⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.133
Server IP:
185.119.109.197
Server:
Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
8.1.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
botocore
/
__pycache__
/
View File Name :
utils.cpython-310.pyc
o YZay @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl Z d dl Z d dl Zd dlmZ d dlZd dlZd dlZd dlmZmZmZmZmZmZmZm Z m Z m Z m Z m Z d dl!m"Z"m#Z# d dl$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z: d dl;m<Z< e=e>Z?dZ@dZAd ZBd ZCd ZDeEd ZFe+e*e,e-fZGd gZHi dddddddddddddddd d d d d d!d"d#d$d%d&d'd(d)d*d+d,d-d.i d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdHdNdOi dPdQdRdSdTdUdVdWdXdWdYd.dZd0d[d8d\d]d^d_d`dadbdcdddedfdgdhdidjdSdkdli dmdndodndpdqdrdcdsdtdudvdwdxdyd]dzd{d|d}d~dddeddddddddddddddBd{dZIdZJdZKdjLeKeJdZMeKeMdZNg dZOdZPddQdd eOD d ZRdeP d ZSdeR d eS d ZTeEdeT d ZUeVdZWdd ZXdd ZYdd ZZdd Z[dd Z\dd Z]dd Z^dd Z_dd Z`d ddZadd ZbG dd decZdG dd decZeG dd defZgG dd degZhd!ddZiddĄ ZjekfddƄZlddȄ ZmeDfddʄZneDfdd̄Zodd΄ ZpddЄ Zqdd҄ Zrd"ddԄZsd!ddքZtdd Zuddڄ ZvG dd܄ defZwG ddބ defZxdd Zydd Zzdd Z{dd Z|dd Z} d"ddZ~ d"ddZdd Zdd Zdd Zdd Zd ddZd ddZdd Zdd ZG dd defZG dd d eZG dd defZG dd defZG dd defZG dd defZG d d d efZG d d d efZd d Zdd Zd#ddZdd Zdd Zdd Zdd ZG d d d efZG d d d efZdS ($ N)tzutc) jsonquote zip_longesturlsplit urlunsplit OrderedDictsixurlparseget_tzinfo_optionsget_md5 MD5_AVAILABLEHAS_CRT) getproxies proxy_bypass)InvalidExpressionErrorConfigNotFoundInvalidDNSNameError ClientErrorMetadataRetrievalErrorEndpointConnectionErrorReadTimeoutErrorConnectionClosedErrorConnectTimeoutErrorUnsupportedS3ArnError*UnsupportedS3AccesspointConfigurationErrorSSOTokenLoadErrorInvalidRegionErrorInvalidIMDSEndpointError InvalidIMDSEndpointModeError UnsupportedOutpostResourceError&UnsupportedS3ControlConfigurationError UnsupportedS3ControlArnErrorInvalidHostLabelErrorHTTPClientError UnsupportedS3ConfigurationErrorMissingDependencyException)LocationParseError zhttp://169.254.169.254/zhttp://[fd00:ec2::254]/)ipv4ipv6z-._~z[a-z0-9][a-z0-9\-]*[a-z0-9] dualstacka4bzalexa-for-businessalexaforbusinesszapi.mediatailor mediatailorz api.pricingpricingz api.sagemaker sagemaker apigatewayz api-gatewayzapplication-autoscalingzapplication-auto-scaling appstream2 appstream autoscalingz auto-scalingzautoscaling-planszauto-scaling-planscez cost-explorer cloudhsmv2z cloudhsm-v2cloudsearchdomainzcloudsearch-domainz cognito-idpzcognito-identity-providerconfigzconfig-servicecurz cost-and-usage-report-servicezdata.iotziot-data-planez data.jobs.iotziot-jobs-data-planezdata.mediastorezmediastore-data datapipelinez data-pipeline devicefarmz device-farmzdevices.iot1clickziot-1click-devices-service directconnectzdirect-connect discoveryz application-discovery-servicedmszdatabase-migration-servicedszdirectory-servicedynamodbstreamszdynamodb-streamselasticbeanstalkzelastic-beanstalkelasticfilesystemefselasticloadbalancingzelastic-load-balancingelasticmapreduceemrelastictranscoderzelastic-transcoderelbelbv2zelastic-load-balancing-v2emailseszentitlement.marketplacez marketplace-entitlement-serviceeszelasticsearch-serviceevents eventbridgezcloudwatch-eventsziot-dataz iot-jobs-dataziot1click-devicesziot1click-projectsziot-1click-projectskinesisanalyticszkinesis-analytics kinesisvideoz kinesis-videoz lex-modelszlex-model-building-servicez lex-runtimezlex-runtime-servicelogszcloudwatch-logsmachinelearningzmachine-learningzmarketplace-entitlement marketplacecommerceanalyticsz marketplace-commerce-analyticszmetering.marketplacezmarketplace-meteringmeteringmarketplacemghz migration-hubz models.lex monitoring cloudwatchzmturk-requestermturkz opsworks-cm opsworkscmzprojects.iot1clickresourcegroupstaggingapizresource-groups-tagging-apiroute53zroute-53route53domainszroute-53-domainsz runtime.lexzruntime.sagemakerzsagemaker-runtimesdbsimpledbsecretsmanagerzsecrets-managerserverlessrepo serverlessapplicationrepositoryservicecatalogzservice-catalogsfnzstorage-gateway)states stepfunctionsstoragegatewayzstreams.dynamodbtaggingz (?:[0-9]{1,3}\.){3}[0-9]{1,3}z[0-9A-Fa-f]{1,4}z(?:{hex}:{hex}|{ipv4}))hexr) )rh ls32) z(?:%(hex)s:){6}%(ls32)sz::(?:%(hex)s:){5}%(ls32)sz%(?:%(hex)s)?::(?:%(hex)s:){4}%(ls32)sz2(?:(?:%(hex)s:)?%(hex)s)?::(?:%(hex)s:){3}%(ls32)sz6(?:(?:%(hex)s:){0,2}%(hex)s)?::(?:%(hex)s:){2}%(ls32)sz/(?:(?:%(hex)s:){0,3}%(hex)s)?::%(hex)s:%(ls32)sz'(?:(?:%(hex)s:){0,4}%(hex)s)?::%(ls32)sz&(?:(?:%(hex)s:){0,5}%(hex)s)?::%(hex)sz (?:(?:%(hex)s:){0,6}%(hex)s)?::zDABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789._!\-~z(?:|c C s g | ]}|t qS )_subs).0xrk rk 0/usr/lib/python3/dist-packages/botocore/utils.py <listcomp> s rp )z (?:%25|%)(?:[z]|%[a-fA-F0-9]{2})+z\[z)?\]^$z c C s( t | tr| S t | tr| dkS dS )z~Ensures a boolean value if a string or boolean is provided For strings, the value for True/False is case insensitive trueF) isinstanceboolstrlowervalrk rk ro ensure_boolean s r{ c C sP | d}|dur | }|tvr |td}tdi ||S | dr&dS dS )zResolving IMDS endpoint mode to either IPv6 or IPv4. ec2_metadata_service_endpoint_mode takes precedence over imds_use_ipv6. "ec2_metadata_service_endpoint_modeN)mode valid_modes imds_use_ipv6r* r) rk )get_config_variablerx METADATA_ENDPOINT_MODESr )session endpoint_modelendpoint_modeerror_msg_kwargsrk rk ro resolve_imds_endpoint_mode s r c C s2 t | do| jddo| jddko| jdkS )zDetermines if the provided shape is the special header type jsonvalue. :type shape: botocore.shape :param shape: Shape to be inspected for the jsonvalue trait. :return: True if this type is a jsonvalue, False otherwise :rtype: Bool serialization jsonvalueFlocationheaderstring)hasattrr get type_name)shaperk rk ro is_json_value_header s r c C s< | du rdS t |tjjr| |v S | dd | D v S )z&Case-insensitive check for header key.NFc S s g | ]}| qS rk rx )rm keyrk rk ro rp s z has_header.<locals>.