⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
botocore
/
__pycache__
/
View File Name :
utils.cpython-312.pyc
Pe V d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl Z d dl Z d dl Z d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dlmZmZ d dlZd dlmZ d dl m Z d dl Z d dl Z d dl Z d dl!m"Z" d d l!m#Z# d d l!m$Z$ d d l!m%Z% d d l!m&Z& d d l!m'Z' d dl!m(Z( d dl!m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6 d dl7m8Z8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZLmMZMmNZN ej eP ZQdZRdZSdZTdZUdZV e j d ZXeGe<e:e;fZYdgZZi dddddd d d d d d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8i d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdRdXdYi dZd[d\d]d^d_d`dadbdadcd8ddd:dedBdfdgdhdidjdkdldmdndodpdqdrdsdtd]dudvi dwdxdydxdzd{d|dmd}d~ddddddgddddddddoddddddddddddddLddZ[ e j de j Z]d Z^d Z_d Z`d Zad Zbd Zcd Zdd Zed ZfddZgd Zh G d dei Zj G d dei Zk G d d Zl G d del Zm G d d Zn G d del ZoddZpd ZqerfdZsd ZteVfdZueVfdZvd Zwd Zxd Zyd Zzd dZ{ddZ|d Z}d Z~ G d d Z G d d« ZdÄ ZdĄ Zdń ZdƄ ZdDŽ ZdȄ Z d dɄZ d dʄZd˄ Zd̄ Zd̈́ Zd΄ Zdτ ZddЄZddфZd҄ Zdӄ Z G dԄ dի Z G dք de Z G d d٫ Z G dڄ d۫ Z G d܄ dݫ Z G dބ de Z G d d Z G d d Z G d d Z G d d Z G d d Z G d de Z G d d Zd Zd Zd Zd dZd Zd Zd Zd Zd Zd Zd Zd Z G d d Z G d d Z G d d Zd Z G d d Zd ZddiZi ddd!d"d#d$ddd'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d=d>dCdDd?d@dEdFdGdHi dIdJdKdLdMdNdUdVdWdRdXdYd^d_d`dadddcd8ddd:dedBdfdgdd d d d d dhdii dddjdkdldmdddndodddpdqdrdsdudvdtd]dydxdzd{ddddddddddddddddddZy( N)datetime) ip_address)Path) getproxies proxy_bypass)tzutc)LocationParseError)HEX_PAT)IPV4_PAT)IPV6_ADDRZ_PAT)IPV6_PAT)LS32_PAT)UNRESERVED_PAT) ZONE_ID_PAT)HAS_CRTIPV4_RE IPV6_ADDRZ_RE MD5_AVAILABLEUNSAFE_URL_CHARS OrderedDictget_md5get_tzinfo_optionsjsonquoteurlparseurlsplit urlunsplit zip_longest) ClientErrorConfigNotFoundConnectionClosedErrorConnectTimeoutErrorEndpointConnectionErrorHTTPClientErrorInvalidDNSNameError!InvalidEndpointConfigurationErrorInvalidExpressionErrorInvalidHostLabelErrorInvalidIMDSEndpointError InvalidIMDSEndpointModeErrorInvalidRegionErrorMetadataRetrievalErrorMissingDependencyExceptionReadTimeoutErrorSSOTokenLoadError UnsupportedOutpostResourceError*UnsupportedS3AccesspointConfigurationErrorUnsupportedS3ArnError UnsupportedS3ConfigurationError UnsupportedS3ControlArnError&UnsupportedS3ControlConfigurationError zhttp://169.254.169.254/zhttp://[fd00:ec2::254]/)ipv4ipv6z-._~z[a-z0-9][a-z0-9\-]*[a-z0-9] dualstacka4bzalexa-for-businessalexaforbusinesszapi.mediatailor mediatailorz api.pricingpricingz api.sagemaker sagemaker apigatewayz api-gatewayzapplication-autoscalingzapplication-auto-scaling appstream2 appstream autoscalingz auto-scalingzautoscaling-planszauto-scaling-planscez cost-explorer cloudhsmv2z cloudhsm-v2cloudsearchdomainzcloudsearch-domainz cognito-idpzcognito-identity-providerconfigzconfig-servicecurz cost-and-usage-report-servicezdata.iotziot-data-planez data.jobs.iotziot-jobs-data-planezdata.mediastorezmediastore-data datapipelinez data-pipeline devicefarmz device-farmzdevices.iot1clickziot-1click-devices-service directconnectzdirect-connect discoveryz application-discovery-servicedmszdatabase-migration-servicedszdirectory-servicedynamodbstreamszdynamodb-streamselasticbeanstalkzelastic-beanstalkelasticfilesystemefselasticloadbalancingzelastic-load-balancingelasticmapreduceemrelastictranscoderzelastic-transcoderelbelbv2zelastic-load-balancing-v2emailseszentitlement.marketplacez marketplace-entitlement-serviceeszelasticsearch-serviceevents eventbridgezcloudwatch-eventsziot-dataz iot-jobs-dataziot1click-devicesziot1click-projectsziot-1click-projectskinesisanalyticszkinesis-analytics kinesisvideoz kinesis-videoz