mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-08-23 22:26:49 +00:00
🌱 Bump the aws group across 1 directory with 5 updates (#1549)
Bumps the aws group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.41.8` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.18` | `1.32.19` | | [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.84.0` | `1.84.1` | | [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-sdk-go-v2) | `1.53.10` | `1.53.11` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.25.1` | `1.26.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.41.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.41.7...v1.41.8) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.18 to 1.32.19 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.18...config/v1.32.19) Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.84.0 to 1.84.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.84.0...service/s3/v1.84.1) Updates `github.com/aws/aws-sdk-go-v2/service/iam` from 1.53.10 to 1.53.11 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ecs/v1.53.10...service/ecs/v1.53.11) Updates `github.com/aws/smithy-go` from 1.25.1 to 1.26.0 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/smithy-go/compare/v1.25.1...v1.26.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: aws - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: aws - dependency-name: github.com/aws/aws-sdk-go-v2/service/eks dependency-version: 1.84.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: aws - dependency-name: github.com/aws/aws-sdk-go-v2/service/iam dependency-version: 1.53.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: aws - dependency-name: github.com/aws/smithy-go dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot]
@@ -3,11 +3,11 @@ module open-cluster-management.io/ocm
|
||||
go 1.25.0
|
||||
|
||||
require (
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.7
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.18
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.0
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.10
|
||||
github.com/aws/smithy-go v1.25.1
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.8
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.19
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.1
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.11
|
||||
github.com/aws/smithy-go v1.26.0
|
||||
github.com/cloudevents/sdk-go/v2 v2.16.2
|
||||
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
|
||||
github.com/evanphx/json-patch v5.9.11+incompatible
|
||||
@@ -65,17 +65,17 @@ require (
|
||||
github.com/Masterminds/sprig/v3 v3.3.0 // indirect
|
||||
github.com/NYTimes/gziphandler v1.1.1 // indirect
|
||||
github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.17 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.18 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.24 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.24 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.24 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.25 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.24 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.1.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.18 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.2 // indirect
|
||||
github.com/beorn7/perks v1.0.1 // indirect
|
||||
github.com/blang/semver/v4 v4.0.0 // indirect
|
||||
github.com/bwmarrin/snowflake v0.3.0 // indirect
|
||||
|
||||
@@ -30,38 +30,38 @@ github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cq
|
||||
github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
|
||||
github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
|
||||
github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.7 h1:DWpAJt66FmnnaRIOT/8ASTucrvuDPZASqhhLey6tLY8=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.7/go.mod h1:4LAfZOPHNVNQEckOACQx60Y8pSRjIkNZQz1w92xpMJc=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.18 h1:Hcia46bxhGgF3BaSnG8nSNCWmqTK6bj9xN9/FJ3WK6Q=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.18/go.mod h1:zEjCAYmxqDadH1WX8CdBvmLKhUEUVFgKRQG38zjDmrY=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.17 h1:gP2nkGsS+KMvF/jfFz2Vv2qiiOqWKyPACSzPsqHgoW8=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.17/go.mod h1:Bsew3S/moG5iT77giPj1q8wb/s0RE5/QfH+ASjYtuQc=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 h1:UuSfcORqNSz/ey3VPRS8TcVH2Ikf0/sC+Hdj400QI6U=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23/go.mod h1:+G/OSGiOFnSOkYloKj/9M35s74LgVAdJBSD5lsFfqKg=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 h1:GpT/TrnBYuE5gan2cZbTtvP+JlHsutdmlV2YfEyNde0=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23/go.mod h1:xYWD6BS9ywC5bS3sz9Xh04whO/hzK2plt2Zkyrp4JuA=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 h1:bpd8vxhlQi2r1hiueOw02f/duEPTMK59Q4QMAoTTtTo=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23/go.mod h1:15DfR2nw+CRHIk0tqNyifu3G1YdAOy68RftkhMDDwYk=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 h1:OQqn11BtaYv1WLUowvcA30MpzIu8Ti4pcLPIIyoKZrA=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24/go.mod h1:X5ZJyfwVrWA96GzPmUCWFQaEARPR7gCrpq2E92PJwAE=
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.0 h1:U9HMTDPdZtkCOTE8ACbHQJmXGBKP7/mBds7M1JbUZH0=
