1#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct AssumeRole;
6impl AssumeRole {
7 pub fn new() -> Self {
9 Self
10 }
11 pub(crate) async fn orchestrate(
12 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13 input: crate::operation::assume_role::AssumeRoleInput,
14 ) -> ::std::result::Result<crate::operation::assume_role::AssumeRoleOutput, ::aws_smithy_runtime_api::client::result::SdkError<crate::operation::assume_role::AssumeRoleError, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
15 let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>| {
16 err.map_service_error(|err| {
17 err.downcast::<crate::operation::assume_role::AssumeRoleError>().expect("correct error type")
18 })
19 };
20 let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
21 .await
22 .map_err(map_err)?;
23 let output = context.finalize().map_err(map_err)?;
24 ::std::result::Result::Ok(output.downcast::<crate::operation::assume_role::AssumeRoleOutput>().expect("correct output type"))
25 }
26
27 pub(crate) async fn orchestrate_with_stop_point(
28 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
29 input: crate::operation::assume_role::AssumeRoleInput,
30 stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
31 ) -> ::std::result::Result<::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext, ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
32 let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
33 use ::tracing::Instrument;
34 ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
35 "STS",
36 "AssumeRole",
37 input,
38 runtime_plugins,
39 stop_point
40 )
41 .instrument(::tracing::debug_span!(
44 "STS.AssumeRole",
45 "rpc.service" = "STS",
46 "rpc.method" = "AssumeRole",
47 "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
48 "rpc.system" = "aws-api",
49 ))
50 .await
51 }
52
53 pub(crate) fn operation_runtime_plugins(
54 client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
55 client_config: &crate::config::Config,
56 config_override: ::std::option::Option<crate::config::Builder>,
57 ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
58 let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
59
60 if let ::std::option::Option::Some(config_override) = config_override {
61 for plugin in config_override.runtime_plugins.iter().cloned() {
62 runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
63 }
64 runtime_plugins = runtime_plugins.with_operation_plugin(
65 crate::config::ConfigOverrideRuntimePlugin::new(config_override, client_config.config.clone(), &client_config.runtime_components)
66 );
67 }
68 runtime_plugins
69 }
70}
71impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for AssumeRole {
72 fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
73 let mut cfg = ::aws_smithy_types::config_bag::Layer::new("AssumeRole");
74
75 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(AssumeRoleRequestSerializer));
76 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(AssumeRoleResponseDeserializer));
77
78 cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
79 crate::config::auth::Params::builder()
80 .operation_name("AssumeRole")
81 .build()
82 .expect("required fields set")
83 ));
84
85 cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
86cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
87 "AssumeRole",
88 "STS",
89 ));
90let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
91 signing_options.double_uri_encode = true;
92 signing_options.content_sha256_header = false;
93 signing_options.normalize_uri_path = true;
94 signing_options.payload_override = None;
95
96 cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
97 signing_options,
98 ..::std::default::Default::default()
99 });
100
101 ::std::option::Option::Some(cfg.freeze())
102 }
103
104 fn runtime_components(&self, _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
105 #[allow(unused_mut)]
106 let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("AssumeRole")
107 .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleTelemetryInputCaptureInterceptor))
108.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
109.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleEndpointParamsInterceptor))
110 .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::assume_role::AssumeRoleError>::new())
111.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::assume_role::AssumeRoleError>::new())
112.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::assume_role::AssumeRoleError>::builder().transient_errors({
113 let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
114 transient_errors.push("IDPCommunicationError");
115 ::std::borrow::Cow::Owned(transient_errors)
116 }).build())
117.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::assume_role::AssumeRoleError>::new());
118
119 ::std::borrow::Cow::Owned(rcb)
120 }
121 }
122
123 #[derive(Debug)]
124 struct AssumeRoleTelemetryInputCaptureInterceptor;
125
126 #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
127 impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleTelemetryInputCaptureInterceptor {
128 fn name(&self) -> &'static str {
129 "AssumeRoleTelemetryInputCaptureInterceptor"
130 }
131
132 fn read_before_execution(
133 &self,
134 context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
135 cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
136 ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
137 let ::std::option::Option::Some(requested) = cfg.load::<::aws_smithy_types::telemetry::RequestedTelemetryAttributes>().filter(|r| !r.is_empty()) else {
139 return ::std::result::Result::Ok(());
140 };
141
142 let ::std::option::Option::Some(input) = context.input().downcast_ref::<AssumeRoleInput>() else {
143 return ::std::result::Result::Ok(());
145 };
146
147 let mut captured = ::aws_smithy_types::telemetry::CapturedTelemetryAttributes::default();
148 if requested.should_capture("RoleArn") {
149 if let ::std::option::Option::Some(value) = input.role_arn.as_deref() {
150 captured.insert("RoleArn", value);
151 }
152 }
153if requested.should_capture("RoleSessionName") {
