feat(client-sts): export role assumers for non-sts clients

Author: AllanZhengYP

clients/client-sts/STSClient.ts

@@ -30,7 +30,6 @@ import {
 } from "@aws-sdk/middleware-host-header";
 import { getLoggerPlugin } from "@aws-sdk/middleware-logger";
 import { RetryInputConfig, RetryResolvedConfig, getRetryPlugin, resolveRetryConfig } from "@aws-sdk/middleware-retry";
-// import { AwsAuthInputConfig, AwsAuthResolvedConfig, resolveAwsAuthConfig } from "@aws-sdk/middleware-signing";
 import { StsAuthInputConfig, StsAuthResolvedConfig, resolveStsAuthConfig } from "@aws-sdk/middleware-sdk-sts";
 import {
   UserAgentInputConfig,
@@ -181,7 +180,6 @@ export type STSClientConfig = Partial<__SmithyConfiguration<__HttpHandlerOptions
   EndpointsInputConfig &
   RetryInputConfig &
   HostHeaderInputConfig &
-  // AwsAuthInputConfig &
   StsAuthInputConfig &
   UserAgentInputConfig;
 
@@ -191,7 +189,6 @@ export type STSClientResolvedConfig = __SmithyResolvedConfiguration<__HttpHandle
   EndpointsResolvedConfig &
   RetryResolvedConfig &
   HostHeaderResolvedConfig &
-  // AwsAuthResolvedConfig &
   StsAuthResolvedConfig &
   UserAgentResolvedConfig;
 
@@ -219,7 +216,6 @@ export class STSClient extends __Client<
     let _config_2 = resolveEndpointsConfig(_config_1);
     let _config_3 = resolveRetryConfig(_config_2);
     let _config_4 = resolveHostHeaderConfig(_config_3);
-    // let _config_5 = resolveAwsAuthConfig(_config_4);
     let _config_5 = resolveStsAuthConfig(_config_4, STSClient);
     let _config_6 = resolveUserAgentConfig(_config_5);
     super(_config_6);

clients/client-sts/defaultRoleAssumers.ts

@@ -7,13 +7,27 @@ import {
 } from "./defaultStsRoleAssumers";
 import { STSClient, STSClientConfig } from "./STSClient";
 
-export const getDefaultRoleAssumer = (stsOptions: Pick<STSClientConfig, "logger" | "region">): RoleAssumer =>
+/**
+ * The default role assumer that used by credential providers when sts:AssumeRole API is needed.
+ */
+export const getDefaultRoleAssumer = (stsOptions: Pick<STSClientConfig, "logger" | "region"> = {}): RoleAssumer =>
   StsGetDefaultRoleAssumer(stsOptions, STSClient);
 
+/**
+ * The default role assumer that used by credential providers when sts:AssumeRoleWithWebIdentity API is needed.
+ */
 export const getDefaultRoleAssumerWithWebIdentity = (
-  stsOptions: Pick<STSClientConfig, "logger" | "region">
+  stsOptions: Pick<STSClientConfig, "logger" | "region"> = {}
 ): RoleAssumerWithWebIdentity => StsGetDefaultRoleAssumerWithWebIdentity(stsOptions, STSClient);
 
+/**
+ * The default credential providers depend STS client to assume role with desired API: sts:assumeRole,
+ * sts:assumeRoleWithWebIdentity, etc. This function decorates the default credential provider with role assumers which
+ * encapsulates the process of calling STS commands. This can only be imported by AWS client packages to avoid circular
+ * dependencies.
+ *
+ * @internal
+ */
 export const decorateDefaultCredentialProvider = (provider: DefaultCredentialProvider): DefaultCredentialProvider => (
   input: any
 ) =>

clients/client-sts/package.json

@@ -89,11 +89,5 @@
     "type": "git",
     "url": "https://github.com/aws/aws-sdk-js-v3.git",
     "directory": "clients/client-sts"
-  },
-  "exports": {
-    "./defaultRoleAssumers": {
-      "import": "./dist/es/defaultRoleAssumers.js",
-      "require": "./dist/cjs/defaultRoleAssumers.js"
-    }
   }
 }

clients/client-sts/runtimeConfig.ts

@@ -1,7 +1,7 @@
 import packageInfo from "./package.json";
 
+import { decorateDefaultCredentialProvider } from "./defaultRoleAssumers";
 import { NODE_REGION_CONFIG_FILE_OPTIONS, NODE_REGION_CONFIG_OPTIONS } from "@aws-sdk/config-resolver";
-import { decorateDefaultCredentialProvider } from "./defaultStsRoleAssumers";
 import { defaultProvider as credentialDefaultProvider } from "@aws-sdk/credential-provider-node";
 import { Hash } from "@aws-sdk/hash-node";
 import { NODE_MAX_ATTEMPT_CONFIG_OPTIONS } from "@aws-sdk/middleware-retry";