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.0/go.mod h1:JQcyECIV9iZHm+GMrWn1pTPTJYRavOVsqPvlCbjt+Fg=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.10 h1:kcN3I3llO7VwIY5w3Pc5FmEonpsr23Ou7Cwk4qf7dik=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.10/go.mod h1:1vkJzjCYC3byO0kIrBqLPzvZpuvYhPXkuyARs6E7tM4=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.8 h1:sRs7nG6/RiEBZ/K5UO2sNw0w40U02Nmz1VtARloTZXk=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.8/go.mod h1:4LAfZOPHNVNQEckOACQx60Y8pSRjIkNZQz1w92xpMJc=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.19 h1:qRhIJMbevHUvIE7X4TK8N8zye5+5AhapcslPrvB+qKE=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.19/go.mod h1:RbJ24nfoya63+Mf5VI+CGCGk9vEdv28xPeii+gojRYs=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.18 h1:GcXQz2M/0ZvMo0v5DakUqbDBeBM1ZNaivkolEF4Esgw=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.18/go.mod h1:sHJ06tMGcD3ZpmMyJqV+VBsGilhSIZPIN+ZFy5Dg0C4=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.24 h1:FQm5ApnyzkuJdXLGskPce83CK1CQKC4RUnIHKVe4BU4=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.24/go.mod h1:JsC7dqQc55MlZ5mvNsDMMge71u8pVcSzU3RNz2h/5yQ=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.24 h1:u6kJU2i0va1AgtJsH3RdWKWqHULlTh7zHwb35Womf74=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.24/go.mod h1:7GY+xLcXOFUpCkNwDReft9qOAVg54A4/AnjHIU7sSAY=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.24 h1:Xhbcf3KugX6vX7SDyUK205Oicyfg7EGuvoVNyP5L6DM=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.24/go.mod h1:rwDgb2HNOGZsnTHylOUedM7Vnl+bCfnXDqUNPsFWYfk=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.25 h1:54CTMmlJ71Rk2dYvM9qZOob+39wjlVja2zDLxCu69Ew=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.25/go.mod h1:BZaHqxsS9vN1fvV5EfEl0OBLOk5+AajWsMu6MjqnZB4=
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.1 h1:v3IeM72tqpk3LGx+PCPEP2IP8SsBwdIimDRpk+RcAvc=
|
||||
github.com/aws/aws-sdk-go-v2/service/eks v1.84.1/go.mod h1:4KiCxT4w134foeUz8N5tKJBNaKMBw62nYTsr9ewDVP4=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.11 h1:xt4JHLHBQonQXApaYfS0FvdIeALRuaN/aUWxM+4RNSo=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.11/go.mod h1:VkuYu8oSpQAx+hKNFvJqqei6/PACzkpqVdM6ylo0scg=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9 h1:FLudkZLt5ci0ozzgkVo8BJGwvqNaZbTWb3UcucAateA=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9/go.mod h1:w7wZ/s9qK7c8g4al+UyoF1Sp/Z45UwMGcqIzLWVQHWk=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23 h1:pbrxO/kuIwgEsOPLkaHu0O+m4fNgLU8B3vxQ+72jTPw=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23/go.mod h1:/CMNUqoj46HpS3MNRDEDIwcgEnrtZlKRaHNaHxIFpNA=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11 h1:TdJ+HdzOBhU8+iVAOGUTU63VXopcumCOF1paFulHWZc=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11/go.mod h1:R82ZRExE/nheo0N+T8zHPcLRTcH8MGsnR3BiVGX0TwI=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17 h1:7byT8HUWrgoRp6sXjxtZwgOKfhss5fW6SkLBtqzgRoE=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17/go.mod h1:xNWknVi4Ezm1vg1QsB/5EWpAJURq22uqd38U8qKvOJc=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0 h1:nDARhv/oF55bcxF7rCI/4PDxOKnVXVWwDuDwCs2I2SQ=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0/go.mod h1:4vIRDq+CJB2xFAXZ+YgGUTiEft7oAQlhIs71xcSeuVg=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.1 h1:F/M5Y9I3nwr2IEpshZgh1GeHpOItExNM9L1euNuh/fk=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.1/go.mod h1:mTNxImtovCOEEuD65mKW7DCsL+2gjEH+RPEAexAzAio=
|
||||
github.com/aws/smithy-go v1.25.1 h1:J8ERsGSU7d+aCmdQur5Txg6bVoYelvQJgtZehD12GkI=
|
||||
github.com/aws/smithy-go v1.25.1/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.24 h1:CQW2FTrflfoslYWLf3fv7vG28Q219+v8YJS5QTQb2+Y=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.24/go.mod h1:Xfx13T+u3nH6EEzgl9fBSO6nDRmze1FvnZNYkctQ2zw=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.1.0 h1:yQo3eZ5qFaL1sJWqs1nL6j3yPHA2/R7c6tQ4T+0IO10=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.1.0/go.mod h1:3Zzou41Qt/ueXfIzHvTEjDNuR5IjCUBVF01SNhrt1e8=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.18 h1:ApLTFdAZfDhZSiY5uskwECKHkSNNF83y2Ru2r7SezWA=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.18/go.mod h1:A9K9qx2l6nK89hp+a350FdGfRkrkH5HdiEjHbiy/Q/c=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.1 h1:4VD7TIZOGzehrgQ8vDE+1c6BQW4ErZPGY8ohZT5LXEE=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.1/go.mod h1:er0SFJfdV89Rit5hIJu/EXtv+qC2XMnxoksLmcUFkqM=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.2 h1:XKnxlM4KZH1gktcsh3zSWc7GW4KivEv/OkifmHOhCUY=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.2/go.mod h1:KJYmkQaFB3SUW2j3aBkPsxNmAb4ZsSOvbvCpuxzHJA0=
|
||||
github.com/aws/smithy-go v1.26.0 h1:9ouqbi+NyKP7fV3Te7UElCwdAb6Y8uk7LGwPE5tVe/s=
|
||||
github.com/aws/smithy-go v1.26.0/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
|
||||
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
|
||||
github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
|
||||
github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM=
|
||||
|
||||
+4
@@ -204,6 +204,10 @@ type Config struct {
|
||||
// when constructing clients for specific services. Each callback function receives the service ID
|
||||
// and the service's Options struct, allowing for dynamic configuration based on the service.
