All Classes and Interfaces
Class
Description
An AWS Arn.
The identifiers for the temporary security credentials that the operation returns.
AssumeRoleRequest Marshaller
Contains the response to a successful AssumeRole request, including temporary Amazon Web Services credentials
that can be used to make Amazon Web Services requests.
AssumeRoleWithSamlRequest Marshaller
Contains the response to a successful AssumeRoleWithSAML request, including temporary Amazon Web Services
credentials that can be used to make Amazon Web Services requests.
AssumeRoleWithWebIdentityRequest Marshaller
Contains the response to a successful AssumeRoleWithWebIdentity request, including temporary Amazon Web
Services credentials that can be used to make Amazon Web Services requests.
AssumeRootRequest Marshaller
Amazon Web Services credentials for API authentication.
DecodeAuthorizationMessageRequest Marshaller
A document that contains additional information about the authorization status of a request from an encoded message
that is returned in response to an Amazon Web Services request.
Link between an endpoint property and the
AwsEndpointAttribute it represents.
The web identity token that was passed is expired or is not valid.
The trade-in token provided in the request has expired and can no longer be exchanged for credentials.
Identifiers for the federated user that is associated with the credentials.
GetAccessKeyInfoRequest MarshallerGetCallerIdentityRequest Marshaller
Contains the response to a successful GetCallerIdentity request, including information about the entity making
the request.
GetDelegatedAccessTokenRequest MarshallerGetFederationTokenRequest Marshaller
Contains the response to a successful GetFederationToken request, including temporary Amazon Web Services
credentials that can be used to make Amazon Web Services requests.
GetSessionTokenRequest Marshaller
Contains the response to a successful GetSessionToken request, including temporary Amazon Web Services
credentials that can be used to make Amazon Web Services requests.
GetWebIdentityTokenRequest MarshallerIdentifiers for variables declared within the rule engine, e.g.
The request could not be fulfilled because the identity provider (IDP) that was asked to verify the incoming identity
token could not be reached.
The identity provider (IdP) reported that authentication failed.
The error returned if the message passed to
DecodeAuthorizationMessage was invalid.
The web identity token that was passed could not be validated by Amazon Web Services.
The requested token payload size exceeds the maximum allowed size.
The request was rejected because the policy document was malformed.
The outbound web identity federation feature is not enabled for this account.
The request was rejected because the total packed size of the session policies and session tags combined was too
large.
A reference to the IAM managed policy that is passed as a session policy for a role session or a federated user
session.
Contains information about the provided context.
STS is not activated in the requested region for the account that is being asked to generate credentials.
Represents a URL to be used internally for endpoint resolution.
The requested token duration would extend the session beyond its original expiration time.
An implementation of
AwsCredentialsProvider that periodically sends an AssumeRoleRequest to the AWS
Security Token Service to maintain short-lived sessions to use for authentication.A builder (created by
StsAssumeRoleCredentialsProvider.builder()) for creating a
StsAssumeRoleCredentialsProvider.An implementation of
AwsCredentialsProvider that periodically sends an AssumeRoleWithSamlRequest to the AWS
Security Token Service to maintain short-lived sessions to use for authentication.A builder (created by
StsAssumeRoleWithSamlCredentialsProvider.builder()) for creating a
StsAssumeRoleWithSamlCredentialsProvider.An implementation of
AwsCredentialsProvider that periodically sends an AssumeRoleWithWebIdentityRequest to the
AWS Security Token Service to maintain short-lived sessions to use for authentication.A builder (created by
StsAssumeRoleWithWebIdentityCredentialsProvider.builder()) for creating a
StsAssumeRoleWithWebIdentityCredentialsProvider.Service client for accessing AWS STS asynchronously.
A builder for creating an instance of
StsAsyncClient.The parameters object used to resolve the auth schemes for the Sts service.
A builder for a
StsAuthSchemeParams.An auth scheme provider for Sts service.
This includes configuration specific to AWS STS that is supported by both
StsClientBuilder and
StsAsyncClientBuilder.Service client for accessing AWS STS.
A builder for creating an instance of
StsClient.An implementation of
AwsCredentialsProvider that is extended within this package to provide support for periodically-
updating session credentials.StsCredentialsProvider.BaseBuilder<B extends StsCredentialsProvider.BaseBuilder<B,T>,T extends ToCopyableBuilder<B,T>>
Extended by child class's builders to share configuration across credential providers.
The parameters object used to resolve an endpoint for the Sts service.
An endpoint provider for Sts.
An implementation of
AwsCredentialsProvider that periodically sends a GetFederationTokenRequest to the AWS
Security Token Service to maintain short-lived sessions to use for authentication.A builder (created by
StsGetFederationTokenCredentialsProvider.builder()) for creating a
StsGetFederationTokenCredentialsProvider.An implementation of
AwsCredentialsProvider that periodically sends a GetSessionTokenRequest to the AWS
Security Token Service to maintain short-lived sessions to use for authentication.A builder (created by
StsGetSessionTokenCredentialsProvider.builder()) for creating a
StsGetSessionTokenCredentialsProvider.An implementation of
ChildProfileCredentialsProviderFactory that uses configuration in a profile to create a
StsAssumeRoleCredentialsProvider.Class to expose the service client settings to the user.
A builder for creating a
StsServiceClientConfigurationAn implementation of
WebIdentityTokenCredentialsProviderFactory that allows users to assume a role using a web identity
token file specified in either a Profile or environment variables.An implementation of
AwsCredentialsProvider that periodically sends an AssumeRoleWithWebIdentityRequest to the
AWS Security Token Service to maintain short-lived sessions to use for authentication.
You can pass custom key-value pair attributes when you assume a role or federate a user.
Base class for the types of values computable by the
RuleEngine.An array value.
A boolean value.
An integer value.
A record (map) value.
A string value.