aws_config/sts/
util.rs

Help
1/*
2 * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
3 * SPDX-License-Identifier: Apache-2.0
4 */
5
6use aws_credential_types::provider::{self, error::CredentialsError};
7use aws_credential_types::Credentials as AwsCredentials;
8use aws_sdk_sts::types::Credentials as StsCredentials;
9
10use std::convert::TryFrom;
11use std::time::{SystemTime, UNIX_EPOCH};
12
13/// Convert STS credentials to aws_auth::Credentials
14pub(crate) fn into_credentials(
15    sts_credentials: Option<StsCredentials>,
16    provider_name: &'static str,
17) -> provider::Result {
18    let sts_credentials = sts_credentials
19        .ok_or_else(|| CredentialsError::unhandled("STS credentials must be defined"))?;
20    let expiration = SystemTime::try_from(sts_credentials.expiration).map_err(|_| {
21        CredentialsError::unhandled(
22            "credential expiration time cannot be represented by a SystemTime",
23        )
24    })?;
25    Ok(AwsCredentials::new(
26        sts_credentials.access_key_id,
27        sts_credentials.secret_access_key,
28        Some(sts_credentials.session_token),
29        Some(expiration),
30        provider_name,
31    ))
32}
33
34/// Create a default STS session name
35///
36/// STS Assume Role providers MUST assign a name to their generated session. When a user does not
37/// provide a name for the session, the provider will choose a name composed of a base + a timestamp,
38/// e.g. `profile-file-provider-123456789`
39pub(crate) fn default_session_name(base: &str, ts: SystemTime) -> String {
40    let now = ts.duration_since(UNIX_EPOCH).expect("post epoch");
41    format!("{}-{}", base, now.as_millis())
42}
aws_config/sts/util.rs

aws_config/sts/
util.rs