<listcomp>)ru botocore awsrequest HeadersDictrx keys) header_nameheadersrk rk ro has_header s r c C sD | j d| j d| j}|dd}|dd}tdd|}|S )zvReturns the module name for a service This is the value used in both the documentation and client class name serviceAbbreviationserviceFullNameAmazon AWSz\W+)metadatar service_namereplaceresub) service_modelnamerk rk ro get_service_module_name s r c C s | sdS t | S )N/)remove_dot_segmentspathrk rk ro normalize_url_path s r c C s | du r| S t | S )zLReturns None if val is None, otherwise ensure value converted to booleanN)r{ ry rk rk ro normalize_boolean s r c C s | sdS | d}g }|D ]}|r%|dkr%|dkr |r | q || q | d dkr/d}nd}| d dkr<|r<d}nd}|d| | S )Nr r .z..r )splitpopappendjoin)url input_url output_listrn firstlastrk rk ro r s& r c C s6 | r| dkr t | ddD ] }|| v rt | dq d S )Nr expression)[]*)r )r invalidrk rk ro validate_jmespath_for_set. s r Tc C s| |rt | |dd}|d t|dkr|d nd}}|s$t|d|r8|| vr.i | |< t| | ||ddS || |< d S )Nr r( r r r F)is_first)r r lenr set_value_from_jmespath)sourcer valuer bits current_key remainderrk rk ro r 9 s " r c C s | di }| ddk}|S )z9Determine if request is intended for an MRAP accesspoint.s3_accesspointregionr r )contextr is_globalrk rk ro is_global_accesspointZ s r c @ s e Zd ZdZdS )_RetriesExceededErrorz@Internal exception used when the number of retries are exceeded.N)__name__ __module__ __qualname____doc__rk rk rk ro r a s r c @ e Zd Zdd ZdS )BadIMDSRequestErrorc C || _ d S Nrequestselfr rk rk ro __init__g z BadIMDSRequestError.__init__N)r r r r rk rk rk ro r f r c @ s e Zd ZeZdZdZededddfddZ dd Z d d Z d d Z d d dZ dd Zdd Zdd Zdd Zdd Zd ddZdS ) IMDSFetcherzlatest/api/token21600r( Nc C sn || _ || _| ||| _|d u rtj }|dd | _ | j dk| _ || _ t j j | j t| jd| _d S )NAWS_EC2_METADATA_DISABLEDfalsert )timeoutproxies)_timeout _num_attempts_select_base_url _base_urlosenvironcopyr rx _disabled _user_agentr httpsessionURLLib3Sessionget_environ_proxies_session)r r num_attemptsbase_urlenv user_agentr8 rk rk ro r q s zIMDSFetcher.__init__c C s | j S r )r r rk rk ro get_base_url s zIMDSFetcher.get_base_urlc C s |d u ri }| ddk}| d}|r|rtd d }|tkr$|}n |r)|}n|r.t}nt}td| t|s@t|d|S )Nr| r* ec2_metadata_service_endpointzFCustom endpoint and IMDS_USE_IPV6 are both set. Using custom endpoint.zIMDS ENDPOINT: %s)endpoint)r loggerwarningMETADATA_BASE_URLMETADATA_BASE_URL_IPv6debug is_valid_urir )r r r8 requires_ipv6custom_metadata_endpointchosen_base_urlrk rk ro r s0 z IMDSFetcher._select_base_urlc C s | | j| j }d| ji}| | tjjd||d}t| j D ]i}z'| j | }|j dkr8|jW S |j dv rAW d S |j dv rJt|W q" tyV Y d S typ } ztjd||dd W Y d }~q"d }~w ty } zt|jd trt||d d }~ww d S ) Nz$x-aws-ec2-metadata-token-ttl-secondsPUTmethodr r )i i i )i OCaught retryable HTTP exception while making metadata service request to %s: %sTexc_infoerror)r r )_assert_enabledr _TOKEN_PATH _TOKEN_TTL_add_user_agentr r AWSRequestranger r sendprepare status_codetextr r RETRYABLE_HTTP_ERRORSr r r$ ru kwargsr r' r )r r r r iresponseerk rk ro _fetch_metadata_token sB z!IMDSFetcher._fetch_metadata_tokenc C s | |du r | j}| j| }i }|dur||d< | | t| jD ]9}z tjjd||d}| j | }||sA|W S W q$ t y] } zt jd|| dd W Y d} ~ q$d} ~ ww | )aZ Make a get request to the Instance Metadata Service. :type url_path: str :param url_path: The path component of the URL to make a get request. This arg is appended to the base_url that was provided in the initializer. :type retry_func: callable :param retry_func: A function that takes the response as an argument and determines if it needs to retry. By default empty and non 200 OK responses are retried. :type token: str :param token: Metadata token to send along with GET requests to IMDS. Nzx-aws-ec2-metadata-tokenGETr r Tr )r _default_retryr r r r r r r r r r r r r _RETRIES_EXCEEDED_ERROR_CLS) r url_path retry_functokenr r r r r r rk rk ro _get_request s2 zIMDSFetcher._get_requestc C s | j d ur | j |d< d S d S )Nz User-Agent)r )r r rk rk ro r s zIMDSFetcher._add_user_agentc C s | j r td | d S )Nz)Access to EC2 metadata has been disabled.)r r r r r rk rk ro r s zIMDSFetcher._assert_enabledc C | |p | |S r _is_non_ok_response _is_emptyr r rk rk ro r zIMDSFetcher._default_retryc C s" |j dkr| j|ddd dS dS )Nr znon-200Tlog_bodyF)r _log_imds_responser$ rk rk ro r" s z IMDSFetcher._is_non_ok_responsec C s |j s | j|ddd dS dS )Nzno bodyTr& F)contentr( r$ rk rk ro r# s zIMDSFetcher._is_emptyFc C s@ d}||j |jg}|r|d7 }||j tj|g|R d S )NzHMetadata service returned %s response with status code of %s for url: %sz, content body: %s)r r r r) r r )r r reason_to_logr' statement logger_argsrk rk ro r( s z IMDSFetcher._log_imds_responser F)r r r r r r r DEFAULT_METADATA_SERVICE_TIMEOUTr r r r r r r r r r" r# r( rk rk rk ro r k s$ %r c @ sT e Zd ZdZg dZdd ZdddZddd Zd d Zd d Z dd Z dd Z dS )InstanceMetadataFetcherz*latest/meta-data/iam/security-credentials/) AccessKeyIdSecretAccessKeyToken Expirationc C s z6| }| |}| ||}| |r&||d |d |d |d dW S d|v r4d|v r4td| i W S | jyH td | j Y i S tya } ztd |j W Y d }~i S d }~ww ) Nr0 r1 r2 r3 ) role_name access_key secret_keyr expiry_timeCodeMessagez7Error response received when retrievingcredentials: %s.z\Max number of attempts exceeded (%s) when attempting to retrieve data from metadata service.zBad IMDS request: %s) r _get_iam_role_get_credentials _contains_all_credential_fieldsr r r r r r )r r r4 credentialsr rk rk ro retrieve_iam_role_credentials s4 z5InstanceMetadataFetcher.retrieve_iam_role_credentialsNc C s | j | j| j|djS N)r r r )r _URL_PATH_needs_retry_for_role_namer )r r rk rk ro r: 8 s z%InstanceMetadataFetcher._get_iam_rolec C s$ | j | j| | j|d}t|jS r? )r r@ _needs_retry_for_credentialsr loadsr )r r4 r rrk rk ro r; ? s z(InstanceMetadataFetcher._get_credentialsc C s4 z t |j W dS ty | |d Y dS w )NFz invalid jsonT)r rC r ValueErrorr( r$ rk rk ro _is_invalid_jsonG s z(InstanceMetadataFetcher._is_invalid_jsonc C r r r! r$ rk rk ro rA O r% z2InstanceMetadataFetcher._needs_retry_for_role_namec C s | |p| |p| |S r )r" r# rF r$ rk rk ro rB U s z4InstanceMetadataFetcher._needs_retry_for_credentialsc C s* | j D ]}||vrtd| dS qdS )Nz3Retrieved credentials is missing required field: %sFT)_REQUIRED_CREDENTIAL_FIELDSr r )r r= fieldrk rk