lex-modelszlex-model-building-servicez lex-runtimezlex-runtime-servicelogszcloudwatch-logsmachinelearningzmachine-learningzmarketplace-entitlement marketplacecommerceanalyticsz marketplace-commerce-analyticszmetering.marketplacezmarketplace-meteringmeteringmarketplacemghz migration-hubz models.lex monitoring cloudwatchzmturk-requestermturkz opsworks-cm opsworkscmzprojects.iot1clickresourcegroupstaggingapizresource-groups-tagging-apiroute53zroute-53route53domainszroute-53-domainsz runtime.lexzruntime.sagemakerzsagemaker-runtimesdbsimpledbsecretsmanagerzsecrets-managerserverlessrepo serverlessapplicationrepositoryservicecatalogzservice-catalogsfnzstorage-gateway)states stepfunctionsstoragegatewayzstreams.dynamodbtaggingz ^X-Amz-Checksum-([a-z0-9]*)$)flagsc n t | t r| S t | t r| j dk( S y)z~Ensures a boolean value if a string or boolean is provided For strings, the value for True/False is case insensitive trueF) isinstanceboolstrlowervals 0/usr/lib/python3/dist-packages/botocore/utils.pyensure_booleanr s1 #t C yy{f$$ c | j d }|.|j }|t vr|t d}t di ||S | j d ryy)zResolving IMDS endpoint mode to either IPv6 or IPv4. ec2_metadata_service_endpoint_mode takes precedence over imds_use_ipv6. "ec2_metadata_service_endpoint_mode)mode valid_modes imds_use_ipv6r8 r7 )get_config_variabler| METADATA_ENDPOINT_MODESr* )session endpoint_modelendpoint_modeerror_msg_kwargss r resolve_imds_endpoint_moder so //,M &,,. !8 8% 6 /B1AB B $ $_ 5 r c t | d xrM | j j dd xr/ | j j d dk( xr | j dk( S )zDetermines if the provided shape is the special header type jsonvalue. :type shape: botocore.shape :param shape: Shape to be inspected for the jsonvalue trait. :return: True if this type is a jsonvalue, False otherwise :rtype: Bool serialization jsonvalueFlocationheaderstring)hasattrr get type_name)shapes r is_json_value_headerr s_ ' ( # #K 7 ( # #J /8 ; ( OOx ' r c | yt |t j j r| |v S | j |j D cg c] }|j c}v S c c}w )z&Case-insensitive check for header key.F)ry botocore awsrequest HeadersDictr| keys) header_nameheaderskeys r has_headerr s^ GX 0 0 < < =g%% "glln&Mnssyy{n&MMM&Ms A(c | j j d| j j d| j }|j dd }|j dd }t j dd| }|S )zvReturns the module name for a service This is the value used in both the documentation and client class name serviceAbbreviationserviceFullNameAmazon AWSz\W+)metadatar service_namereplaceresub) service_modelnames r get_service_module_namer su ! ! % % "" } 9 9 D <<" %D <<r "D 66&"d #D Kr c | syt | S )N/)remove_dot_segmentspaths r normalize_url_pathr s t $$r c | | S t | S )zLReturns None if val is None, otherwise ensure value converted to boolean)r r} s r normalize_booleanr s { c""r c | sy| j d }g }|D ]5 }|s|dk7 s |dk( r|s|j %|j | 7 | d dk( rd}nd}| d dk( r|rd}nd}|dj | z |z S )Nr r .z..r )splitpopappendjoin)url input_url output_listxfirstlasts r r r ! s #IK cDy OO%""1% 1v} 2w#~+ 388K( (4 //r c X | r| dk( r t | dD ] }|| v st | y )Nr expression)[]*)r' )r invalids r validate_jmespath_for_setr < s6 s*$ ;;" j (J? ? #r c |r t | |j dd }|d t | dkD r|d nd}}|s t | |r|| vri | |< t | | ||d S || |< y )Nr r6 r r r F)is_first)r r lenr' set_value_from_jmespath)sourcer valuer bits current_key remainders r r r G s !*- C #D !!WTQ d1gBK $ ;; f $ #%F; & ; EE F;r c R | j di }|j d dk( }|S )z9Determine if request is intended for an MRAP accesspoint.s3_accesspointregionr r )contextr is_globals r is_global_accesspointr e s. [[!126N ""8,2I r c e Zd ZdZy)_RetriesExceededErrorz@Internal exception used when the number of retries are exceeded.N)__name__ __module__ __qualname____doc__r r r r r l s Jr r c e Zd Zd Zy)BadIMDSRequestErrorc || _ y Nrequestselfr s r __init__z BadIMDSRequestError.