AppendAWSError checks if the given error is a known AWS error we modify, and if so then returns a go-multierror, appending the original and the AWS error.

CheckAWSError will examine an error and convert to a logical error if appropriate.

GenerateLoginData populates the necessary data to send to the Vault server for generating a token This is useful for other API clients to use.

It's impossible to mimic "normal" AWS behavior here because it's not consistent or well-defined.

MockOptionErr provides a mock option error for use with testing.

GenerateCredentialChain uses the config to generate a credential chain suitable for creating AWS sessions and clients.

NewMockIAM provides a factory function to use with the WithIAMAPIFunc option.

NewMockSTS provides a factory function to use with the WithSTSAPIFunc option.

WithAccessKey allows passing an access key to use for operations.

WithAwsSession allows controlling the session passed into the client.

WithClientType allows choosing the client type to use.

WithCreateAccessKeyError sets the error output for the CreateAccessKey method.

WithCreateAccessKeyOutput sets the output for the CreateAccessKey method.

WithDeleteAccessKeyError sets the error output for the DeleteAccessKey method.

WithEnvironmentCredentials allows controlling whether environment credentials are used.

WithGetCallerIdentityError sets the error output for the GetCallerIdentity method.

WithGetCallerIdentityOutput sets the output for the GetCallerIdentity method.

WithGetUserError sets the error output for the GetUser method.

WithGetUserOutput sets the output for the GetUser method.

WithHttpClient allows passing a custom client to use.

WithIAMAPIFunc allows passing in an IAM interface constructor for mocking the AWS IAM API.

WithIamEndpoint allows passing a custom IAM endpoint.

WithLogger allows passing a logger to use.

WithMaxRetries allows passing custom max retries to set.

WithRegion allows passing a custom region.

WithSecretKey allows passing a secret key to use for operations.

WithSharedCredentials allows controlling whether shared credentials are used.

WithSTSAPIFunc allows passing in a STS interface constructor for mocking the AWS STS API.

WithStsEndpoint allows passing a custom STS endpoint.

WithUsername allows passing the user name to use for an operation.

WithValidityCheckTimeout allows passing a timeout for operations that can wait on success.

"us-east-1 is used because it's where AWS first provides support for new features, is a widely used region, and is the most common one for some services like STS.

MockIAM provides a way to mock the AWS IAM API.

MockSTS provides a way to mock the AWS STS API.

IAMAPIFunc is a factory function for returning an IAM interface, useful for supplying mock interfaces for testing IAM.

MockIAMOption is a function for setting the various fields on a MockIAM object.

MockSTSOption is a function for setting the various fields on a MockSTS object.

Option - how Options are passed as arguments.

STSAPIFunc is a factory function for returning a STS interface, useful for supplying mock interfaces for testing STS.