ro r< \ s z7InstanceMetadataFetcher._contains_all_credential_fieldsr ) r r r r@ rG r> r: r; rF rA rB r< rk rk rk ro r/ s " r/ Fc C s |D ]M}t || tr$|| v r ||v r t| | || q|| | |< qt || trI|rI|| v rBt | | trB| | || q|| | |< q|| | |< qdS )zGiven two dict, merge the second dict into the first. The dicts can have arbitrary nesting. :param append_lists: If true, instead of clobbering a list with the new value, append all of the new values onto the original list. N)ru dict merge_dictslistextend)dict1dict2 append_listsr rk rk ro rJ f s rJ c C s" i }| D ] }| | || < q|S )zECopies the given dictionary ensuring all keys are lowercase strings. r )originalr r rk rk ro lowercase_dict s rQ c C sZ z || }| }t|W d W S 1 sw Y W d S ty, t| dw )Nr )readparse_key_val_file_contentsOSErrorr )filename_openfcontentsrk rk ro parse_key_val_file s ( rY c C sH i }| D ]}d|vr q|dd\}}| }| }|||< q|S )N=r( ) splitlinesr strip)rX finalliner rz rk rk ro rS s rS c C s~ g }t | dr | }n| }|D ])\}}t|tr,|D ]}|dt|t|f qq|dt|t|f qd|S )af Urlencode a dict or list into a string. This is similar to urllib.urlencode except that: * It uses quote, and not quote_plus * It has a default list of safe chars that don't need to be encoded, which matches what AWS services expect. If any value in the input ``mapping`` is a list type, then each list element wil be serialized. This is the equivalent to ``urlencode``'s ``doseq=True`` argument. This function should be preferred over the stdlib ``urlencode()`` function. :param mapping: Either a dict to urlencode or a list of ``(key, value)`` pairs. itemsz%s=%s&)r r_ ru rK r percent_encoder )mappingsafe encoded_pairspairsr r elementrk rk ro percent_encode_sequence s rg c C s> t | tjtjfst| } t | tjs| d} t| |dS )a Urlencodes a string. Whereas percent_encode_sequence handles taking a dict/sequence and producing a percent encoded string, this function deals only with taking a string (not a dict/sequence) and percent encoding it. If given the binary type, will simply URL encode it. If given the text type, will produce the binary type by UTF-8 encoding the text. If given something else, will convert it to the text type first. utf-8)rc )ru r binary_type text_typeencoder ) input_strrc rk rk ro ra s ra c C s t | ttfrtj| | S z tjt| | W S ttfy% Y nw z tjj | dt idW S ttfyH } ztd| |f d}~ww )z.Parse timestamp with pluggable tzinfo options.GMT)tzinfoszInvalid timestamp "%s": %sN) ru intfloatdatetime fromtimestamp TypeErrorrE dateutilparserparser r tzinfor rk rk ro _parse_timestamp_with_tzinfo s ry c C s^ t D ]%}zt| |W S ty( } ztjd|j|d W Y d}~qd}~ww td| )zParse a timestamp into a datetime object. Supported formats: * iso8601 * rfc822 * epoch (value is an integer) This will return a ``datetime.datetime`` object. z2Unable to parse timestamp with "%s" timezone info.r Nz4Unable to calculate correct timezone offset for "%s")r ry rT r r r RuntimeErrorrw rk rk ro parse_timestamp s r{ c C sF t | tjr | }nt| }|jdu r|jt d}|S |t }|S )a Converted the passed in value to a datetime object with tzinfo. This function can be used to normalize all timestamp inputs. This function accepts a number of different types of inputs, but will always return a datetime.datetime object with time zone information. The input param ``value`` can be one of several types: * A datetime object (both naive and aware) * An integer representing the epoch time (can also be a string of the integer, i.e '0', instead of 0). The epoch time is considered to be UTC. * An iso8601 formatted timestamp. This does not need to be a complete timestamp, it can contain just the date portion without the time component. The returned value will be a datetime object that will have tzinfo. If no timezone info was provided in the input value, then UTC is assumed, not local time. Nrx )ru rq r{ rx r r astimezone)r datetime_objrk rk ro parse_to_aware_datetime s r c C s~ t ddd}| jdu r|du rt }| j|d} | jdd| | }t|dr.| S |j|j|j d d d d S ) aw Calculate the timestamp based on the given datetime instance. :type dt: datetime :param dt: A datetime object to be converted into timestamp :type default_timezone: tzinfo :param default_timezone: If it is provided as None, we treat it as tzutc(). But it is only used when dt is a naive datetime. :returns: The timestamp r( Nr| total_seconds i i@B ) rq rx r r utcoffsetr r microsecondssecondsdays)dtdefault_timezoneepochdrk rk ro datetime2timestamp2 s "r c s> t }t fdddD ]}|| q |r| S | S )a Calculate a sha256 checksum. This method will calculate the sha256 checksum of a file like object. Note that this method will iterate through the entire file contents. The caller is responsible for ensuring the proper starting position of the file and ``seek()``'ing the file back to its starting location if other consumers need to read from the file like object. :param body: Any file like object. The file must be opened in binary mode such that a ``.read()`` call returns bytes. :param as_hex: If True, then the hex digest is returned. If False, then the digest (as binary bytes) is returned. :returns: The sha256 checksum c dS N rR rk bodyrk ro <lambda>Z z"calculate_sha256.<locals>.<lambda> )hashlibsha256iterupdate hexdigestdigest)r as_hexchecksumchunkrk r ro calculate_sha256G s r c s g }dt j}t fdddD ] }||| q|s%|d S t|dkrSg }t|D ]\}}|durE|||| q1|| q1|}t|dks+t |d dS ) a\ Calculate a tree hash checksum. For more information see: http://docs.aws.amazon.com/amazonglacier/latest/dev/checksum-calculations.html :param body: Any file like object. This has the same constraints as the ``body`` param in calculate_sha256 :rtype: str :returns: The hex version of the calculated tree hash r c s S r r rk r required_chunk_sizerk ro r s r z%calculate_tree_hash.<locals>.<lambda>r r( Nr ascii) r r r r r r r _in_pairsbinasciihexlifydecode)r chunksr r new_chunksr secondrk r ro calculate_tree_hashb s r c C s t | }t||S r )r r )iterable shared_iterrk rk ro r s r c @ s e Zd ZdZdd Zdd ZdS )CachedPropertyzA read only property that caches the initially computed value. This descriptor will only call the provided ``fget`` function once. Subsequent access to this property will return the cached value. c C r r )_fget)r fgetrk rk ro r r zCachedProperty.