Skip to main content

aws_sdk_sts/operation/
assume_role_with_saml.rs

1// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
2/// Orchestration and serialization glue logic for `AssumeRoleWithSAML`.
3#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct AssumeRoleWithSAML;
6impl AssumeRoleWithSAML {
7    /// Creates a new `AssumeRoleWithSAML`
8    pub fn new() -> Self {
9        Self
10    }
11    pub(crate) async fn orchestrate(
12                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13                        input: crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
14                    ) -> ::std::result::Result<crate::operation::assume_role_with_saml::AssumeRoleWithSamlOutput, ::aws_smithy_runtime_api::client::result::SdkError<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
15                        let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>| {
16                            err.map_service_error(|err| {
17                                err.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>().expect("correct error type")
18                            })
19                        };
20                        let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
21                            .await
22                            .map_err(map_err)?;
23                        let output = context.finalize().map_err(map_err)?;
24                        ::std::result::Result::Ok(output.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSamlOutput>().expect("correct output type"))
25                    }
26
27                    pub(crate) async fn orchestrate_with_stop_point(
28                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
29                        input: crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
30                        stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
31                    ) -> ::std::result::Result<::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext, ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
32                        let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
33                        use ::tracing::Instrument;
34                        ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
35                            "STS",
36                            "AssumeRoleWithSAML",
37                            input,
38                            runtime_plugins,
39                            stop_point
40                        )
41                        // Create a parent span for the entire operation. Includes a random, internal-only,
42                        // seven-digit ID for the operation orchestration so that it can be correlated in the logs.
43                        .instrument(::tracing::debug_span!(
44                                "STS.AssumeRoleWithSAML",
45                                "rpc.service" = "STS",
46                                "rpc.method" = "AssumeRoleWithSAML",
47                                "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
48                                "rpc.system" = "aws-api",
49                            ))
50                        .await
51                    }
52
53                    pub(crate) fn operation_runtime_plugins(
54                        client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
55                        client_config: &crate::config::Config,
56                        config_override: ::std::option::Option<crate::config::Builder>,
57                    ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
58                        let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
59
60                        if let ::std::option::Option::Some(config_override) = config_override {
61                            for plugin in config_override.runtime_plugins.iter().cloned() {
62                                runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
63                            }
64                            runtime_plugins = runtime_plugins.with_operation_plugin(
65                                crate::config::ConfigOverrideRuntimePlugin::new(config_override, client_config.config.clone(), &client_config.runtime_components)
66                            );
67                        }
68                        runtime_plugins
69                    }
70}
71impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for AssumeRoleWithSAML {
72                fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
73                    let mut cfg = ::aws_smithy_types::config_bag::Layer::new("AssumeRoleWithSAML");
74
75                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(AssumeRoleWithSAMLRequestSerializer));
76                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(AssumeRoleWithSAMLResponseDeserializer));
77
78                    cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
79                        crate::config::auth::Params::builder()
80                            .operation_name("AssumeRoleWithSAML")
81                            .build()
82                            .expect("required fields set")
83                    ));
84
85                    cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
86cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
87                            "AssumeRoleWithSAML",
88                            "STS",
89                        ));
90
91                    ::std::option::Option::Some(cfg.freeze())
92                }
93
94                fn runtime_components(&self, _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
95                    #[allow(unused_mut)]
96                    let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("AssumeRoleWithSAML")
97                            .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleWithSAMLTelemetryInputCaptureInterceptor))
98.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
99.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleWithSAMLEndpointParamsInterceptor))
100                            .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new())
101.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new())
102.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::builder().transient_errors({
103                                            let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
104                                            transient_errors.push("IDPCommunicationError");
105                                            ::std::borrow::Cow::Owned(transient_errors)
106                                            }).build())
107.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new());
108
109                    ::std::borrow::Cow::Owned(rcb)
110                }
111            }
112
113            #[derive(Debug)]
114            struct AssumeRoleWithSAMLTelemetryInputCaptureInterceptor;
115
116            #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
117            impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleWithSAMLTelemetryInputCaptureInterceptor {
118                fn name(&self) -> &'static str {
119                    "AssumeRoleWithSAMLTelemetryInputCaptureInterceptor"
120                }
121
122                fn read_before_execution(
123                    &self,
124                    context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
125                    cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
126                ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
127                    // Nothing to do unless the customer opted in by naming members to record.