__init__s s r N)r r r r r r r r r r s r r c x e Zd ZeZdZdZededddfdZ d Z d Z d Z d Z dd Zd Zd Zd Zd Zd Zd ZddZy) IMDSFetcherzlatest/api/token21600r6 Nc || _ || _ |i }| j || | _ || _ | t j j }|j dd j dk( | _ |j d | _ || _ t j j | j t! | j | _ y )NAWS_EC2_METADATA_DISABLEDfalserx ec2_metadata_v1_disabled)timeoutproxies)_timeout _num_attempts_select_base_url _base_url_configosenvironcopyr r| _disabled_imds_v1_disabled _user_agentr httpsessionURLLib3Sessionget_environ_proxies_session)r r num_attemptsbase_urlenv user_agentrF s r r zIMDSFetcher.__init__| s ) >F ..x@ ;**//#C GG/ 9 ? ? AV K "(,F!G % ,,;;MM'7 < r c | j S r )r r s r get_base_urlzIMDSFetcher.get_base_url s ~~ r c , |i }|j d dk( }|j d }|r|rt j d d }|t k7 r|}n|r|}n|rt }nt }t j d|z t | s t | |S )Nr r8 ec2_metadata_service_endpointzFCustom endpoint and IMDS_USE_IPV6 are both set. Using custom endpoint.zIMDS ENDPOINT: %s)endpoint)r loggerwarningMETADATA_BASE_URLMETADATA_BASE_URL_IPv6debug is_valid_urir) )r r rF requires_ipv6custom_metadata_endpointchosen_base_urls r r z IMDSFetcher._select_base_url s >F JJ; < F $*::.M#N 5 NNX ( ( &O % 6O 4O /O (?:;O,*OD D r c | d}| j r | j j d sd}| j | | S )Nr r )r endswith)r r seps r _construct_urlzIMDSFetcher._construct_url s< >>$.."9"9#">C..!#tf--r c | j | j | j }d| j i}| j | t j j d|| }t | j D ]r } | j j |j }|j dk( r|j c S |j dv r y |j dv r t | t y # t $ r Y y t" $ r#}t$ j' d||d Y d }~d }~wt( $ r<}t+ |j, j/ d t0 r t3 || d }~ww xY w) Nz$x-aws-ec2-metadata-token-ttl-secondsPUTmethodr r )i i i )i OCaught retryable HTTP exception while making metadata service request to %s: %sTexc_infoerror)r r$ )_assert_enabledr _TOKEN_PATH _TOKEN_TTL_add_user_agentr r AWSRequestranger r sendprepare status_codetextr r. RETRYABLE_HTTP_ERRORSr r r$ ry kwargsr r r) )r r r r iresponsees r _fetch_metadata_tokenz!IMDSFetcher._fetch_metadata_token s] !!$"2"23 2DOO W%%%00c7 1 t))*A ==--goo.?@''3.#==( ))_< ))V3-g66 4 +0 $ ( 0 ! # ahhll7 35GH2CqII s7 AC8 C8 C88 E2E2 D** E267E--E2c | j |s| j | | j }| j | }i }|||d< | j | t | j D ]Z } t j j d|| }| j j |j } || s|c S \ | j! # t $ r#} t j d|| d Y d} ~ d} ~ ww xY w)aZ Make a get request to the Instance Metadata Service. :type url_path: str :param url_path: The path component of the URL to make a get request. This arg is appended to the base_url that was provided in the initializer. :type retry_func: callable :param retry_func: A function that takes the response as an argument and determines if it needs to retry. By default empty and non 200 OK responses are retried. :type token: str :param token: Metadata token to send along with GET requests to IMDS. Nzx-aws-ec2-metadata-tokenGETr r! Tr" )r% _assert_v1_enabled_default_retryr r( r* r r r r) r r+ r, r/ r r _RETRIES_EXCEEDED_ERROR_CLS) r url_path retry_functokenr r r1 r r2 r3 s r _get_requestzIMDSFetcher._get_request s # # % ,,J!!(+ 27G. / W%t))*A "--88 c7 9 ==--goo.?@!(+#O , + ..00 ) 0 ! s 5AC D 'DD c < | j | j |d< y y )Nz User-Agent)r )r r s r r( zIMDSFetcher._add_user_agent s# '$($4$4GL ! (r c f | j r%t j d | j y )Nz)Access to EC2 metadata has been disabled.)r r r r9 r s r r% zIMDSFetcher._assert_enabled s* >> LLD E224 4 r c 4 | j r t d y )NzLUnable to retrieve token for use in IMDSv2 call and IMDSv1 has been disabled error_msg)r r, r s r r7 z IMDSFetcher._assert_v1_enabled s ! !