__init__c C s( |d u r| S | |}||j| j j< |S r )r __dict__r )r objclscomputed_valuerk rk ro __get__ s zCachedProperty.__get__N)r r r r r r rk rk rk ro r s r c @ sD e Zd ZdZdddZdd Zddd Zd d Zd d Zdd Z dS )ArgumentGeneratora Generate sample input based on a shape model. This class contains a ``generate_skeleton`` method that will take an input/output shape (created from ``botocore.model``) and generate a sample dictionary corresponding to the input/output shape. The specific values used are place holder values. For strings either an empty string or the member name can be used, for numbers 0 or 0.0 is used. The intended usage of this class is to generate the *shape* of the input structure. This can be useful for operations that have complex input shapes. This allows a user to just fill in the necessary data instead of worrying about the specific structure of the input arguments. Example usage:: s = botocore.session.get_session() ddb = s.get_service_model('dynamodb') arg_gen = ArgumentGenerator() sample_input = arg_gen.generate_skeleton( ddb.operation_model('CreateTable').input_shape) print("Sample input for dynamodb.CreateTable: %s" % sample_input) Fc C r r )_use_member_names)r use_member_namesrk rk ro r r zArgumentGenerator.__init__c C s g }| ||S )zGenerate a sample input. :type shape: ``botocore.model.Shape`` :param shape: The input shape. :return: The generated skeleton input corresponding to the provided input shape. )_generate_skeleton)r r stackrk rk ro generate_skeleton s z#ArgumentGenerator.generate_skeletonr c C s> | |j z|jdkr| ||W | S |jdkr'| ||W | S |jdkr7| ||W | S |jdkr[| jrF|W | S |jrTt |jW | S W | dS |jdv rgW | dS |jdv rsW | d S |jd krW | d S |jd krt d dddddW | S W | d S | w )N structurerK mapr r )integerlongr )rp doubleg booleanT timestampr r( ) r r r _generate_type_structurer _generate_type_list_generate_type_mapr enumrandomchoicerq r r r r rk rk ro r sD z$ArgumentGenerator._generate_skeletonc C sF | |jdkr i S t }|j D ]\}}| j|||d||< q|S )Nr( )r )countr r membersr_ r )r r r skeleton member_name member_shaperk rk ro r s z*ArgumentGenerator._generate_type_structurec C s$ d}| j r |jj}| |j||gS )Nr )r memberr r r rk rk ro r s z%ArgumentGenerator._generate_type_listc C s0 |j }|j}|jdks J td| ||fgS )Nr KeyName)r r r r r )r r r key_shape value_shaperk rk ro r s z$ArgumentGenerator._generate_type_mapNr- )r ) r r r r r r r r r r rk rk rk ro r s r c C s, t | rdS dt| j}t|d uS )NFz[{}])UNSAFE_URL_CHARS intersectionformatr hostname IPV6_ADDRZ_REmatch) endpoint_urlr rk rk ro is_valid_ipv6_endpoint_url s r c C sh t | rdS t| }|j}|du rdS t|dkr dS |d dkr(|dd }tdtj}||S )zVerify the endpoint_url is valid. :type endpoint_url: string :param endpoint_url: An endpoint_url. Must have at least a scheme and a hostname. :return: True if the endpoint url is valid. False otherwise. FN r r z;^((?!-)[A-Z\d-]{1,63}(?<!-)\.)*((?!-)[A-Z\d-]{1,63}(?<!-))$) r r r r r r compile IGNORECASEr )r partsr allowedrk rk ro is_valid_endpoint_url s r c C s t | pt| S r )r r )r rk rk ro r + r c C s2 | du rdS t d}|| }|st| ddS )z0Provided region_name must be a valid host label.Nz)^(?![0-9]+$)(?!-)[a-zA-Z0-9-]{,63}(?<!-)$) region_name)r r r r )r valid_host_labelvalidrk rk ro validate_region_name/ s r c C sR d| v rdS t | }|dk s|dkrdS t| }|du s%| t | kr'dS dS )a Check to see if the ``bucket_name`` complies with the restricted DNS naming conventions necessary to allow access via virtual-hosting style. Even though "." characters are perfectly valid in this DNS naming scheme, we are going to punt on any name containing a "." character because these will cause SSL cert validation problems if we try to use virtual-hosting style addressing. r F ? NT)r LABEL_REr end) bucket_namenr rk rk ro check_dns_name9 s r c K sb | j ddr d}z t| || W dS ty0 } z|jd }td| W Y d}~dS d}~ww )ar This handler looks at S3 requests just before they are signed. If there is a bucket name on the path (true for everything except ListAllBuckets) it checks to see if that bucket name conforms to the DNS naming conventions. If it does, it alters the request to use ``virtual hosting`` style addressing rather than ``path-style`` addressing. use_global_endpointFzs3.amazonaws.comr z2Not changing URI, bucket is not DNS compatible: %sN)r r switch_to_virtual_host_styler r r r )r signature_versionr default_endpoint_urlr r r rk rk ro fix_s3_hostP s r c K s | j durdS t| rtd dS t| j}|j| _ |jd}|du r(|j}t |dkr|d }|s6dS td| j t |rt |dkrU| j d dkrU| j d7 _ | | d |p`d}|}|d | } |j | ||jd f} t| } | | _td | dS t|d dS ) a) This is a handler to force virtual host style s3 addressing no matter the signature version (which is taken in consideration for the default case). If the bucket is not DNS compatible an InvalidDNSName is thrown. :param request: A AWSRequest object that is about to be sent. :param signature_version: The signature version to sign with :param default_endpoint_url: The endpoint to use when switching to a virtual style. If None is supplied, the virtual host will be constructed from the url of the request. NzKRequest is GetBucketLocation operation, not checking for DNS compatibility.r r( z*Checking for DNS compatible bucket for: %s r r r zURI updated to: %s)r ) auth_path _is_get_bucket_location_requestr r r r r r netlocr r remover schemequeryr r ) r r r r r path_partsr r global_endpointhost new_tuplenew_urirk rk ro r f sB r c C s | j dS )Nz ?location)r endswithr rk rk ro r r c s" j t fdd}|S )a Method decorator for caching method calls to a single instance. **This is not a general purpose caching decorator.** In order to use this, you *must* provide an ``_instance_cache`` attribute on the instance. This decorator is used to cache method calls. The cache is only scoped to a single instance though such that multiple instances will maintain their own cache. In order to keep things simple, this decorator requires that you provide an ``_instance_cache`` attribute on your instance. c sb |f}|rt t| }||f}| j|}|d ur |S | g|R i |}|| j|< |S r )tuplesortedr_ _instance_cacher )r argsr cache_key kwarg_itemsresultfunc func_namerk ro _cache_guard s z$instance_cache.