128                    let ::std::option::Option::Some(requested) = cfg.load::<::aws_smithy_types::telemetry::RequestedTelemetryAttributes>().filter(|r| !r.is_empty()) else {
129                        return ::std::result::Result::Ok(());
130                    };
131
132                    let ::std::option::Option::Some(input) = context.input().downcast_ref::<AssumeRoleWithSamlInput>() else {
133                        // A mismatched input is not this interceptor's concern; skip quietly.
134                        return ::std::result::Result::Ok(());
135                    };
136
137                    let mut captured = ::aws_smithy_types::telemetry::CapturedTelemetryAttributes::default();
138                    if requested.should_capture("RoleArn") {
139                            if let ::std::option::Option::Some(value) = input.role_arn.as_deref() {
140                                captured.insert("RoleArn", value);
141                            }
142                        }
143if requested.should_capture("PrincipalArn") {
144                            if let ::std::option::Option::Some(value) = input.principal_arn.as_deref() {
145                                captured.insert("PrincipalArn", value);
146                            }
147                        }
148if requested.should_capture("Policy") {
149                            if let ::std::option::Option::Some(value) = input.policy.as_deref() {
150                                captured.insert("Policy", value);
151                            }
152                        }
153
154                    cfg.interceptor_state().store_put(captured);
155                    ::std::result::Result::Ok(())
156                }
157            }
158#[derive(Debug)]
159            struct AssumeRoleWithSAMLResponseDeserializer;
160            impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for AssumeRoleWithSAMLResponseDeserializer {
161
162
163                fn deserialize_nonstreaming_with_config(&self, response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse, _cfg: &::aws_smithy_types::config_bag::ConfigBag) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
164                    let (success, status) = (response.status().is_success(), response.status().as_u16());
165            let headers = response.headers();
166            let body = response.body().bytes().expect("body loaded");
167            #[allow(unused_mut)]
168            let mut force_error = false;
169            ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
170            let parse_result = if !success && status != 200 || force_error {
171                crate::protocol_serde::shape_assume_role_with_saml::de_assume_role_with_saml_http_error(status, headers, body, _cfg)
172            } else {
173                crate::protocol_serde::shape_assume_role_with_saml::de_assume_role_with_saml_http_response(status, headers, body, _cfg)
174            };
175            crate::protocol_serde::type_erase_result(parse_result)
176                }
177            }
178#[derive(Debug)]
179            struct AssumeRoleWithSAMLRequestSerializer;
180            impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for AssumeRoleWithSAMLRequestSerializer {
181                #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
182                fn serialize_input(&self, input: ::aws_smithy_runtime_api::client::interceptors::context::Input, _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
183                    let input = input.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput>().expect("correct type");
184                    let _header_serialization_settings = _cfg.load::<crate::serialization_settings::HeaderSerializationSettings>().cloned().unwrap_or_default();
185                    let mut request_builder = {
186                        #[allow(clippy::uninlined_format_args)]
187fn uri_base(_input: &crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput, output: &mut ::std::string::String) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
188    use ::std::fmt::Write as _;
189    ::std::write!(output, "/").expect("formatting should succeed");
190    ::std::result::Result::Ok(())
191}
192#[allow(clippy::unnecessary_wraps)]
193fn update_http_builder(
194                input: &crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
195                builder: ::http_1x::request::Builder
196            ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
197    let mut uri = ::std::string::String::new();
198    uri_base(input, &mut uri)?;
199    ::std::result::Result::Ok(builder.method("POST").uri(uri))
200}
201let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
202builder = _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
203builder
204                    };
205                    let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_assume_role_with_saml_input::ser_assume_role_with_saml_input_input_input(&input)?);
206                    if let Some(content_length) = body.content_length() {
207                                let content_length = content_length.to_string();
208                                request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
209                            }
210                    ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
211                }
212            }
213#[derive(Debug)]
214            struct AssumeRoleWithSAMLEndpointParamsInterceptor;
215
216            #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
217            impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleWithSAMLEndpointParamsInterceptor {
218                fn name(&self) -> &'static str {
219                    "AssumeRoleWithSAMLEndpointParamsInterceptor"
220                }
221
222                fn read_before_execution(
223                    &self,
224                    context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
225                    cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
226                ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
227                    let _input = context.input()
228                        .downcast_ref::<AssumeRoleWithSamlInput>()
229                        .ok_or("failed to downcast to AssumeRoleWithSamlInput")?;
230
231
232
233                    let params = crate::config::endpoint::Params::builder()
234                        .set_region(cfg.load::<::aws_types::region::Region>().map(|r|r.as_ref().to_owned()))
235.set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
236.set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
237.set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
238                        .build()
239                        .map_err(|err| ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err))?;
240                    cfg.interceptor_state().store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
241                    ::std::result::Result::Ok(())
242                }
243            }
244
245            // The get_* functions below are generated from JMESPath expressions in the
246            // operationContextParams trait. They target the operation's input shape.