|
||||
ServiceOptions []func(string, any)
|
||||
|
||||
// Controls whether the SDK restricts file permissions on credential
|
||||
// cache files it creates.
|
||||
RestrictFilePermissions RestrictFilePermissions
|
||||
}
|
||||
|
||||
// NewConfig returns a new Config pointer that can be chained with builder
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package aws
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.41.7"
|
||||
const goModuleVersion = "1.41.8"
|
||||
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
package aws
|
||||
|
||||
// RestrictFilePermissions controls whether the SDK restricts file permissions
|
||||
// on credential cache files it creates.
|
||||
type RestrictFilePermissions string
|
||||
|
||||
const (
|
||||
// RestrictFilePermissionsUnset indicates the setting has not been
|
||||
// configured.
|
||||
RestrictFilePermissionsUnset RestrictFilePermissions = ""
|
||||
|
||||
// RestrictFilePermissionsUserReadWrite sets file permissions to owner
|
||||
// read/write only (0600) and directory permissions to owner only (0700)
|
||||
// when creating new cache files and directories on Unix. This is the
|
||||
// default behavior.
|
||||
RestrictFilePermissionsUserReadWrite RestrictFilePermissions = "user_read_write"
|
||||
|
||||
// RestrictFilePermissionsUnrestricted does not set any file or directory
|
||||
// permissions, relying on the system's default umask.
|
||||
RestrictFilePermissionsUnrestricted RestrictFilePermissions = "unrestricted"
|
||||
)
|
||||
+5
@@ -1,3 +1,8 @@
|
||||
# v1.32.19 (2026-05-28)
|
||||
|
||||
* **Bug Fix**: Adds support for AWS_RESTRICT_FILE_PERMISSIONS for env and in-code config.
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.32.18 (2026-05-22)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
+2
@@ -96,6 +96,8 @@ var defaultAWSConfigResolvers = []awsConfigResolver{
|
||||
|
||||
// Sets the ServiceOptions if present in LoadOptions
|
||||
resolveServiceOptions,
|
||||
|
||||
resolveRestrictFilePermissions,
|
||||
}
|
||||
|
||||
// A Config represents a generic configuration value or set of values. This type
|
||||
|
||||
+34
@@ -87,6 +87,8 @@ const (
|
||||
awsResponseChecksumValidation = "AWS_RESPONSE_CHECKSUM_VALIDATION"
|
||||
|
||||
awsAuthSchemePreferenceEnv = "AWS_AUTH_SCHEME_PREFERENCE"
|
||||
|
||||
awsRestrictFilePermissionsEnv = "AWS_RESTRICT_FILE_PERMISSIONS"
|
||||
)
|
||||
|
||||
var (
|
||||
@@ -309,6 +311,10 @@ type EnvConfig struct {
|
||||
|
||||
// Priority list of preferred auth scheme names (e.g. sigv4a).
|
||||
AuthSchemePreference []string
|
||||
|
||||
// Controls whether the SDK restricts file permissions on credential
|
||||
// cache files it creates.
|
||||
RestrictFilePermissions aws.RestrictFilePermissions
|
||||
}
|
||||
|
||||
// loadEnvConfig reads configuration values from the OS's environment variables.