<locals>._cache_guard)r functoolswraps)r r rk r ro instance_cache s r c K sh t | jjd}dd |D }d}t|dkr!|d|d 7 }|d7 }|dv r+dS t| |d d dS ) z?Switches the current s3 endpoint with an S3 Accelerate endpointr c S s g | ]}|t v r|qS rk S3_ACCELERATE_WHITELISTrm prk rk ro rp s z-switch_host_s3_accelerate.<locals>.<listcomp>zhttps://s3-accelerate.r amazonaws.com) ListBuckets CreateBucket DeleteBucketNF)use_new_scheme)r r r r r r _switch_hosts)r operation_namer r r rk rk ro switch_host_s3_accelerate s r c C s6 t | jd}||r|| }t| | dS dS )zBSwitches the host using a parameter value from a JSON request bodyrh N)r rC datar r r )r param_name request_json new_endpointrk rk ro switch_host_with_param s r c C s t | j||}|| _d S r )_get_new_endpointr )r r r final_endpointrk rk ro r s r c C sR t |}t | }|j}|r|j}||j|j|jdf}t|}td| |f |S Nr zUpdating URI from %s to %s)r r r r r r r r )original_endpointr r new_endpoint_components original_endpoint_componentsr final_endpoint_componentsr rk rk ro r s r c C sR |D ]$}|| v r t | | tr t || tr t| | || q|| | |< qdS )zDeeply two dictionaries, overriding existing keys in the base. :param base: The base dictionary which will be merged into. :param extra: The dictionary to merge into the base. Keys from this dictionary will take precedence. N)ru rI deep_merge)baseextrar rk rk ro r$ s r$ c C s | dd S )zcTranslate the form used for event emitters. :param service_id: The service_id to convert. -)r rx ) service_idrk rk ro hyphenize_service_id s r* c @ sH e Zd ZdddZdddZdd Zdd Zd d Zd d Zdd Z dS )S3RegionRedirectorNc C s, || _ || _| jd u ri | _t|| _d S r )_endpoint_resolver_cacheweakrefproxy_client)r endpoint_bridgeclientcacherk rk ro r s zS3RegionRedirector.__init__c C s< |p| j jj}|d| j |d| j |d| j d S )Nzneeds-retry.s3zbefore-call.s3before-parameter-build.s3)r0 metarM registerredirect_from_errorset_request_urlredirect_from_cache)r event_emitteremitterrk rk ro r6 " s zS3RegionRedirector.registerc K s |du rdS | |di rtd dS |di dr&td dS |d di }|d}|d d i }|d v oC|jd k}|d v oT|jd koTd |di v } |dko\d|v } |d duoi|d jdv } |dk} t|| | | | gsydS |d d d } |d d}| | |}|du rtd|| f dS td|| |f | j d|}|d }|| |d}||d d< || j | < | ||d d |d d< dS ) a An S3 request sent to the wrong region will return an error that contains the endpoint the request should be sent to. This handler will add the redirect information to the signing context and then redirect the request. Nr z=S3 request was previously to an accesspoint, not redirecting. s3_redirectedz6S3 request was previously redirected, not redirecting.r( Errorr8 ResponseMetadata)301400 HeadObject HeadBucketx-amz-bucket-region HTTPHeaders AuthorizationHeaderMalformedRegionr )i- i. i3 PermanentRedirectsigningbucket client_regionzS3 client configured for region %s but the bucket %s is not in that region and the proper region could not be automatically determined.zS3 client configured for region %s but the bucket %s is in region %s; Please configure the proper region to avoid multiple unnecessary redirects and signing attempts.s3r )r rI r T) _is_s3_accesspointr r r r r anyget_bucket_regionr, resolver- r8 )r request_dictr operationr r error_coderesponse_metadatais_special_head_objectis_special_head_bucketis_wrong_signing_regionis_redirect_statusis_permanent_redirectrI rJ new_regionr signing_contextrk rk ro r7 ) s| z&S3RegionRedirector.redirect_from_errorc C s |d }|d d }d|v r|d S | di dd}|dur"|S z| jj|d}|d d }W n tyJ } z |jd d }W Y d}~nd}~ww | dd}|S ) a. There are multiple potential sources for the new region to redirect to, but they aren't all universally available for use. This will try to find region from response elements, but will fall back to calling HEAD on the bucket if all else fails. :param bucket: The bucket to find the region for. This is necessary if the region is not available in the error response. :param response: A response representing a service request that failed due to incorrect region configuration. r( r> rD rC r= rF N)Bucket)r r0 head_bucketr r )r rI r service_responseresponse_headersr r r rk rk ro rN s z$S3RegionRedirector.get_bucket_regionc K s8 | di dd }|d urt|d |d|d< d S d S )NrH r r F)r r )r paramsr r r rk rk ro r8 s z"S3RegionRedirector.set_request_urlc K sH | |rdS |d}| j|}|dur ||d< dS d|i|d< dS )z This handler retrieves a given bucket's signing context from the cache and adds it into the request context. Nr[ rH rI )rL r r- )r r_ r r rI rZ rk rk ro r9 s z&S3RegionRedirector.redirect_from_cachec C s d|v S Nr rk )r r rk rk ro rL s z%S3RegionRedirector._is_s3_accesspointr ) r r r r r6 r7 rN r8 r9 rL rk rk rk ro r+ s V! r+ c @ s e Zd ZdS )InvalidArnExceptionN)r r r rk rk rk ro ra s ra c @ r ) ArnParserc C sH | dd}t|dk rtd| |d |d |d |d |d d S ) N: zUProvided ARN: %s must be of the format: arn:partition:service:region:account:resourcer( r r ) partitionservicer accountresource)r r ra )r arn arn_partsrk rk ro parse_arn s zArnParser.parse_arnN)r r r rm rk rk rk ro rb r rb c @ s` e Zd ZedZedZdgZdddZdd Z d d Z d d Z d d Z dd Z dd ZdS )S3ArnParamHandlerzA^(?P<resource_type>accesspoint|outpost)[/:](?P<resource_name>.+)$zc^(?P<outpost_name>[a-zA-Z0-9\-]{1,63})[/:]accesspoint[/:](?P<accesspoint_name>[a-zA-Z0-9\-]{1,63}$)r Nc C || _ |d u r t | _ d S d S r _arn_parserrb r arn_parserrk rk ro r zS3ArnParamHandler.