succeed");
155    ::std::result::Result::Ok(())
156}
157#[allow(clippy::unnecessary_wraps)]
158fn update_http_builder(
159                input: &crate::operation::get_delegated_access_token::GetDelegatedAccessTokenInput,
160                builder: ::http_1x::request::Builder
161            ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
162    let mut uri = ::std::string::String::new();
163    uri_base(input, &mut uri)?;
164    ::std::result::Result::Ok(builder.method("POST").uri(uri))
165}
166let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
167builder = _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
168builder
169                    };
170                    let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_get_delegated_access_token_input::ser_get_delegated_access_token_input_input_input(&input)?);
171                    if let Some(content_length) = body.content_length() {
172                                let content_length = content_length.to_string();
173                                request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
174                            }
175                    ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
176                }
177            }
178#[derive(Debug)]
179            struct GetDelegatedAccessTokenEndpointParamsInterceptor;
180
181            #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
182            impl ::aws_smithy_runtime_api::client::interceptors::Intercept for GetDelegatedAccessTokenEndpointParamsInterceptor {
183                fn name(&self) -> &'static str {
184                    "GetDelegatedAccessTokenEndpointParamsInterceptor"
185                }
186
187                fn read_before_execution(
188                    &self,
189                    context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
190                    cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
191                ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
192                    let _input = context.input()
193                        .downcast_ref::<GetDelegatedAccessTokenInput>()
194                        .ok_or("failed to downcast to GetDelegatedAccessTokenInput")?;
195
196
197
198                    let params = crate::config::endpoint::Params::builder()
199                        .set_region(cfg.load::<::aws_types::region::Region>().map(|r|r.as_ref().to_owned()))
200.set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
201.set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
202.set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
203                        .build()
204                        .map_err(|err| ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err))?;
205                    cfg.interceptor_state().store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
206                    ::std::result::Result::Ok(())
207                }
208            }
209
210            // The get_* functions below are generated from JMESPath expressions in the
211            // operationContextParams trait. They target the operation's input shape.
212
213
214
215/// Error type for the `GetDelegatedAccessTokenError` operation.
216#[non_exhaustive]
217#[derive(::std::fmt::Debug)]
218pub enum GetDelegatedAccessTokenError {
219    /// <p>The trade-in token provided in the request has expired and can no longer be exchanged for credentials. Request a new token and retry the operation.</p>
220    ExpiredTradeInTokenException(crate::types::error::ExpiredTradeInTokenException),
221    /// <p>The request was rejected because the total packed size of the session policies and session tags combined was too large. An Amazon Web Services conversion compresses the session policy document, session policy ARNs, and session tags into a packed binary format that has a separate limit. The error message indicates by percentage how close the policies and tags are to the upper size limit. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the <i>IAM User Guide</i>.</p>
222    /// <p>You could receive this error even though you meet other defined session policy and session tag limits. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length">IAM and STS Entity Character Limits</a> in the <i>IAM User Guide</i>.</p>
223    PackedPolicyTooLargeException(crate::types::error::PackedPolicyTooLargeException),
224    /// <p>STS is not activated in the requested region for the account that is being asked to generate credentials. The account administrator must use the IAM console to activate STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User Guide</i>.</p>
225    RegionDisabledException(crate::types::error::RegionDisabledException),
226    /// An unexpected error occurred (e.g., invalid JSON returned by the service or an unknown error code).
227                    #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
228    variable wildcard pattern and check `.code()`:
229     \
230    &nbsp;&nbsp;&nbsp;`err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
231     \
232    See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-GetDelegatedAccessTokenError) for what information is available for the error.")]
233                    Unhandled(crate::error::sealed_unhandled::Unhandled),
234}
235impl GetDelegatedAccessTokenError {
236    /// Creates the `GetDelegatedAccessTokenError::Unhandled` variant from any error type.
237                    pub fn unhandled(err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>) -> Self {
238                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.into(), meta: ::std::default::Default::default() })
239                    }
240
241                    /// Creates the `GetDelegatedAccessTokenError::Unhandled` variant from an [`ErrorMetadata`](::aws_smithy_types::error::ErrorMetadata).