|
||||
@@ -422,6 +428,10 @@ func NewEnvConfig() (EnvConfig, error) {
|
||||
|
||||
cfg.AuthSchemePreference = toAuthSchemePreferenceList(os.Getenv(awsAuthSchemePreferenceEnv))
|
||||
|
||||
if err := setRestrictFilePermissionsFromEnvVal(&cfg.RestrictFilePermissions, []string{awsRestrictFilePermissionsEnv}); err != nil {
|
||||
return cfg, err
|
||||
}
|
||||
|
||||
return cfg, nil
|
||||
}
|
||||
|
||||
@@ -930,3 +940,27 @@ func (c EnvConfig) getAuthSchemePreference() ([]string, bool) {
|
||||
}
|
||||
return nil, false
|
||||
}
|
||||
|
||||
func (c EnvConfig) getRestrictFilePermissions(context.Context) (aws.RestrictFilePermissions, bool, error) {
|
||||
return c.RestrictFilePermissions, len(c.RestrictFilePermissions) > 0, nil
|
||||
}
|
||||
|
||||
func setRestrictFilePermissionsFromEnvVal(m *aws.RestrictFilePermissions, keys []string) error {
|
||||
for _, k := range keys {
|
||||
value := os.Getenv(k)
|
||||
if len(value) == 0 {
|
||||
continue
|
||||
}
|
||||
|
||||
switch strings.ToLower(value) {
|
||||
case "user_read_write":
|
||||
*m = aws.RestrictFilePermissionsUserReadWrite
|
||||
case "unrestricted":
|
||||
*m = aws.RestrictFilePermissionsUnrestricted
|
||||
default:
|
||||
return fmt.Errorf("invalid value for environment variable, %s=%s, must be user_read_write/unrestricted", k, value)
|
||||
}
|
||||
break
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package config
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.32.18"
|
||||
const goModuleVersion = "1.32.19"
|
||||
|
||||
+16
@@ -240,6 +240,10 @@ type LoadOptions struct {
|
||||
// when constructing clients for specific services. Each callback function receives the service ID
|
||||
// and the service's Options struct, allowing for dynamic configuration based on the service.
|
||||
ServiceOptions []func(string, any)
|
||||
|
||||
// Controls whether the SDK restricts file permissions on credential
|
||||
// cache files it creates.
|
||||
RestrictFilePermissions aws.RestrictFilePermissions
|
||||
}
|
||||
|
||||
func (o LoadOptions) getDefaultsMode(ctx context.Context) (aws.DefaultsMode, bool, error) {
|
||||
@@ -1353,3 +1357,15 @@ func (o LoadOptions) getAuthSchemePreference() ([]string, bool) {
|
||||
}
|
||||
return nil, false
|
||||
}
|
||||
|
||||
func (o LoadOptions) getRestrictFilePermissions(context.Context) (aws.RestrictFilePermissions, bool, error) {
|
||||
return o.RestrictFilePermissions, len(o.RestrictFilePermissions) > 0, nil
|
||||
}
|
||||
|
||||
// WithRestrictFilePermissions sets the RestrictFilePermissions mode on config.
|
||||
func WithRestrictFilePermissions(m aws.RestrictFilePermissions) LoadOptionsFunc {
|
||||
return func(o *LoadOptions) error {
|
||||
o.RestrictFilePermissions = m
|
||||
return nil
|
||||
}
|
||||
}
|
||||
|
||||
+16
@@ -784,3 +784,19 @@ func getServiceOptions(ctx context.Context, configs configs) (v []func(string, a
|
||||
}
|
||||
return v, found, err
|
||||
}
|
||||
|
||||
type restrictFilePermissionsProvider interface {
|
||||
getRestrictFilePermissions(context.Context) (aws.RestrictFilePermissions, bool, error)
|
||||
}
|
||||
|
||||
func getRestrictFilePermissions(ctx context.Context, configs configs) (value aws.RestrictFilePermissions, found bool, err error) {
|
||||
for _, cfg := range configs {
|
||||
if p, ok := cfg.(restrictFilePermissionsProvider); ok {
|
||||
value, found, err = p.getRestrictFilePermissions(ctx)
|
||||
if err != nil || found {
|
||||
break
|
||||
}
|
||||
}
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
+14
@@ -442,3 +442,17 @@ func resolveServiceOptions(ctx context.Context, cfg *aws.Config, configs configs
|
||||
cfg.ServiceOptions = serviceOptions
|
||||
return nil
|
||||
}
|
||||
|
||||
func resolveRestrictFilePermissions(ctx context.Context, cfg *aws.Config, configs configs) error {
|
||||
m, found, err := getRestrictFilePermissions(ctx, configs)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
if !found {
|
||||
m = aws.RestrictFilePermissionsUserReadWrite
|
||||
}
|
||||
|
||||
cfg.RestrictFilePermissions = m
|
||||
return nil
|
||||
}
|
||||
|
||||
+1
@@ -640,6 +640,7 @@ func resolveLoginCredentials(ctx context.Context, cfg *aws.Config, sharedCfg *Sh
|
||||
svc := signin.NewFromConfig(*cfg)
|
||||
provider := logincreds.New(svc, tokenPath, func(o *logincreds.Options) {
|
||||
o.CredentialSources = getCredentialSources(ctx)
|
||||
o.RestrictPermissions = cfg.RestrictFilePermissions != aws.RestrictFilePermissionsUnrestricted
|
||||
})
|
||||
cfg.Credentials, err = wrapWithCredentialsCache(ctx, configs, provider)
|
||||
if err != nil {
|
||||
|
||||
+5
@@ -1,3 +1,8 @@
|
||||
# v1.19.18 (2026-05-28)
|
||||
|
||||
* **Bug Fix**: Create new login cache files with 0600 on Unix platforms.