154 if let ::std::option::Option::Some(value) = input.role_session_name.as_deref() {
155 captured.insert("RoleSessionName", value);
156 }
157 }
158if requested.should_capture("Policy") {
159 if let ::std::option::Option::Some(value) = input.policy.as_deref() {
160 captured.insert("Policy", value);
161 }
162 }
163if requested.should_capture("ExternalId") {
164 if let ::std::option::Option::Some(value) = input.external_id.as_deref() {
165 captured.insert("ExternalId", value);
166 }
167 }
168if requested.should_capture("SerialNumber") {
169 if let ::std::option::Option::Some(value) = input.serial_number.as_deref() {
170 captured.insert("SerialNumber", value);
171 }
172 }
173if requested.should_capture("TokenCode") {
174 if let ::std::option::Option::Some(value) = input.token_code.as_deref() {
175 captured.insert("TokenCode", value);
176 }
177 }
178if requested.should_capture("SourceIdentity") {
179 if let ::std::option::Option::Some(value) = input.source_identity.as_deref() {
180 captured.insert("SourceIdentity", value);
181 }
182 }
183
184 cfg.interceptor_state().store_put(captured);
185 ::std::result::Result::Ok(())
186 }
187 }
188#[derive(Debug)]
189 struct AssumeRoleResponseDeserializer;
190 impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for AssumeRoleResponseDeserializer {
191
192
193 fn deserialize_nonstreaming_with_config(&self, response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse, _cfg: &::aws_smithy_types::config_bag::ConfigBag) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
194 let (success, status) = (response.status().is_success(), response.status().as_u16());
195 let headers = response.headers();
196 let body = response.body().bytes().expect("body loaded");
197 #[allow(unused_mut)]
198 let mut force_error = false;
199 ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
200 let parse_result = if !success && status != 200 || force_error {
201 crate::protocol_serde::shape_assume_role::de_assume_role_http_error(status, headers, body, _cfg)
202 } else {
203 crate::protocol_serde::shape_assume_role::de_assume_role_http_response(status, headers, body, _cfg)
204 };
205 crate::protocol_serde::type_erase_result(parse_result)
206 }
207 }
208#[derive(Debug)]
209 struct AssumeRoleRequestSerializer;
210 impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for AssumeRoleRequestSerializer {
211 #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
212 fn serialize_input(&self, input: ::aws_smithy_runtime_api::client::interceptors::context::Input, _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
213 let input = input.downcast::<crate::operation::assume_role::AssumeRoleInput>().expect("correct type");
214 let _header_serialization_settings = _cfg.load::<crate::serialization_settings::HeaderSerializationSettings>().cloned().unwrap_or_default();
215 let mut request_builder = {
216 #[allow(clippy::uninlined_format_args)]
217fn uri_base(_input: &crate::operation::assume_role::AssumeRoleInput, output: &mut ::std::string::String) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
218 use ::std::fmt::Write as _;
219 ::std::write!(output, "/").expect("formatting should succeed");
220 ::std::result::Result::Ok(())
221}
222#[allow(clippy::unnecessary_wraps)]
223fn update_http_builder(
224 input: &crate::operation::assume_role::AssumeRoleInput,
225 builder: ::http_1x::request::Builder
226 ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
227 let mut uri = ::std::string::String::new();
228 uri_base(input, &mut uri)?;
229 ::std::result::Result::Ok(builder.method("POST").uri(uri))
230}
231let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
232builder = _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
233builder
234 };
235 let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_assume_role_input::ser_assume_role_input_input_input(&input)?);
236 if let Some(content_length) = body.content_length() {
237 let content_length = content_length.to_string();
238 request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
239 }
240 ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
241 }
242 }
243#[derive(Debug)]
244 struct AssumeRoleEndpointParamsInterceptor;
245
246 #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
247 impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleEndpointParamsInterceptor {
248 fn name(&self) -> &'static str {
249 "AssumeRoleEndpointParamsInterceptor"
250 }
251
252 fn read_before_execution(
253 &self,
254 context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
255 cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
256 ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
257 let _input = context.input()
258 .downcast_ref::<AssumeRoleInput>()
259 .ok_or("failed to downcast to AssumeRoleInput")?;
260
261
262
263 let params = crate::config::endpoint::Params::builder()
264 .set_region(cfg.load::<::aws_types::region::Region>().map(|r|r.as_ref().to_owned()))
265.set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
266.set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
267.set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
268 .build()
269 .map_err(|err| ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err))?;
270 cfg.interceptor_state().store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
271 ::std::result::Result::Ok(())
272 }
273 }
274
275 #[non_exhaustive]
282#[derive(::std::fmt::Debug)]
283pub enum AssumeRoleError {
284 ExpiredTokenException(crate::types::error::ExpiredTokenException),
286 MalformedPolicyDocumentException(crate::types::error::MalformedPolicyDocumentException),
288 PackedPolicyTooLargeException(crate::types::error::PackedPolicyTooLargeException),
291 RegionDisabledException(crate::types::error::RegionDisabledException),
293 #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
295 variable wildcard pattern and check `.code()`:
296 \
297 `err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
298 \
299 See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-AssumeRoleError) for what information is available for the error.")]