242                    pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
243                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.clone().into(), meta: err })
244                    }
245    ///
246    /// Returns error metadata, which includes the error code, message,
247    /// request ID, and potentially additional information.
248    ///
249    pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
250        match self {
251            Self::ExpiredTradeInTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
252            Self::PackedPolicyTooLargeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
253            Self::RegionDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
254            Self::Unhandled(e) => &e.meta,
255        }
256    }
257    /// Returns `true` if the error kind is `GetDelegatedAccessTokenError::ExpiredTradeInTokenException`.
258    pub fn is_expired_trade_in_token_exception(&self) -> bool {
259        matches!(self, Self::ExpiredTradeInTokenException(_))
260    }
261    /// Returns `true` if the error kind is `GetDelegatedAccessTokenError::PackedPolicyTooLargeException`.
262    pub fn is_packed_policy_too_large_exception(&self) -> bool {
263        matches!(self, Self::PackedPolicyTooLargeException(_))
264    }
265    /// Returns `true` if the error kind is `GetDelegatedAccessTokenError::RegionDisabledException`.
266    pub fn is_region_disabled_exception(&self) -> bool {
267        matches!(self, Self::RegionDisabledException(_))
268    }
269}
270impl ::std::error::Error for GetDelegatedAccessTokenError {
271    fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
272        match self {
273            Self::ExpiredTradeInTokenException(_inner) =>
274            ::std::option::Option::Some(_inner)
275            ,
276            Self::PackedPolicyTooLargeException(_inner) =>
277            ::std::option::Option::Some(_inner)
278            ,
279            Self::RegionDisabledException(_inner) =>
280            ::std::option::Option::Some(_inner)
281            ,
282            Self::Unhandled(_inner) => {
283                ::std::option::Option::Some(&*_inner.source)
284            }
285        }
286    }
287}
288impl ::std::fmt::Display for GetDelegatedAccessTokenError {
289    fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
290        match self {
291            Self::ExpiredTradeInTokenException(_inner) =>
292            _inner.fmt(f)
293            ,
294            Self::PackedPolicyTooLargeException(_inner) =>
295            _inner.fmt(f)
296            ,
297            Self::RegionDisabledException(_inner) =>
298            _inner.fmt(f)
299            ,
300            Self::Unhandled(_inner) => {
301                if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
302                                                        write!(f, "unhandled error ({code})")
303                                                    } else {
304                                                        f.write_str("unhandled error")
305                                                    }
306            }
307        }
308    }
309}
310impl ::aws_smithy_types::retry::ProvideErrorKind for GetDelegatedAccessTokenError {
311    fn code(&self) -> ::std::option::Option<&str> {
312        ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
313    }
314    fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
315        ::std::option::Option::None
316    }
317}
318impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for GetDelegatedAccessTokenError {
319    fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
320        match self {
321            Self::ExpiredTradeInTokenException(_inner) =>
322            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
323            ,
324            Self::PackedPolicyTooLargeException(_inner) =>
325            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
326            ,
327            Self::RegionDisabledException(_inner) =>
328            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
329            ,
330            Self::Unhandled(_inner) => {
331                &_inner.meta
332            }
333        }
334    }
335}
336impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for GetDelegatedAccessTokenError {
337    fn create_unhandled_error(
338                        source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
339                        meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>
340                    ) -> Self {
341        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source, meta: meta.unwrap_or_default() })
342    }
343}
344impl ::aws_types::request_id::RequestId for crate::operation::get_delegated_access_token::GetDelegatedAccessTokenError {
345                                fn request_id(&self) -> Option<&str> {
346                                    self.meta().request_id()
347                                }
348                            }
349
350pub use crate::operation::get_delegated_access_token::_get_delegated_access_token_input::GetDelegatedAccessTokenInput;
351
352pub use crate::operation::get_delegated_access_token::_get_delegated_access_token_output::GetDelegatedAccessTokenOutput;
353
354mod _get_delegated_access_token_input;
355
356mod _get_delegated_access_token_output;
357
358/// Builders
359pub mod builders;
360
aws_sdk_sts/operation/get_delegated_access_token.rs

aws_sdk_sts/operation/
get_delegated_access_token.rs