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.19.17 (2026-05-22)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package credentials
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.19.17"
|
||||
const goModuleVersion = "1.19.18"
|
||||
|
||||
+2
-2
@@ -9,6 +9,6 @@ var openFile func(string) (io.ReadCloser, error) = func(name string) (io.ReadClo
|
||||
return os.Open(name)
|
||||
}
|
||||
|
||||
var createFile func(string) (io.WriteCloser, error) = func(name string) (io.WriteCloser, error) {
|
||||
return os.Create(name)
|
||||
var createFile func(string, os.FileMode) (io.WriteCloser, error) = func(name string, mode os.FileMode) (io.WriteCloser, error) {
|
||||
return os.OpenFile(name, os.O_RDWR|os.O_CREATE|os.O_TRUNC, mode)
|
||||
}
|
||||
|
||||
+13
-1
@@ -42,6 +42,10 @@ type Options struct {
|
||||
// The path to the cached login token.
|
||||
CachedTokenFilepath string
|
||||
|
||||
// Whether to restrict file permissions on newly-written cache files.
|
||||
// When true, files are created with 0600 on Unix.
|
||||
RestrictPermissions bool
|
||||
|
||||
// The chain of providers that was used to create this provider.
|
||||
//
|
||||
// These values are for reporting purposes and are not meant to be set up
|
||||
@@ -145,7 +149,15 @@ func (p *Provider) saveToken(token *loginToken) error {
|
||||
return err
|
||||
}
|
||||
|
||||
f, err := createFile(p.options.CachedTokenFilepath)
|
||||
mode := os.FileMode(0666) // matches that used by os.Create
|
||||
if p.options.RestrictPermissions {
|
||||
mode = 0600
|
||||
}
|
||||
|
||||
// createFile DOES NOT re-create the file with new permissions if it
|
||||
// already exists, so in that scenario any existing permissions are
|
||||
// preserved
|
||||
f, err := createFile(p.options.CachedTokenFilepath, mode)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.18.24 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.18.23 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package imds
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.18.23"
|
||||
const goModuleVersion = "1.18.24"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.4.24 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.4.23 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package configsources
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.4.23"
|
||||
const goModuleVersion = "1.4.24"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v2.7.24 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v2.7.23 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package endpoints
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "2.7.23"
|
||||
const goModuleVersion = "2.7.24"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.4.25 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.4.24 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package v4a
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.4.24"
|
||||
const goModuleVersion = "1.4.25"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.84.1 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.84.0 (2026-05-21)
|
||||
|
||||
* **Feature**: Adding new BDD representation of endpoint ruleset
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package eks
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.84.0"
|
||||
const goModuleVersion = "1.84.1"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.53.11 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.53.10 (2026-05-01)
|
||||
|
||||
* **Documentation**: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package iam
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.53.10"
|
||||
const goModuleVersion = "1.53.11"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.13.24 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.13.23 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
Generated
Vendored
+1
-1
@@ -3,4 +3,4 @@
|
||||
package presignedurl
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.13.23"
|
||||
const goModuleVersion = "1.13.24"
|
||||
|
||||
+5
@@ -1,3 +1,8 @@
|
||||
# v1.1.0 (2026-05-28)
|
||||
|
||||
* **Feature**: Adding new BDD representation of endpoint ruleset
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.0.11 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+186
-207
@@ -14,6 +14,7 @@ import (
|
||||
internalendpoints "github.com/aws/aws-sdk-go-v2/service/signin/internal/endpoints"
|
||||
smithyauth "github.com/aws/smithy-go/auth"
|
||||
smithyendpoints "github.com/aws/smithy-go/endpoints"
|
||||