247
248
249
250/// Error type for the `AssumeRoleWithSAMLError` operation.
251#[non_exhaustive]
252#[derive(::std::fmt::Debug)]
253pub enum AssumeRoleWithSAMLError {
254    /// <p>The web identity token that was passed is expired or is not valid. Get a new identity token from the identity provider and then retry the request.</p>
255    ExpiredTokenException(crate::types::error::ExpiredTokenException),
256    /// <p>The identity provider (IdP) reported that authentication failed. This might be because the claim is invalid.</p>
257    /// <p>If this error is returned for the <code>AssumeRoleWithWebIdentity</code> operation, it can also mean that the claim has expired or has been explicitly revoked.</p>
258    IdpRejectedClaimException(crate::types::error::IdpRejectedClaimException),
259    /// <p>The web identity token that was passed could not be validated by Amazon Web Services. Get a new identity token from the identity provider and then retry the request.</p>
260    InvalidIdentityTokenException(crate::types::error::InvalidIdentityTokenException),
261    /// <p>The request was rejected because the policy document was malformed. The error message describes the specific error.</p>
262    MalformedPolicyDocumentException(crate::types::error::MalformedPolicyDocumentException),
263    /// <p>The request was rejected because the total packed size of the session policies and session tags combined was too large. An Amazon Web Services conversion compresses the session policy document, session policy ARNs, and session tags into a packed binary format that has a separate limit. The error message indicates by percentage how close the policies and tags are to the upper size limit. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the <i>IAM User Guide</i>.</p>
264    /// <p>You could receive this error even though you meet other defined session policy and session tag limits. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length">IAM and STS Entity Character Limits</a> in the <i>IAM User Guide</i>.</p>
265    PackedPolicyTooLargeException(crate::types::error::PackedPolicyTooLargeException),
266    /// <p>STS is not activated in the requested region for the account that is being asked to generate credentials. The account administrator must use the IAM console to activate STS in that region. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html#sts-regions-activate-deactivate">Activating and Deactivating STS in an Amazon Web Services Region</a> in the <i>IAM User Guide</i>.</p>
267    RegionDisabledException(crate::types::error::RegionDisabledException),
268    /// An unexpected error occurred (e.g., invalid JSON returned by the service or an unknown error code).
269                    #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
270    variable wildcard pattern and check `.code()`:
271     \
272    &nbsp;&nbsp;&nbsp;`err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
273     \
274    See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-AssumeRoleWithSAMLError) for what information is available for the error.")]
275                    Unhandled(crate::error::sealed_unhandled::Unhandled),
276}
277impl AssumeRoleWithSAMLError {
278    /// Creates the `AssumeRoleWithSAMLError::Unhandled` variant from any error type.
279                    pub fn unhandled(err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>) -> Self {
280                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.into(), meta: ::std::default::Default::default() })
281                    }
282
283                    /// Creates the `AssumeRoleWithSAMLError::Unhandled` variant from an [`ErrorMetadata`](::aws_smithy_types::error::ErrorMetadata).
284                    pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
285                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.clone().into(), meta: err })
286                    }
287    ///
288    /// Returns error metadata, which includes the error code, message,
289    /// request ID, and potentially additional information.
290    ///
291    pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
292        match self {
293            Self::ExpiredTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
294            Self::IdpRejectedClaimException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
295            Self::InvalidIdentityTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
296            Self::MalformedPolicyDocumentException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
297            Self::PackedPolicyTooLargeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
298            Self::RegionDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
299            Self::Unhandled(e) => &e.meta,
300        }
301    }
302    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::ExpiredTokenException`.
303    pub fn is_expired_token_exception(&self) -> bool {
304        matches!(self, Self::ExpiredTokenException(_))
305    }
306    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::IdpRejectedClaimException`.