300 Unhandled(crate::error::sealed_unhandled::Unhandled),
301}
302impl AssumeRoleError {
303 pub fn unhandled(err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>) -> Self {
305 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.into(), meta: ::std::default::Default::default() })
306 }
307
308 pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
310 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.clone().into(), meta: err })
311 }
312 pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
317 match self {
318 Self::ExpiredTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
319 Self::MalformedPolicyDocumentException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
320 Self::PackedPolicyTooLargeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
321 Self::RegionDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
322 Self::Unhandled(e) => &e.meta,
323 }
324 }
325 pub fn is_expired_token_exception(&self) -> bool {
327 matches!(self, Self::ExpiredTokenException(_))
328 }
329 pub fn is_malformed_policy_document_exception(&self) -> bool {
331 matches!(self, Self::MalformedPolicyDocumentException(_))
332 }
333 pub fn is_packed_policy_too_large_exception(&self) -> bool {
335 matches!(self, Self::PackedPolicyTooLargeException(_))
336 }
337 pub fn is_region_disabled_exception(&self) -> bool {
339 matches!(self, Self::RegionDisabledException(_))
340 }
341}
342impl ::std::error::Error for AssumeRoleError {
343 fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
344 match self {
345 Self::ExpiredTokenException(_inner) =>
346 ::std::option::Option::Some(_inner)
347 ,
348 Self::MalformedPolicyDocumentException(_inner) =>
349 ::std::option::Option::Some(_inner)
350 ,
351 Self::PackedPolicyTooLargeException(_inner) =>
352 ::std::option::Option::Some(_inner)
353 ,
354 Self::RegionDisabledException(_inner) =>
355 ::std::option::Option::Some(_inner)
356 ,
357 Self::Unhandled(_inner) => {
358 ::std::option::Option::Some(&*_inner.source)
359 }
360 }
361 }
362}
363impl ::std::fmt::Display for AssumeRoleError {
364 fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
365 match self {
366 Self::ExpiredTokenException(_inner) =>
367 _inner.fmt(f)
368 ,
369 Self::MalformedPolicyDocumentException(_inner) =>
370 _inner.fmt(f)
371 ,
372 Self::PackedPolicyTooLargeException(_inner) =>
373 _inner.fmt(f)
374 ,
375 Self::RegionDisabledException(_inner) =>
376 _inner.fmt(f)
377 ,
378 Self::Unhandled(_inner) => {
379 if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
380 write!(f, "unhandled error ({code})")
381 } else {
382 f.write_str("unhandled error")
383 }
384 }
385 }
386 }
387}
388impl ::aws_smithy_types::retry::ProvideErrorKind for AssumeRoleError {
389 fn code(&self) -> ::std::option::Option<&str> {
390 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
391 }
392 fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
393 ::std::option::Option::None
394 }
395}
396impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleError {
397 fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
398 match self {
399 Self::ExpiredTokenException(_inner) =>
400 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
401 ,
402 Self::MalformedPolicyDocumentException(_inner) =>
403 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
404 ,
405 Self::PackedPolicyTooLargeException(_inner) =>
406 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
407 ,
408 Self::RegionDisabledException(_inner) =>
409 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
410 ,
411 Self::Unhandled(_inner) => {
412 &_inner.meta
413 }
414 }
415 }
416}
417impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleError {
418 fn create_unhandled_error(
419 source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
420 meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>
421 ) -> Self {
422 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source, meta: meta.unwrap_or_default() })
423 }
424}
425impl ::aws_types::request_id::RequestId for crate::operation::assume_role::AssumeRoleError {
426 fn request_id(&self) -> Option<&str> {
427 self.meta().request_id()
428 }
429 }
430
431pub use crate::operation::assume_role::_assume_role_input::AssumeRoleInput;
432
433pub use crate::operation::assume_role::_assume_role_output::AssumeRoleOutput;
434
435mod _assume_role_input;
436
437mod _assume_role_output;
438
439pub mod builders;
441