(h "r c J | j | xs | j | S r _is_non_ok_response _is_emptyr r2 s r r8 zIMDSFetcher._default_retry ! ''1MT^^H5MMr c L |j dk7 r| j |dd yy)Nr znon-200Tlog_bodyF)r- _log_imds_responserG s r rE z IMDSFetcher._is_non_ok_response" s+ 3 & # #Hi$ # Gr c F |j s| j |dd yy)Nzno bodyTrJ F)contentrL rG s r rF zIMDSFetcher._is_empty( s& # #Hi$ # Gr c d}||j |j g}|r |dz }|j |j t j |g| y )NzHMetadata service returned %s response with status code of %s for url: %sz, content body: %s)r- r r rN r r )r r2 reason_to_logrK statement logger_argss r rL z IMDSFetcher._log_imds_response. sW 1 %h&:&:HLLI - -I x / / 0 Y--r r F)r r r r r9 r& r' DEFAULT_METADATA_SERVICE_TIMEOUTr r r r r r4 r= r( r% r7 r8 rE rF rL r r r r r w sj "7 $KJ 1" 8 >. "H*1X55 N .r r c L e Zd ZdZg dZd Zd dZd dZd Zd Z d Z d Z d Z y) InstanceMetadataFetcherz*latest/meta-data/iam/security-credentials/) AccessKeyIdSecretAccessKeyToken Expirationc | j }| j | }| j || }| j | r'||d |d |d |d d}| j | |S d|v rd|v rt j d| i S # | j $ r$ t j d | j Y i S t $ r+}t j d |j Y d }~i S d }~ww xY w) NrW rX rY rZ ) role_name access_key secret_keyr< expiry_timeCodeMessagez7Error response received when retrievingcredentials: %s.\Max number of attempts exceeded (%s) when attempting to retrieve data from metadata service.zBad IMDS request: %s) r4 _get_iam_role_get_credentials _contains_all_credential_fields_evaluate_expirationr r r9 r r r )r r< r\ credentialsr3 s r retrieve_iam_role_credentialsz5InstanceMetadataFetcher.retrieve_iam_role_credentialsC s % <..0E **51I // 5AK33K@!*"-m"<"-.?"@ ( 1#.|#< ))+6"" [(Y+-ELL+# // LLE"" # < LL/ ; ; <s$ A*B - B /C2?C2 C--C2Nc f | j | j | j | j S Nr: r; r< )r= _URL_PATH_needs_retry_for_role_namer. )r r< s r rc z%InstanceMetadataFetcher._get_iam_rolel s4 ^^66 ! $ r c | j | j |z | j | }t j |j S rj )r= rl _needs_retry_for_credentialsr loadsr. )r r\ r< rs r rd z(InstanceMetadataFetcher._get_credentialss sD ^^i/88 zz!&&!!r c t j |j y# t $ r | j |d Y yw xY w)NFz invalid jsonT)r rp r. ValueErrorrL rG s r _is_invalid_jsonz(InstanceMetadataFetcher._is_invalid_json{ s< JJx}} % # #Hn = s " A A c J | j | xs | j | S r rD rG s r rm z2InstanceMetadataFetcher._needs_retry_for_role_name rH r c p | j | xs$ | j | xs | j | S r )rE rF rt rG s r ro z4InstanceMetadataFetcher._needs_retry_for_credentials s9 $ $X . /~~h' /$$X. r c ^ | j D ] }||vst j d| y y)Nz3Retrieved credentials is missing required field: %sFT)_REQUIRED_CREDENTIAL_FIELDSr r )r rg fields r re z7InstanceMetadataFetcher._contains_all_credential_fields s6 55EK' I 6 r c |j d }|y t j j |d }| j j dd }t j dd }||z }t j j }t j | }||z }||k\ r7||z } | j d |d< t j d|dz d d y y # t $ r t j d |d Y y w xY w) Nr_ z%Y-%m-%dT%H:%M:%SZ ec2_credential_refresh_windowiX x secondszAttempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted again within the next < z.0fz minutes.z Unable to parse expiry_time in ) r r strptimer randomrandintutcnow timedeltastrftimer infors r ) r rg expirationrefresh_intervaljitter refresh_interval_with_jitter current_timerefresh_offsetextension_timenew_times r rf z,InstanceMetadataFetcher._evaluate_expiration s, __]3 !**33 0J $|| / // ^^C-F+;f+D (#,,335L % / /4 N (. 8N~-'.8-5->->(. M* !=R ? DIO . LL1+m2L1MN s C C# #$D D r ) r r r rl rx rh rc rd rt rm ro re rf r r r rV rV : s9 <I# 'R"N r rV c , e Zd ZddZd Zd Zd Zd Zy)IMDSRegionProviderNc R || _ |t j }|| _ || _ y)aU Initialize IMDSRegionProvider. :type session: :class:`botocore.session.Session` :param session: The session is needed to look up configuration for how to contact the instance metadata service. Specifically the whether or not it should use the IMDS region at all, and if so how to configure the timeout and number of attempts to reach the service. :type environ: None or dict :param environ: A dictionary of environment variables to use. If ``None`` is the argument then ``os.environ`` will be used by default. :type fecther: :class:`botocore.utils.InstanceMetadataRegionFetcher` :param fetcher: The class to actually handle the fetching of the region from the IMDS. If not provided a default one will be created. N)r r r _environ_fetcher)r r r fetchers r r zIMDSRegionProvider.