307    pub fn is_idp_rejected_claim_exception(&self) -> bool {
308        matches!(self, Self::IdpRejectedClaimException(_))
309    }
310    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::InvalidIdentityTokenException`.
311    pub fn is_invalid_identity_token_exception(&self) -> bool {
312        matches!(self, Self::InvalidIdentityTokenException(_))
313    }
314    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::MalformedPolicyDocumentException`.
315    pub fn is_malformed_policy_document_exception(&self) -> bool {
316        matches!(self, Self::MalformedPolicyDocumentException(_))
317    }
318    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::PackedPolicyTooLargeException`.
319    pub fn is_packed_policy_too_large_exception(&self) -> bool {
320        matches!(self, Self::PackedPolicyTooLargeException(_))
321    }
322    /// Returns `true` if the error kind is `AssumeRoleWithSAMLError::RegionDisabledException`.
323    pub fn is_region_disabled_exception(&self) -> bool {
324        matches!(self, Self::RegionDisabledException(_))
325    }
326}
327impl ::std::error::Error for AssumeRoleWithSAMLError {
328    fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
329        match self {
330            Self::ExpiredTokenException(_inner) =>
331            ::std::option::Option::Some(_inner)
332            ,
333            Self::IdpRejectedClaimException(_inner) =>
334            ::std::option::Option::Some(_inner)
335            ,
336            Self::InvalidIdentityTokenException(_inner) =>
337            ::std::option::Option::Some(_inner)
338            ,
339            Self::MalformedPolicyDocumentException(_inner) =>
340            ::std::option::Option::Some(_inner)
341            ,
342            Self::PackedPolicyTooLargeException(_inner) =>
343            ::std::option::Option::Some(_inner)
344            ,
345            Self::RegionDisabledException(_inner) =>
346            ::std::option::Option::Some(_inner)
347            ,
348            Self::Unhandled(_inner) => {
349                ::std::option::Option::Some(&*_inner.source)
350            }
351        }
352    }
353}
354impl ::std::fmt::Display for AssumeRoleWithSAMLError {
355    fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
356        match self {
357            Self::ExpiredTokenException(_inner) =>
358            _inner.fmt(f)
359            ,
360            Self::IdpRejectedClaimException(_inner) =>
361            _inner.fmt(f)
362            ,
363            Self::InvalidIdentityTokenException(_inner) =>
364            _inner.fmt(f)
365            ,
366            Self::MalformedPolicyDocumentException(_inner) =>
367            _inner.fmt(f)
368            ,
369            Self::PackedPolicyTooLargeException(_inner) =>
370            _inner.fmt(f)
371            ,
372            Self::RegionDisabledException(_inner) =>
373            _inner.fmt(f)
374            ,
375            Self::Unhandled(_inner) => {
376                if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
377                                                        write!(f, "unhandled error ({code})")
378                                                    } else {
379                                                        f.write_str("unhandled error")
380                                                    }
381            }
382        }
383    }
384}
385impl ::aws_smithy_types::retry::ProvideErrorKind for AssumeRoleWithSAMLError {
386    fn code(&self) -> ::std::option::Option<&str> {
387        ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
388    }
389    fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
390        ::std::option::Option::None
391    }
392}
393impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleWithSAMLError {
394    fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
395        match self {
396            Self::ExpiredTokenException(_inner) =>
397            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
398            ,
399            Self::IdpRejectedClaimException(_inner) =>
400            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
401            ,
402            Self::InvalidIdentityTokenException(_inner) =>
403            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
404            ,
405            Self::MalformedPolicyDocumentException(_inner) =>
406            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
407            ,
408            Self::PackedPolicyTooLargeException(_inner) =>
409            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
410            ,
411            Self::RegionDisabledException(_inner) =>
412            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
413            ,
414            Self::Unhandled(_inner) => {
415                &_inner.meta
416            }
417        }
418    }
419}
420impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleWithSAMLError {
421    fn create_unhandled_error(
422                        source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
423                        meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>
424                    ) -> Self {
425        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source, meta: meta.unwrap_or_default() })
426    }
427}
428impl ::aws_types::request_id::RequestId for crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError {
429                                fn request_id(&self) -> Option<&str> {
430                                    self.meta().request_id()
431                                }
432                            }
433
434pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_input::AssumeRoleWithSamlInput;
435
436pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutput;
437
438mod _assume_role_with_saml_input;
439
440mod _assume_role_with_saml_output;
441
442/// Builders
443pub mod builders;
444