__init__c C | d| j d S )Nr4 r6 handle_arnr r: rk rk ro r6 zS3ArnParamHandler.registerc K sf |j | jv rd S | |}|d u rd S |d dkr"| ||| d S |d dkr1| ||| d S d S )N resource_type accesspointoutpost)r _BLACKLISTED_OPERATIONS"_get_arn_details_from_bucket_param_store_accesspoint_store_outpost)r r_ modelr r arn_detailsrk rk ro rw s z S3ArnParamHandler.handle_arnc C sH d|v r"z|d }| j |}| || |W S ty! Y d S w d S )Nr[ )rq rm _add_resource_type_and_namera )r r_ rk r rk rk ro r~ s z4S3ArnParamHandler._get_arn_details_from_bucket_paramc C s> | j |d }|r|d|d< |d|d< d S t|d)Nrj rz resource_name)rk )_RESOURCE_REGEXr groupr )r rk r r rk rk ro r s z-S3ArnParamHandler._add_resource_type_and_namec C s8 |d |d< |d |d |d |d |d d|d< d S ) Nr r[ ri rg r rh )r ri rg r rh r rk )r r_ r r rk rk ro r s z$S3ArnParamHandler._store_accesspointc C sd |d }| j |}|st|d|d}||d< |d||d |d |d |d d |d < d S ) Nr )r accesspoint_namer[ outpost_nameri rg r rh )r r ri rg r rh r )_OUTPOST_RESOURCE_REGEXr r r )r r_ r r r r r rk rk ro r s z S3ArnParamHandler._store_outpostr )r r r r r r r r} r r6 rw r~ r r r rk rk rk ro rn s rn c @ s e Zd ZdZdZ d7ddZdd Zd d Zd d Zd d Z dd Z dd Z dd Z dd Z dd Zdd Zdd Zd d Zd d Zd!d" Zd#d$ Zd%d& Zd'd( Zd)d* Zd+d, Zd-d. Zd/d0 Zed1d2 Z ed3d4 Z ed5d6 Z dS )8S3EndpointSetterawsr NFc C J || _ || _|| _|| _|d u ri | _|| _|| _|d u r#| j| _d S d S r r, _region _s3_config_use_fips_endpoint _endpoint_url _partition_DEFAULT_PARTITIONr endpoint_resolverr s3_configr rg use_fips_endpointrk rk ro r ' s zS3EndpointSetter.__init__c C s. | d| j | d| j | d| j d S )Nzbefore-sign.s3zchoose-signer.s3z%before-call.s3.WriteGetObjectResponse)r6 set_endpoint set_signer#update_endpoint_to_s3_object_lambdarx rk rk ro r6 6 s zS3EndpointSetter.registerc K sh | j rtdd| |d | jrd S | j}|d| j}dj|d |d d}t|d |d |d< d S ) NzOS3 client does not support accelerate endpoints for S3 Object Lambda operationsmsgs3-object-lambdaz https://{host_prefix}{hostname} host_prefixr )r r r F) _use_accelerate_endpointr% _override_signing_namer r, construct_endpointr r r )r r_ r r resolverresolvedr rk rk ro r > s z4S3EndpointSetter.update_endpoint_to_s3_object_lambdac K s | |r&| | | | | | | |}| | | || d S | jr=| jr4t d| j dt dd|i| | j rL| j dd|i| d S d S )Nz{Client is configured to use the FIPS psuedo region for "%s", but S3 Accelerate does not have any FIPS compatible endpoints.r r rk ) _use_accesspoint_endpoint _validate_accesspoint_supported_validate_fips_supported_validate_global_regions(_resolve_region_for_accesspoint_endpoint._resolve_signing_name_for_accesspoint_endpoint _switch_to_accesspoint_endpointr r r% r r _s3_addressing_handler)r r r r rk rk ro r W s. z S3EndpointSetter.set_endpointc C d|j v S r` r r rk rk ro r o r z*S3EndpointSetter._use_accesspoint_endpointc C s | j sd S d|jd d v rtdhdd|jd v r#td| j d|jd d }|| jkr@| jdd sBtd | j|f dd S d S ) Nfipsr r ,Invalid ARN, FIPS region not allowed in ARN.r r zhClient is configured to use the FIPS psuedo-region "%s", but outpost ARNs do not support FIPS endpoints.use_arn_regionTzClient is configured to use the FIPS psuedo-region for "%s", but the access-point ARN provided is for the "%s" region. For clients using a FIPS psuedo-region calls to access-point ARNs in another region are not allowed.)r r r r r r r r accesspoint_regionrk rk ro r r s2 z)S3EndpointSetter._validate_fips_supportedc C s0 | j ddr d S | jdv rtd| j dd S )Nr T)z aws-globalz s3-external-1zClient is configured to use the global psuedo-region "%s". When providing access-point ARNs a regional endpoint must be specified.r )r r r r r rk rk ro r s z)S3EndpointSetter._validate_global_regionsc C s | j rtdd|jd d }|| jkr td| j|f d|jd d}|dkr5| jdr5td d|jd d }|rJ| jdrJtd d| | d S ) NzZClient does not support s3 accelerate configuration when an access-point ARN is specified.r r rg zClient is configured for "%s" partition, but access-point ARN provided is for "%s" partition. The client and access-point partition must be the same.rh r use_dualstack_endpointzjClient does not support s3 dualstack configuration when an S3 Object Lambda access point ARN is specified.r zTClient does not support s3 dualstack configuration when an outpost ARN is specified.)r r r r r r _validate_mrap_s3_config)r r request_partition s3_servicer rk rk ro r s. z0S3EndpointSetter._validate_accesspoint_supportedc C s> t |jsd S | jdrtdd| jdr tddd S )N$s3_disable_multiregion_access_pointszCInvalid configuration, Multi-Region Access Point ARNs are disabled.r r zeClient does not support s3 dualstack configuration when a Multi-Region Access Point ARN is specified.)r r r r r r rk rk ro r s z)S3EndpointSetter._validate_mrap_s3_configc C sN t |jr| |d | jS | jddr$|jd d }| || |S | jS )Nr r Tr r )r r _override_signing_regionr r r r rk rk ro r s z9S3EndpointSetter._resolve_region_for_accesspoint_endpointc K s t |r trdS tddd S )Ns3v4azzUsing S3 with an MRAP arn requires an additional dependency. You will need to pip install botocore[crt] before proceeding.r )r r r& )r r r rk rk ro r s zS3EndpointSetter.set_signerc C s |j d d }| |j | d S )Nr rh r r )r r accesspoint_servicerk rk ro r s z?S3EndpointSetter._resolve_signing_name_for_accesspoint_endpointc C sT t |j}t|j| |j|| |j|j|jdf}t d|j|f ||_d S r ) r r r r _get_netlocr _get_accesspoint_pathr r r r )r r r original_componentsaccesspoint_endpointrk rk ro r s z0S3EndpointSetter._switch_to_accesspoint_endpointc C s t |r | |S | ||S r )r _get_mrap_netloc_get_accesspoint_netloc)r request_contextr rk rk ro r s z S3EndpointSetter._get_netlocc C s\ |d }d}|d g}| j rt| j j}|| n|d }|d|| |g d|S )Nr z s3-globalr rg r{ r )r r r r rL _get_partition_dns_suffixr )r r r r mrap_netloc_componentsendpoint_url_netlocrg rk rk ro r s z!S3EndpointSetter._get_mrap_netlocc C s |d }d|d |d f g}| d}| jr*|r || t| jj}|| n>|r6|dg}|| n |d dkrH| d|}|| n | d |}|| | j d r^|d ||| |g d |S ) Nr z%s-%sr ri r s3-outpostsrh r zs3-accesspointr r+ r ) r r r r r rL _inject_fips_if_neededr _get_dns_suffixr ) r r r r accesspoint_netloc_componentsr r outpost_host componentrk rk ro r s: z(S3EndpointSetter._get_accesspoint_netlocc C s | j rd| S |S )Nz%s-fipsr )r r r rk rk ro r ; s z'S3EndpointSetter._inject_fips_if_neededc C s" |d d }| d| ddpdS )Nr r r r r( )r )r original_pathr r rk rk ro r @ s z&S3EndpointSetter._get_accesspoint_pathc C s | j |}|d u r | j}|S r )r, get_partition_dns_suffix_DEFAULT_DNS_SUFFIX)r partition_name dns_suffixrk rk ro r I s z*S3EndpointSetter._get_partition_dns_suffixc C , | j d|}| j}|rd|v r|d }|S NrK dnsSuffixr, r r r r r r rk rk ro r Q z S3EndpointSetter._get_dns_suffixc C $ |j di }||d< ||j d< d S NrH r r r r r r rZ rk rk ro r Y z)S3EndpointSetter._override_signing_regionc C s | di }||d< ||d< d S NrH signing_namer )r r r rZ rk rk ro r b s z'S3EndpointSetter._override_signing_namec C s | j drdS | jd u rdS t| jj}|ds dS |d}|d dkr)dS |dd }t|tt|kr;dS t d d |D S ) Nuse_accelerate_endpointTFr r r z s3-accelerater( c s s | ]}|t v V qd S r r r rk rk ro <genexpr> s z<S3EndpointSetter._use_accelerate_endpoint.