__init__ s' ?jjG r c & | j }|S )z#Provide the region value from IMDS.) _get_instance_metadata_region)r instance_regions r providezIMDSRegionProvider.provide s <<> r c F | j }|j }|S r ) _get_fetcherretrieve_region)r r r s r r z0IMDSRegionProvider._get_instance_metadata_region s# ##%((* r c \ | j | j | _ | j S r )r _create_fetcherr s r r z IMDSRegionProvider._get_fetcher s& == 0 0 2DM}} r c l | j j d }| j j d }| j j d t | j | j j d d}t ||| j | j j | }|S )Nmetadata_service_timeout metadata_service_num_attemptsr r )r r r )r r r r rF )r r r InstanceMetadataRegionFetcherr r )r metadata_timeoutmetadata_num_attempts imds_configr s r r z"IMDSRegionProvider._create_fetcher s ==<< & !% A A +! .2]]-N-N/. 3M 3 )- (I(I*) 0$. }}//1 r NN)r r r r r r r r r r r r r s , r r c e Zd ZdZd Zd Zy)r z-latest/meta-data/placement/availability-zone/c | j }|S # | j $ r# t j d| j Y yw xY w)aR Get the current region from the instance metadata service. :rvalue: str :returns: The region the current instance is running in or None if the instance metadata service cannot be contacted or does not give a valid response. :rtype: None or str :returns: Returns the region as a string if it is configured to use IMDS as a region source. Otherwise returns ``None``. It will also return ``None`` if it fails to get the region from IMDS due to exhausting its retries or not being able to connect. rb N) _get_regionr9 r r r )r r s r r z-InstanceMetadataRegionFetcher.retrieve_region sO %%'FM// LLE"" s /AAc | j }| j | j | j | }|j }|d d }|S )Nrk r )r4 r= rl r8 r. )r r< r2 availability_zoner s r r z)InstanceMetadataRegionFetcher._get_region sU **,$$^^** % %MM"3B' r N)r r r rl r r r r r r r s ?I. r r c * |D ] }t || t r$|| v r||v rt | | || 1|| | |< :t || t r:|r8|| v r+t | | t r| | j || ~|| | |< || | |< y)zGiven two dict, merge the second dict into the first. The dicts can have arbitrary nesting. :param append_lists: If true, instead of clobbering a list with the new value, append all of the new values onto the original list. N)ry dict merge_dictslistextend)dict1dict2 append_listsr s r r r " s eCj$ 'e|u E#Jc 3 "3Zc c D )l e| 5:t <c !!%*- "3Zc sE#J% r c D i }| D ] }| | ||j < |S )zDCopies the given dictionary ensuring all keys are lowercase strings.)r| )originalr r s r lowercase_dictr ? s* D $SMSYY[ Kr c || 5 }|j }t | cd d d S # 1 sw Y y xY w# t $ r t | w xY w)Nr )readparse_key_val_file_contentsOSErrorr )filename_openfcontentss r parse_key_val_filer G sH , 8_vvxH.x8 __ , (++,s ; / ; 8; ; Ac i }| j D ]A }d|vr|j dd \ }}|j }|j }|||< C |S )N=r6 ) splitlinesr strip)r finalliner r~ s r r r P s` E##% d? ::c1%Siikiikc & Lr c J g }t | d r| j }n| }|D ]m \ }}t |t r0|D ]* }|j t | dt | , F|j t | dt | o dj | S )af Urlencode a dict or list into a string. This is similar to urllib.urlencode except that: * It uses quote, and not quote_plus * It has a default list of safe chars that don't need to be encoded, which matches what AWS services expect. If any value in the input ``mapping`` is a list type, then each list element wil be serialized. This is the equivalent to ``urlencode``'s ``doseq=True`` argument. This function should be preferred over the stdlib ``urlencode()`` function. :param mapping: Either a dict to urlencode or a list of ``(key, value)`` pairs. itemsr &)r r ry r r percent_encoder )mappingsafe encoded_pairspairsr r elements r percent_encode_sequencer _ s ( Mw U eT " $$%c*+1^G-D,EF ! !#&'q )>(?