import{S4 as V}from"./cli-0.5.4-fgzz0h5k.mjs";import{u5 as W}from"./cli-0.5.4-hwjx0gja.mjs";import{Mma as g}from"./cli-0.5.4-f2v2k9ae.mjs";import"./cli-0.5.4-jpahwy23.mjs";import{Vma as H,Zma as F,_ma as O}from"./cli-0.5.4-aacw1src.mjs";function M(b,q){let j=N(b),B,G,z,Q=async(J)=>{if(J?.forceRefresh)return await j(J);if(z?.expiration){if(z?.expiration?.getTime()<Date.now())z=void 0}if(B)await B;else if(!z||q?.(z))if(z){if(!G)G=j(J).then((X)=>{z=X}).finally(()=>{G=void 0})}else return B=j(J).then((X)=>{z=X}).finally(()=>{B=void 0}),Q(J);return z};return Q}var Y,K,h,Z="AWS_EC2_METADATA_DISABLED",x=async(b)=>{let{ENV_CMDS_FULL_URI:q,ENV_CMDS_RELATIVE_URI:j,fromContainerMetadata:B,fromInstanceMetadata:G}=await import("./index-0.5.4-92qddmrf.mjs");if(process.env[j]||process.env[q]){b.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");let{fromHttp:z}=await import("./index-0.5.4-9d8r00vp.mjs").then((m)=>H(m.default,1));return K.chain(z(b),B(b))}if(process.env[Z]&&process.env[Z]!=="false")return async()=>{throw new K.CredentialsProviderError("EC2 Instance Metadata Service access disabled",{logger:b.logger})};return b.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromInstanceMetadata"),G(b)},N=(b)=>async(q)=>{let j;for(let B of b)try{return await B(q)}catch(G){if(j=G,G?.tryNextLink)continue;throw G}throw j},$=!1,T=(b={})=>M([async()=>{if(b.profile??process.env[h.ENV_PROFILE]){if(process.env[Y.ENV_KEY]&&process.env[Y.ENV_SECRET]){if(!$)(b.logger?.warn&&b.logger?.constructor?.name!=="NoOpLogger"?b.logger.warn.bind(b.logger):console.warn)(`@aws-sdk/credential-provider-node - defaultProvider::fromEnv WARNING:
    Multiple credential sources detected: 
    Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
    This SDK will proceed with the AWS_PROFILE value.
    
    However, a future version may change this behavior to prefer the ENV static credentials.
    Please ensure that your environment only sets either the AWS_PROFILE or the
    AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
`),$=!0}throw new K.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.",{logger:b.logger,tryNextLink:!0})}return b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),Y.fromEnv(b)()},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:j,ssoAccountId:B,ssoRegion:G,ssoRoleName:z,ssoSession:Q}=b;if(!j&&!B&&!G&&!z&&!Q)throw new K.CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:b.logger});let{fromSSO:J}=await import("./index-0.5.4-n6esh0p4.mjs");return J(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");let{fromIni:j}=await import("./index-0.5.4-64ccq7n9.mjs");return j(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");let{fromProcess:j}=await import("./index-0.5.4-ta10y7av.mjs");return j(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");let{fromTokenFile:j}=await import("./index-0.5.4-9meqpns3.mjs").then((m)=>H(m.default,1));return j(b)(q)},async()=>{return b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider"),(await x(b))()},async()=>{throw new K.CredentialsProviderError("Could not load credentials from any providers",{tryNextLink:!1,logger:b.logger})}],D),U=(b)=>b?.expiration!==void 0,D=(b)=>b?.expiration!==void 0&&b.expiration.getTime()-Date.now()<300000,C,u,A;var R=F(()=>{Y=V(),K=g(),h=W();C=D,u=U,A=T});R();export{A as defaultProvider,u as credentialsWillNeedRefresh,C as credentialsTreatedAsExpired};export default {get defaultProvider(){return A},get credentialsWillNeedRefresh(){return u},get credentialsTreatedAsExpired(){return C}};
