import{T4 as S}from"./cli-0.5.4-kfgnms3g.mjs";import"./cli-0.5.4-m7x8y875.mjs";import"./cli-0.5.4-qewzzfw3.mjs";import{u5 as A}from"./cli-0.5.4-hwjx0gja.mjs";import{Lma as I,Mma as h}from"./cli-0.5.4-f2v2k9ae.mjs";import"./cli-0.5.4-r8er9x3v.mjs";import"./cli-0.5.4-jpahwy23.mjs";import{Xma as p,_ma as F}from"./cli-0.5.4-aacw1src.mjs";var d=p((n)=>{var w=n&&n.__createBinding||(Object.create?function(e,r,o,t){if(t===void 0)t=o;var _=Object.getOwnPropertyDescriptor(r,o);if(!_||("get"in _?!r.__esModule:_.writable||_.configurable))_={enumerable:!0,get:function(){return r[o]}};Object.defineProperty(e,t,_)}:function(e,r,o,t){if(t===void 0)t=o;e[t]=r[o]}),v=n&&n.__setModuleDefault||(Object.create?function(e,r){Object.defineProperty(e,"default",{enumerable:!0,value:r})}:function(e,r){e.default=r}),j=n&&n.__importStar||function(){var e=function(r){return e=Object.getOwnPropertyNames||function(o){var t=[];for(var _ in o)if(Object.prototype.hasOwnProperty.call(o,_))t[t.length]=_;return t},e(r)};return function(r){if(r&&r.__esModule)return r;var o={};if(r!=null){for(var t=e(r),_=0;_<t.length;_++)if(t[_]!=="default")w(o,r,t[_])}return v(o,r),o}}();Object.defineProperty(n,"__esModule",{value:!0});n.fromWebToken=void 0;var m=(e)=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:t,webIdentityToken:_,providerId:s,policyArns:y,policy:b,durationSeconds:T}=e,{roleAssumerWithWebIdentity:l}=e;if(!l){let{getDefaultRoleAssumerWithWebIdentity:N}=await Promise.resolve().then(()=>j(S()));l=N({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...r?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:o,RoleSessionName:t??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:_,ProviderId:s,PolicyArns:y,Policy:b,DurationSeconds:T})};n.fromWebToken=m});var u=p((E)=>{Object.defineProperty(E,"__esModule",{value:!0});E.fromTokenFile=void 0;var P=I(),g=h(),k=A(),R=F("node:fs"),q=d(),O="AWS_WEB_IDENTITY_TOKEN_FILE",L="AWS_ROLE_ARN",W="AWS_ROLE_SESSION_NAME",V=(e={})=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[O],t=e?.roleArn??process.env[L],_=e?.roleSessionName??process.env[W];if(!o||!t)throw new g.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let s=await(0,q.fromWebToken)({...e,webIdentityToken:k.externalDataInterceptor?.getTokenRecord?.()[o]??(0,R.readFileSync)(o,{encoding:"ascii"}),roleArn:t,roleSessionName:_})(r);if(o===process.env[O])(0,P.setCredentialFeature)(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};E.fromTokenFile=V});var x=p((c)=>{var i=u(),a=d();Object.prototype.hasOwnProperty.call(i,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:i.__proto__});Object.keys(i).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=i[e]});Object.prototype.hasOwnProperty.call(a,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:a.__proto__});Object.keys(a).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=a[e]})});export default x();