@ 88M ""r c t | t t f s t | } t | t s| j d } t | | S )a Urlencodes a string. Whereas percent_encode_sequence handles taking a dict/sequence and producing a percent encoded string, this function deals only with taking a string (not a dict/sequence) and percent encoding it. If given the binary type, will simply URL encode it. If given the text type, will produce the binary type by UTF-8 encoding the text. If given something else, will convert it to the text type first. utf-8)r )ry bytesr{ encoder ) input_strr s r r r sB i% . N i ' $$W- &&r c t j ddddddt }|j | }|t j | z S )a Parse numerical epoch timestamps (seconds since 1970) into a ``datetime.datetime`` in UTC using ``datetime.timedelta``. This is intended as fallback when ``fromtimestamp`` raises ``OverflowError`` or ``OSError``. :type value: float or int :param value: The Unix timestamps as number. :type tzinfo: callable :param tzinfo: A ``datetime.tzinfo`` class or compatible callable. r6 r tzinfor} )r r astimezoner )r r epoch_zeroepoch_zero_localizeds r _epoch_seconds_to_datetimer sK ""4Aq!QuwGJ%00: ("4"4U"C CCr c t | t t f r%t j j | | S t j j t | | S # t t f$ r Y nw xY w t j j | dt i S # t t f$ r}t d| d| d}~ww xY w)z.Parse timestamp with pluggable tzinfo options.GMT)tzinfoszInvalid timestamp "z": N) ry intfloatr fromtimestamp TypeErrorrs dateutilparserparser )r r r3 s r _parse_timestamp_with_tzinfor s %#u & ..ufh?? $$225<J J:& > $$UUEG4D$EE z " >.ugS<==>s) -A+ +A=<A=*B, ,C;C Cc t }|D ] } t | | c S t | } |D ] }t || c S t d| z # t t f$ r,}t j d|j | Y d}~zd}~ww xY w# t t f$ r,}t j dj | Y d}~d}~ww xY w# t t f$ r Y w xY w)zParse a timestamp into a datetime object. Supported formats: * iso8601 * rfc822 * epoch (value is an integer) This will return a ``datetime.datetime`` object. z2Unable to parse timestamp with "%s" timezone info.r" Nr zHUnable to parse timestamp using fallback method with "%s" timezone info.z4Unable to calculate correct timezone offset for "%s") r r r OverflowErrorr r r r r r rs RuntimeError)r tzinfo_optionsr r3 numeric_values r parse_timestampr s ()N /v> > ! e (1-OO ) >F 7 ' LLD ( ' LL! z " sE A C B B B "BB C "CC C C c t | t r| }n t | }|j |j t }|S |j t }|S )a Converted the passed in value to a datetime object with tzinfo. This function can be used to normalize all timestamp inputs. This function accepts a number of different types of inputs, but will always return a datetime.datetime object with time zone information. The input param ``value`` can be one of several types: * A datetime object (both naive and aware) * An integer representing the epoch time (can also be a string of the integer, i.e '0', instead of 0). The epoch time is considered to be UTC. * An iso8601 formatted timestamp. This does not need to be a complete timestamp, it can contain just the date portion without the time component. The returned value will be a datetime object that will have tzinfo. If no timezone info was provided in the input value, then UTC is assumed, not local time. r )ry _DatetimeClassr r r r r )r datetime_objs r parse_to_aware_datetimer sd 6 % ( 'u- " $++57+; $..uw7 r c t j ddd }| j | t }| j | } | j d | j z |z }|j S )aw Calculate the timestamp based on the given datetime instance. :type dt: datetime :param dt: A datetime object to be converted into timestamp :type default_timezone: tzinfo :param default_timezone: If it is provided as None, we treat it as tzutc(). But it is only used when dt is a naive datetime. :returns: The timestamp r r6 Nr )r r r r utcoffset total_seconds)dtdefault_timezoneepochds r datetime2timestampr sn dAq )E yy # $w ZZ /Z 0 $ ",,.058A ?? r c t j }t fdd D ] }|j | |r|j S |j S )a Calculate a sha256 checksum. This method will calculate the sha256 checksum of a file like object. Note that this method will iterate through the entire file contents. The caller is responsible for ensuring the proper starting position of the file and ``seek()``'ing the file back to its starting location if other consumers need to read from the file like object. :param body: Any file like object. The file must be opened in binary mode such that a ``.read()`` call returns bytes. :param as_hex: If True, then the hex digest is returned. If False, then the digest (as binary bytes) is returned. :returns: The sha256 checksum c & j d S N r )bodys r <lambda>z"calculate_sha256.