<locals>.<genexpr>) r r r r r r r r setall)r r r feature_partsrk rk ro r k s z)S3EndpointSetter._use_accelerate_endpointc C s" | j rdS | jd}|r|S d S )Nvirtualaddressing_style)r r r )r configured_addressing_stylerk rk ro _addressing_style s z"S3EndpointSetter._addressing_stylec C sH | j dkr td tS | j dks| jd ur td d S td tS )Nr z'Using S3 virtual host style addressing.r z Using S3 path style addressing.zSDefaulting to S3 virtual host style addressing with path style addressing fallback.)r r r r r r r rk rk ro r s z'S3EndpointSetter._s3_addressing_handlerNNNNF) r r r r r r r6 r r r r r r r r r r r r r r r r r r r r r r r r rk rk rk ro r # sD " $ ! " r c @ s e Zd ZdZdZedZ d6ddZdd Z d d Z d d Z dd Z dd Z dd Zdd Zdd Zdd Zdd Zd d Zd d Zd d! Zd"d# Zd$d% Zd&d' Zd(d) Zd*d+ Zd,d- Zd.d/ Z d0d1 Z d2d3 Z d4d5 Z dS )7S3ControlEndpointSetterr r z^[a-zA-Z0-9\-]{1,63}$NFc C r r r r rk rk ro r s z S3ControlEndpointSetter.__init__c C ru )Nzbefore-sign.s3-control)r6 r rx rk rk ro r6 ry z S3ControlEndpointSetter.registerc K s | |r!| | | |}| | | || | | d S | |r?| | | |d | | j }| || d S d S Nr ) _use_endpoint_from_arn_details-_validate_endpoint_from_arn_details_supported _resolve_region_from_arn_details&_resolve_signing_name_from_arn_details"_resolve_endpoint_from_arn_details _add_headers_from_arn_details _use_endpoint_from_outpost_id#_validate_outpost_redirection_validr _construct_outpost_endpointr _update_request_netloc)r r r r new_netlocrk rk ro r s z$S3ControlEndpointSetter.set_endpointc C r )Nr r r rk rk ro r r z6S3ControlEndpointSetter._use_endpoint_from_arn_detailsc C r )N outpost_idr r rk rk ro r r z5S3ControlEndpointSetter._use_endpoint_from_outpost_idc C s d|j d d v rt|j d d dhd| jdds4|j d d }|| jkr4d || jf }t|d |j d d }|| jkrJtd | j|f d | jd rUtdd d|j d v rc| | d S d S )Nr r r rP r rk r r FzpThe use_arn_region configuration is disabled but received arn for "%s" when the client is configured to use "%s"r rg zClient is configured for "%s" partition, but arn provided is for "%s" partition. The client and arn partition must be the same.r z7S3 control client does not support accelerate endpointsr )r r" r r r r! r r )r r arn_region error_msgrequest_partionrk rk ro r s8 zES3ControlEndpointSetter._validate_endpoint_from_arn_details_supportedc C s | j dr tddd S )Nr zPClient does not support s3 dualstack configuration when an outpost is specified.r )r r r! r rk rk ro r s z;S3ControlEndpointSetter._validate_outpost_redirection_validc C s2 | j ddr|jd d }| || |S | jS )Nr Fr r )r r r r r )r r r rk rk ro r s z8S3ControlEndpointSetter._resolve_region_from_arn_detailsc C s |j d d }| || |S )Nr rh r )r r arn_servicerk rk ro r s z>S3ControlEndpointSetter._resolve_signing_name_from_arn_detailsc C s | ||}| || d S r ) _resolve_netloc_from_arn_detailsr )r r r r rk rk ro r s z:S3ControlEndpointSetter._resolve_endpoint_from_arn_detailsc C s@ t |j}t|j||j|jdf}td|j|f ||_d S r )r r r r r r r r )r r r r arn_details_endpointrk rk ro r s z.S3ControlEndpointSetter._update_request_netlocc C s0 |j d }d|v r| |S |d }| ||S )Nr r ri )r r _construct_s3_control_endpoint)r r r r ri rk rk ro r % s z8S3ControlEndpointSetter._resolve_netloc_from_arn_detailsc C s | j |S r )_HOST_LABEL_REGEXr )r labelrk rk ro _is_valid_host_label, r z,S3ControlEndpointSetter._is_valid_host_labelc G s" |D ] }| |st|dqd S )N)r )r r# )r labelsr rk rk ro _validate_host_labels/ s z-S3ControlEndpointSetter._validate_host_labelsc C s\ | || | jrt| jj}||g}n|dg}| | | |}|||g | |S )Nz s3-control)r r r r _add_dualstackr rL _construct_netloc)r r ri r r r rk rk ro r 4 s z6S3ControlEndpointSetter._construct_s3_control_endpointc C s@ | | | jrt| jjS d|| |g}| | | |S r )r r r r r _add_fipsr )r r r rk rk ro r C s z3S3ControlEndpointSetter._construct_outpost_endpointc C s d |S )Nr )r r r rk rk ro r P r z)S3ControlEndpointSetter._construct_netlocc C s | j r |d d |d< d S d S )Nr z-fipsr r rk rk ro r S s z!S3ControlEndpointSetter._add_fipsc C s | j dr |d d S d S )Nr r+ )r r r r rk rk ro r W s z&S3ControlEndpointSetter._add_dualstackc C r r r r rk rk ro r [ r z'S3ControlEndpointSetter._get_dns_suffixc C r r r r rk rk ro r c r z0S3ControlEndpointSetter._override_signing_regionc C r r r )r r r rZ rk rk ro r l r z.S3ControlEndpointSetter._override_signing_namec C s, |j d }|d}|r| || d S d S )Nr r )r r _add_outpost_id_header)r r r r rk rk ro r u s z5S3ControlEndpointSetter._add_headers_from_arn_detailsc C s ||j d< d S )Nzx-amz-outpost-id)r )r r r rk rk ro r { z.S3ControlEndpointSetter._add_outpost_id_headerr ) r r r r r r r r r r6 r r r r r r r r r r r r r r r r r r r r r r rk rk rk ro r s> " r c @ s e Zd ZedZd ddZdd Zdd Zd d Z d d Z d d Z dd Z dd Z dd Zdd Zdd Zdd Zdd ZdS ) S3ControlArnParamHandlerz[/:]Nc C ro r rp rr rk rk ro r rt z!S3ControlArnParamHandler.__init__c C ru )Nz!before-parameter-build.s3-controlrv rx rk rk ro r6 s z!S3ControlArnParamHandler.registerc K s< |j dv r| ||| d S | ||| | ||| d S )N)r ListRegionalBuckets)r _handle_outpost_id_param_handle_name_param_handle_bucket_param)r r_ r r r rk rk ro rw s z#S3ControlArnParamHandler.handle_arnc C sR ||vrd S z|| }| j |}||d< | ||d< |W S ty( Y d S w )NrP resources)rq rm _split_resourcera )r r_ r rk r rk rk ro _get_arn_details_from_param s z4S3ControlArnParamHandler._get_arn_details_from_paramc C s | j |d S )Nrj )_RESOURCE_SPLIT_REGEXr )r r rk rk ro r r z(S3ControlArnParamHandler._split_resourcec C sD |d }d|v r |d |kr d|d }t |d |d||d< d S )Nri AccountIdzGAccount ID in arn does not match the AccountId parameter provided: "%s"rP r )r" )r r_ r account_idr rk rk ro _override_account_id_param s z3S3ControlArnParamHandler._override_account_id_paramc C s d|vrd S |d |d< d S )N OutpostIdr rk )r r_ r r rk rk ro r s z1S3ControlArnParamHandler._handle_outpost_id_paramc C sV |j dkrd S | |d}|d u rd S | |r!