"github.com/aws/smithy-go/endpoints/private/bdd"
|
||||
"github.com/aws/smithy-go/endpoints/private/rulesfn"
|
||||
"github.com/aws/smithy-go/middleware"
|
||||
"github.com/aws/smithy-go/ptr"
|
||||
@@ -294,21 +295,193 @@ func (p EndpointParameters) WithDefaults() EndpointParameters {
|
||||
return p
|
||||
}
|
||||
|
||||
type stringSlice []string
|
||||
const bddRoot int32 = 2
|
||||
|
||||
func (s stringSlice) Get(i int) *string {
|
||||
if i < 0 || i >= len(s) {
|
||||
return nil
|
||||
var bddNodes = [48]int32{
|
||||
-1, 1, -1, 0, 15, 3, 1, 4, 100000014, 2, 5, 100000014, 3, 11, 6, 4, 10, 7, 7, 100000004, 8, 8, 100000005, 9, 9, 100000006, 100000013, 5, 100000011, 100000012, 4, 13, 12, 6, 100000009, 100000010, 5, 14, 100000008, 6, 100000007, 100000008, 3, 100000001, 16, 4, 100000002, 100000003}
|
||||
|
||||
type conditionContext struct {
|
||||
PartitionResult *awsrulesfn.PartitionConfig
|
||||
}
|
||||
|
||||
func evalCondition(idx int, params *EndpointParameters, c *conditionContext) bool {
|
||||
switch idx {
|
||||
case 0:
|
||||
return params.Endpoint != nil
|
||||
case 1:
|
||||
return params.Region != nil
|
||||
case 2:
|
||||
if v := awsrulesfn.GetPartition(*params.Region); v != nil {
|
||||
c.PartitionResult = v
|
||||
return true
|
||||
}
|
||||
return false
|
||||
case 3:
|
||||
return *params.UseFIPS == true
|
||||
case 4:
|
||||
return *params.UseDualStack == true
|
||||
case 5:
|
||||
return c.PartitionResult.SupportsDualStack == true
|
||||
case 6:
|
||||
return c.PartitionResult.SupportsFIPS == true
|
||||
case 7:
|
||||
return c.PartitionResult.Name == "aws"
|
||||
case 8:
|
||||
return c.PartitionResult.Name == "aws-cn"
|
||||
case 9:
|
||||
return c.PartitionResult.Name == "aws-us-gov"
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
v := s[i]
|
||||
return &v
|
||||
func resolveResult(idx int32, params *EndpointParameters, c *conditionContext) (smithyendpoints.Endpoint, error) {
|
||||
switch idx {
|
||||
case 0:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint resolution failed: no matching rule")
|
||||
case 1:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: FIPS and custom endpoint are not supported")
|
||||
case 2:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: Dualstack and custom endpoint are not supported")
|
||||
case 3:
|
||||
uriString := *params.Endpoint
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 4:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".signin.aws.amazon.com")
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 5:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".signin.amazonaws.cn")
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 6:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".signin.amazonaws-us-gov.com")
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 7:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin-fips.")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(c.PartitionResult.DualStackDnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 8:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "FIPS and DualStack are enabled, but this partition does not support one or both")
|
||||
case 9:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin-fips.")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(c.PartitionResult.DnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 10:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "FIPS is enabled but this partition does not support FIPS")
|
||||
case 11:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin.")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(c.PartitionResult.DualStackDnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 12:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "DualStack is enabled but this partition does not support DualStack")
|
||||
case 13:
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin.")
|
||||
out.WriteString(*params.Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(c.PartitionResult.DnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
case 14:
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: Missing Region")
|
||||
}
|
||||
return smithyendpoints.Endpoint{}, fmt.Errorf("endpoint rule error, invalid result index: %d", idx)
|
||||
}
|
||||
|
||||
// EndpointResolverV2 provides the interface for resolving service endpoints.
|
||||
type EndpointResolverV2 interface {
|
||||
// ResolveEndpoint attempts to resolve the endpoint with the provided options,
|
||||
// returning the endpoint if found. Otherwise an error is returned.