<locals>.<lambda>@ s dii 4r r )hashlibsha256iterupdate hexdigestdigest)r as_hexchecksumchunks ` r calculate_sha256r - sN $ ~~ H4c: ; !!## r c g }dt j }t fdd D ]' }|j || j ) |s |d j S t | dkD rbg }t | D ]A \ }}|)|j |||z j 1|j | C |}t | dkD rbt j |d j d S )a\ Calculate a tree hash checksum. For more information see: http://docs.aws.amazon.com/amazonglacier/latest/dev/checksum-calculations.html :param body: Any file like object. This has the same constraints as the ``body`` param in calculate_sha256 :rtype: str :returns: The hex version of the calculated tree hash r c & j S r r )r required_chunk_sizes r r z%calculate_tree_hash.<locals>.<lambda>Y s dii(; <r r r6 r ascii) r r r r r r r _in_pairsbinasciihexlifydecode)r chunksr r new_chunksr secondr s ` @r calculate_tree_hashr H s F% ^^F<cB fUm**,- C c{$$&& f+/ &v .ME6!!!& "8"?"?"AB !!%( / f+/ F1I & - -g 66r c 0 t | }t || S r )r r )iterable shared_iters r r r i s x.K {K 00r c e Zd ZdZd Zd Zy)CachedPropertyzA read only property that caches the initially computed value. This descriptor will only call the provided ``fget`` function once. Subsequent access to this property will return the cached value. c || _ y r )_fget)r fgets r r zCachedProperty.__init__ s r c v || S | j | }||j | j j < |S r )r __dict__r )r objclscomputed_values r __get__zCachedProperty.__get__ s7 ;K !ZZ_N0>CLL,, -! !r N)r r r r r r# r r r r r z s "r r c 8 e Zd ZdZd dZd Zd dZd Zd Zd Z y) ArgumentGeneratora Generate sample input based on a shape model. This class contains a ``generate_skeleton`` method that will take an input/output shape (created from ``botocore.model``) and generate a sample dictionary corresponding to the input/output shape. The specific values used are place holder values. For strings either an empty string or the member name can be used, for numbers 0 or 0.0 is used. The intended usage of this class is to generate the *shape* of the input structure. This can be useful for operations that have complex input shapes. This allows a user to just fill in the necessary data instead of worrying about the specific structure of the input arguments. Example usage:: s = botocore.session.get_session() ddb = s.get_service_model('dynamodb') arg_gen = ArgumentGenerator() sample_input = arg_gen.generate_skeleton( ddb.operation_model('CreateTable').input_shape) print("Sample input for dynamodb.CreateTable: %s" % sample_input) c || _ y r )_use_member_names)r use_member_namess r r zArgumentGenerator.__init__ s !1 r c * g }| j || S )zGenerate a sample input. :type shape: ``botocore.model.Shape`` :param shape: The input shape. :return: The generated skeleton input corresponding to the provided input shape. )_generate_skeleton)r r stacks r generate_skeletonz#ArgumentGenerator.generate_skeleton s &&ue44r c |j |j |j dk( r"| j || |j S |j dk( r"| j || |j S |j dk( r"| j || |j S |j dk( rk| j r||j S |j r/t j |j |j S |j y|j dv r |j y|j dv r |j y |j d k( r |j y |j d k( r*t j d ddddd |j S |j y # |j w xY w)N structurer mapr r )integerlongr )r doubleg booleanT timestampr r6 ) r r r _generate_type_structurer _generate_type_list_generate_type_mapr' enumr choicer r r r+ r s r r* z$ArgumentGenerator._generate_skeleton s UZZ +-44UEB( IIK' F*//u=$ IIK# E)..ue< IIK H,)) IIK ::!==4 IIK IIK $77 IIK $77 IIK I- IIK K/ ((q!Q1= IIK 0 IIKEIIKs; G G ? G 0 G *G *G G *G (G G(c |j |j dkD ri S t }|j j D ] \ }}| j ||| ||< |S )Nr6 )r )countr r membersr r* )r r r+ skeleton member_name member_shapes r r5 z*ArgumentGenerator._generate_type_structure sg ;;uzz "Q &I =). )<)<)> %K $($;$; e+ %< %H[ ! *? r c d}| j r|j j }| j |j || gS )Nr )r' memberr r* r: s r r6 z%ArgumentGenerator._generate_type_list sA ! !