| ||| d S d}t|d |d)NCreateAccessPointNamez4The Name parameter does not support the provided ARNrP r )r r _is_outpost_accesspoint_store_outpost_accesspointr" r r_ r r r r rk rk ro r s z+S3ControlArnParamHandler._handle_name_paramc C @ |d dkrdS |d }t |dkrdS |d dko |d d kS ) Nrh r Fr rf r r| r r{ r r r r rk rk ro r z0S3ControlArnParamHandler._is_outpost_accesspointc C D | || |d d }||d< ||d< |d d |d< ||d< d S )Nr r r r r( r r r )r r_ r r r rk rk ro r z3S3ControlArnParamHandler._store_outpost_accesspointc C sH | |d}|d u r d S | |r| ||| d S d}t|d |d)Nr[ z6The Bucket parameter does not support the provided ARNrP r )r _is_outpost_bucket_store_outpost_bucketr" r rk rk ro r s z-S3ControlArnParamHandler._handle_bucket_paramc C r ) Nrh r Fr rf r r| r rI r r rk rk ro r$ r z+S3ControlArnParamHandler._is_outpost_bucketc C r! )Nr r r[ r r( r r r" )r r_ r r r rk rk ro r% r# z.S3ControlArnParamHandler._store_outpost_bucketr )r r r r r r r r6 rw r r r r r r r r r$ r% rk rk rk ro r s r c @ sr e Zd ZdZdZdZdZeddgZdej fdd Z dd d Z d d Z dd Z dd ZdddZdd Zdd ZdS )ContainerMetadataFetcherr r r( z 169.254.170.2 localhostz 127.0.0.1Nc C s( |d u r t jj| jd}|| _|| _d S )N)r )r r r TIMEOUT_SECONDSr _sleep)r r sleeprk rk ro r s z!ContainerMetadataFetcher.__init__c C s | | | ||S )zRetrieve JSON metadata from container metadata. :type full_url: str :param full_url: The full URL of the metadata service. This should include the scheme as well, e.g "http://localhost:123/foo" )_validate_allowed_url_retrieve_credentials)r full_urlr rk rk ro retrieve_full_uri s z*ContainerMetadataFetcher.retrieve_full_uric C s: t j|}| |j}|std|jd| jf d S )NzGUnsupported host '%s'. Can only retrieve metadata from these hosts: %sz, )r compatr _check_if_whitelisted_hostr rE r _ALLOWED_HOSTS)r r- parsedis_whitelisted_hostrk rk ro r+ s z.ContainerMetadataFetcher._validate_allowed_urlc C s || j v rdS dS )NTF)r1 )r r rk rk ro r0 s z3ContainerMetadataFetcher._check_if_whitelisted_hostc C s | |}| |S )zRetrieve JSON metadata from ECS metadata. :type relative_uri: str :param relative_uri: A relative URI, e.g "/foo/bar?id=123" :return: The parsed JSON response. )r- r, )r relative_urir- rk rk ro retrieve_uri% s z%ContainerMetadataFetcher.retrieve_uric C s ddi}|d ur | | d} z | ||| jW S tyC } z tjd|dd | | j |d7 }|| jkr9 W Y d }~nd }~ww q)NAcceptzapplication/jsonr TzAReceived error when attempting to retrieve container metadata: %sr r( ) r _get_responser( r r r r) SLEEP_TIMERETRY_ATTEMPTS)r r- extra_headersr attemptsr rk rk ro r, 1 s* z.ContainerMetadataFetcher._retrieve_credentialsc C s zEt jj}|d||d}| j| }|jd}|jdkr)t d|j|f dzt |W W S t yE d}t d|| t |dw tyZ } z d | }t |dd } ~ ww ) Nr r rh r z4Received non 200 response (%s) from ECS metadata: %sr z8Unable to parse JSON returned from ECS metadata servicesz%s:%sz;Received error when attempting to retrieve ECS metadata: %s)r r r r r r r) r r r r rC rE r r r ) r r- r r r r r response_textr r rk rk ro r7 B s4 z&ContainerMetadataFetcher._get_responsec C s d| j |f S )Nz http://%s%s) IP_ADDRESS)r r4 rk rk ro r- Z r z!ContainerMetadataFetcher.full_urlr )r r r r( r9 r8 r> r1 timer* r r. r+ r0 r5 r, r7 r- rk rk rk ro r& s r& c C s t | ri S t S r )should_bypass_proxiesr r rk rk ro r ^ s r c C s6 z t t| jr W dS W dS ttjfy Y dS w )z: Returns whether we should bypass proxies or not. TF)r r r rs socketgaierrorrA rk rk ro r@ e s r@ ISO-8859-1c C sF | d}|s dS t|\}}d|v r|d dS d|v r!|S dS )zReturns encodings from given HTTP Header Dict. :param headers: dictionary to extract encoding from. :param default: default encoding if the content-type is text z content-typeNcharsetz'"r )r cgi parse_headerr\ )r default content_typer_ rk rk ro get_encoding_from_headersz s rJ c K s0 t | ttfr t| }nt| }t|dS )Nr )ru bytes bytearray_calculate_md5_from_bytes_calculate_md5_from_filebase64 b64encoder )r r binary_md5rk rk ro calculate_md5 s rR c C s t | }| S r )r r ) body_bytesmd5rk rk ro rM s rM c sB }t }t fdddD ]}|| q | | S )Nc r r r rk fileobjrk ro r r z*_calculate_md5_from_file.<locals>.<lambda>r )tellr r r seekr )rV start_positionrT r rk rU ro rN s rN c K sP | d }| d }t r"|dur$d|vr&t|fi |}|| d d< dS dS dS dS )z1Only add a Content-MD5 if the system supports it.r r Nz Content-MD5)r rR )r_ r r r md5_digestrk rk ro conditionally_calculate_md5 s r[ c @ s e Zd ZefddZdd ZdS )FileWebIdentityTokenLoaderc C s || _ || _d S r )_web_identity_token_pathrV )r web_identity_token_pathrV rk rk ro r s z#FileWebIdentityTokenLoader.__init__c C s8 | | j }| W d S 1 sw Y d S r )rV r] rR )r token_filerk rk ro __call__ s $z#FileWebIdentityTokenLoader.__call__N)r r r openr r` rk rk rk ro r\ s r\ c @ s& e Zd ZdddZdd Zdd ZdS ) SSOTokenLoaderNc C s |d u ri }|| _ d S r )r- )r r3 rk rk ro r s zSSOTokenLoader.__init__c C s t |d S )Nrh )r sha1rk r )r start_urlrk rk ro _generate_cache_key s z"SSOTokenLoader._generate_cache_keyc C sJ | |}z | j| }|d W S ty$ tjddd d}t|dw )N accessTokenzFailed to load SSO token:Tr z@The SSO access token has either expired or is otherwise invalid.r< )re r- KeyErrorr r r )r rd r r r rk rk ro r` s zSSOTokenLoader.__call__r )r r r r re r` rk rk rk ro rb s rb )Tr- r )rD )rO r r? loggingrq r r r r. r r rB rF dateutil.parserrt dateutil.tzr r botocore.awsrequestbotocore.httpsessionbotocore.compatr r r r r r r r r r r r six.moves.urllib.requestr r botocore.exceptionsr r r r r r r r r r r r r r r r r! r" r# r$ r% r& urllib3.exceptionsr' getLoggerr r r. r r r SAFE_CHARSr r r r EVENT_ALIASESIPV4_PATHEX_PATr LS32_PATrl _variationsUNRESERVED_PATr IPV6_PAT ZONE_ID_PATIPV6_ADDRZ_PATr frozensetr r{ r r r r r r r r r r Exceptionr r objectr r/ rJ rQ ra rY rS rg ra ry r{ r r r r r r r r r r r r r r r r r r r r r$ r* r+ rE ra rb rn r r r r& r r@ rJ rR rM rN r[ r\ rb rk rk rk ro <module> s 8` !"#$%&'()*+,-./0123456789:;<=>?@ABCDEN ! & V $ - !` ? !W O{ d