|
||||
ResolveEndpoint(ctx context.Context, params EndpointParameters) (
|
||||
smithyendpoints.Endpoint, error,
|
||||
)
|
||||
@@ -332,206 +505,12 @@ func (r *resolver) ResolveEndpoint(
|
||||
if err = params.ValidateRequired(); err != nil {
|
||||
return endpoint, fmt.Errorf("endpoint parameters are not valid, %w", err)
|
||||
}
|
||||
_UseDualStack := *params.UseDualStack
|
||||
_ = _UseDualStack
|
||||
_UseFIPS := *params.UseFIPS
|
||||
_ = _UseFIPS
|
||||
|
||||
if exprVal := params.Endpoint; exprVal != nil {
|
||||
_Endpoint := *exprVal
|
||||
_ = _Endpoint
|
||||
if _UseFIPS == true {
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: FIPS and custom endpoint are not supported")
|
||||
}
|
||||
if _UseDualStack == true {
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: Dualstack and custom endpoint are not supported")
|
||||
}
|
||||
uriString := _Endpoint
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
if exprVal := params.Region; exprVal != nil {
|
||||
_Region := *exprVal
|
||||
_ = _Region
|
||||
if exprVal := awsrulesfn.GetPartition(_Region); exprVal != nil {
|
||||
_PartitionResult := *exprVal
|
||||
_ = _PartitionResult
|
||||
if _PartitionResult.Name == "aws" {
|
||||
if _UseFIPS == false {
|
||||
if _UseDualStack == false {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".signin.aws.amazon.com")
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
}
|
||||
}
|
||||
if _PartitionResult.Name == "aws-cn" {
|
||||
if _UseFIPS == false {
|
||||
if _UseDualStack == false {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".signin.amazonaws.cn")
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
}
|
||||
}
|
||||
if _PartitionResult.Name == "aws-us-gov" {
|
||||
if _UseFIPS == false {
|
||||
if _UseDualStack == false {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".signin.amazonaws-us-gov.com")
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
}
|
||||
}
|
||||
if _UseFIPS == true {
|
||||
if _UseDualStack == true {
|
||||
if true == _PartitionResult.SupportsFIPS {
|
||||
if true == _PartitionResult.SupportsDualStack {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin-fips.")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(_PartitionResult.DualStackDnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
}
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "FIPS and DualStack are enabled, but this partition does not support one or both")
|
||||
}
|
||||
}
|
||||
if _UseFIPS == true {
|
||||
if _UseDualStack == false {
|
||||
if _PartitionResult.SupportsFIPS == true {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin-fips.")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(_PartitionResult.DnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "FIPS is enabled but this partition does not support FIPS")
|
||||
}
|
||||
}
|
||||
if _UseFIPS == false {
|
||||
if _UseDualStack == true {
|
||||
if true == _PartitionResult.SupportsDualStack {
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin.")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(_PartitionResult.DualStackDnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "DualStack is enabled but this partition does not support DualStack")
|
||||
}
|
||||
}
|
||||
uriString := func() string {
|
||||
var out strings.Builder
|
||||
out.WriteString("https://signin.")
|
||||
out.WriteString(_Region)
|
||||
out.WriteString(".")
|
||||
out.WriteString(_PartitionResult.DnsSuffix)
|
||||
return out.String()
|
||||
}()
|
||||
|
||||
uri, err := url.Parse(uriString)
|
||||
if err != nil {
|
||||
return endpoint, fmt.Errorf("Failed to parse uri: %s", uriString)
|
||||
}
|
||||
|
||||
return smithyendpoints.Endpoint{
|
||||
URI: *uri,
|
||||
Headers: http.Header{},
|
||||
}, nil
|
||||
}
|
||||
return endpoint, fmt.Errorf("Endpoint resolution failed. Invalid operation or environment input.")
|
||||
}
|
||||
return endpoint, fmt.Errorf("endpoint rule error, %s", "Invalid Configuration: Missing Region")
|
||||
c := &conditionContext{}
|
||||
ref := bdd.Evaluate(bddNodes[:], bddRoot, func(idx int) bool {
|
||||
return evalCondition(idx, ¶ms, c)
|
||||
})
|
||||
return resolveResult(ref, ¶ms, c)
|
||||
}
|
||||
|
||||
type endpointParamsBinder interface {
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package signin
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.0.11"
|
||||
const goModuleVersion = "1.1.0"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.30.18 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.30.17 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package sso
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.30.17"
|
||||
const goModuleVersion = "1.30.18"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.36.1 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.36.0 (2026-05-22)
|
||||
|
||||
* **Feature**: Adding new BDD representation of endpoint ruleset
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package ssooidc
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.36.0"
|
||||
const goModuleVersion = "1.36.1"
|
||||
|
||||
+4
@@ -1,3 +1,7 @@
|
||||
# v1.42.2 (2026-05-28)
|
||||
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
# v1.42.1 (2026-04-29)
|
||||
|
||||
* **Dependency Update**: Update to smithy-go v1.25.1.
|
||||
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package sts
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.42.1"
|
||||
const goModuleVersion = "1.42.2"
|
||||
|
||||
+9
@@ -1,3 +1,12 @@
|
||||
# Release (2026-05-27)
|
||||
|
||||
## General Highlights
|
||||
* **Dependency Update**: Updated to the latest SDK module versions
|
||||
|
||||
## Module Highlights
|
||||
* `github.com/aws/smithy-go`: v1.26.0
|
||||
* **Feature**: Add StringSlice to endpoint rulesfn.
|
||||
|
||||
# Release (2026-04-23)
|
||||
|
||||
## General Highlights
|
||||
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
package rulesfn
|
||||
|
||||
// StringSlice is a string slice with a negative-index-aware Get method for use
|
||||
// in endpoint rule evaluation.
|
||||
type StringSlice []string
|
||||
|
||||
// Get returns a pointer to the string at index i, or nil if the index is out
|
||||
// of bounds. Negative indices count from the end of the slice.
|
||||
func (s StringSlice) Get(i int) *string {
|
||||
if i < 0 {
|
||||
i = len(s) + i
|
||||
}
|
||||
if i < 0 || i >= len(s) {
|
||||
return nil
|
||||
}
|
||||
v := s[i]
|
||||
return &v
|
||||
}
|
||||
+1
-1
@@ -3,4 +3,4 @@
|
||||
package smithy
|
||||
|
||||
// goModuleVersion is the tagged release for this module
|
||||
const goModuleVersion = "1.25.1"
|
||||
const goModuleVersion = "1.26.0"
|
||||
|
||||
Vendored
+15
-15
@@ -66,7 +66,7 @@ github.com/NYTimes/gziphandler
|
||||
# github.com/antlr4-go/antlr/v4 v4.13.1
|
||||
## explicit; go 1.22
|
||||
github.com/antlr4-go/antlr/v4
|
||||
# github.com/aws/aws-sdk-go-v2 v1.41.7
|
||||
# github.com/aws/aws-sdk-go-v2 v1.41.8
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/aws
|
||||
github.com/aws/aws-sdk-go-v2/aws/arn
|
||||
@@ -92,11 +92,11 @@ github.com/aws/aws-sdk-go-v2/internal/shareddefaults
|
||||
github.com/aws/aws-sdk-go-v2/internal/strings
|
||||
github.com/aws/aws-sdk-go-v2/internal/sync/singleflight
|
||||
github.com/aws/aws-sdk-go-v2/internal/timeconv
|
||||
# github.com/aws/aws-sdk-go-v2/config v1.32.18
|
||||
# github.com/aws/aws-sdk-go-v2/config v1.32.19
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/config
|
||||
github.com/aws/aws-sdk-go-v2/config/internal/ini
|
||||
# github.com/aws/aws-sdk-go-v2/credentials v1.19.17
|
||||
# github.com/aws/aws-sdk-go-v2/credentials v1.19.18
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/credentials
|
||||
github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds
|
||||
@@ -106,27 +106,27 @@ github.com/aws/aws-sdk-go-v2/credentials/logincreds
|
||||
github.com/aws/aws-sdk-go-v2/credentials/processcreds
|
||||
github.com/aws/aws-sdk-go-v2/credentials/ssocreds
|
||||
github.com/aws/aws-sdk-go-v2/credentials/stscreds
|
||||
# github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23
|
||||
# github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.24
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config
|
||||
# github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23
|
||||
# github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.24
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources
|
||||
# github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23
|
||||
# github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.24
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
|
||||
# github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24
|
||||
# github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.25
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a/internal/crypto
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a/internal/v4
|
||||
# github.com/aws/aws-sdk-go-v2/service/eks v1.84.0
|
||||
# github.com/aws/aws-sdk-go-v2/service/eks v1.84.1
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/eks
|
||||
github.com/aws/aws-sdk-go-v2/service/eks/internal/endpoints
|
||||
github.com/aws/aws-sdk-go-v2/service/eks/types
|
||||
# github.com/aws/aws-sdk-go-v2/service/iam v1.53.10
|
||||
# github.com/aws/aws-sdk-go-v2/service/iam v1.53.11
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/iam
|
||||
github.com/aws/aws-sdk-go-v2/service/iam/internal/endpoints
|
||||
@@ -134,30 +134,30 @@ github.com/aws/aws-sdk-go-v2/service/iam/types
|
||||
# github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
|
||||
# github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23
|
||||
# github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.24
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
|
||||
# github.com/aws/aws-sdk-go-v2/service/signin v1.0.11
|
||||
# github.com/aws/aws-sdk-go-v2/service/signin v1.1.0
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/signin
|
||||
github.com/aws/aws-sdk-go-v2/service/signin/internal/endpoints
|
||||
github.com/aws/aws-sdk-go-v2/service/signin/types
|
||||
# github.com/aws/aws-sdk-go-v2/service/sso v1.30.17
|
||||
# github.com/aws/aws-sdk-go-v2/service/sso v1.30.18
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/sso
|
||||
github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints
|
||||
github.com/aws/aws-sdk-go-v2/service/sso/types
|
||||
# github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0
|
||||
# github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.1
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc/types
|
||||
# github.com/aws/aws-sdk-go-v2/service/sts v1.42.1
|
||||
# github.com/aws/aws-sdk-go-v2/service/sts v1.42.2
|
||||
## explicit; go 1.24
|
||||
github.com/aws/aws-sdk-go-v2/service/sts
|
||||
github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints
|
||||
github.com/aws/aws-sdk-go-v2/service/sts/types
|
||||
# github.com/aws/smithy-go v1.25.1
|
||||
# github.com/aws/smithy-go v1.26.0
|
||||
## explicit; go 1.24
|
||||
github.com/aws/smithy-go
|
||||
github.com/aws/smithy-go/auth
|
||||
|
||||
Reference in New Issue
Block a user