<<$$D # #ELL% > r c |j }|j }|j dk( sJ t d| j || fg S )Nr KeyName)r r r r r* )r r r+ key_shape value_shapes r r7 z$ArgumentGenerator._generate_type_map sO II kk ""h...D 3 3K GH r NrS )r ) r r r r r r, r* r5 r6 r7 r r r r% r% s% 42 54 r r% c t j | rydt | j d}t j | d uS )NFr r )r intersectionr hostnamer match endpoint_urlrI s r is_valid_ipv6_endpoint_urlrM sC $$\28L)22315H x ( 44r c Z t | j }t j | d uS r )r rI r rJ rK s r is_valid_ipv4_endpoint_urlrO s& %..H == "$ ..r c t j | ryt | }|j }|yt | dkD ry|d dk( r|dd }t j dt j }|j | S )zVerify the endpoint_url is valid. :type endpoint_url: string :param endpoint_url: An endpoint_url. Must have at least a scheme and a hostname. :return: True if the endpoint url is valid. False otherwise. FN r r z;^((?!-)[A-Z\d-]{1,63}(?<!-)\.)*((?!-)[A-Z\d-]{1,63}(?<!-))$) r rH r rI r r compile IGNORECASErJ )rL partsrI alloweds r is_valid_endpoint_urlrV s $$\2 \ "E~~H 8}s|sCR=jjF G == ""r c 2 t | xs t | S r )rV rM )rL s r r r s . 2L3 r c r | yt j d }|j | }|s t | y)z0Provided region_name must be a valid host label.Nz)^(?![0-9]+$)(?!-)[a-zA-Z0-9-]{,63}(?<!-)$) region_name)r rR rJ r+ )rY valid_host_labelvalids r validate_region_namer\ ! s> zz"NO " "; /E [99 r c d| v ryt | }|dk s|dkD ryt j | }| |j t | k7 ryy)a Check to see if the ``bucket_name`` complies with the restricted DNS naming conventions necessary to allow access via virtual-hosting style. Even though "." characters are perfectly valid in this DNS naming scheme, we are going to punt on any name containing a "." character because these will cause SSL cert validation problems if we try to use virtual-hosting style addressing. r F ? T)r LABEL_RErJ end) bucket_namenrJ s r check_dns_namerd + sT k KA1uB NN; 'E } s;'77 r c | j j dd rd} t | || y# t $ r/}|j d }t j d| Y d}~yd}~ww xY w)ar This handler looks at S3 requests just before they are signed. If there is a bucket name on the path (true for everything except ListAllBuckets) it checks to see if that bucket name conforms to the DNS naming conventions. If it does, it alters the request to use ``virtual hosting`` style addressing rather than ``path-style`` addressing. use_global_endpointFzs3.amazonaws.comrb z2Not changing URI, bucket is not DNS compatible: %sN)r r switch_to_virtual_host_styler% r0 r r )r signature_versionrY default_endpoint_urlr0 r3 rb s r fix_s3_hostrj B sk 0%8 1 $ &(< hh}- @+ s . A&%A!!A&c | j yt | rt j d yt | j }|j | _ |j j d }| |j }t | dkD r|d }|syt j d| j t | rt | dk( r'| j d dk7 r| xj dz c_ |j | dj | xs d}|}|dz |z } |j | ||j d f} t | } | | _ t j d | yt! | y) a) This is a handler to force virtual host style s3 addressing no matter the signature version (which is taken in consideration for the default case). If the bucket is not DNS compatible an InvalidDNSName is thrown. :param request: A AWSRequest object that is about to be sent. :param signature_version: The signature version to sign with :param default_endpoint_url: The endpoint to use when switching to a virtual style. If None is supplied, the virtual host will be constructed from the url of the request. NzKRequest is GetBucketLocation operation, not checking for DNS compatibility.r r6 z*Checking for DNS compatible bucket for: %s r r r zURI updated to: %s)rb ) auth_path _is_get_bucket_location_requestr r r r r r netlocr rd remover schemequeryr r% ) r rh ri r0 rT path_partsrb r global_endpointhost new_tuplenew_uris r rg rg _ s^ $ ( 1 % W[[ !E G!!#&J # $|| : m A7;;O + & :!#$$R(C/%%,% k * 88J'.3D 2O $6D tT5;;CI +G!GK LL-w 7%+> >3 r c 8 | j j d S )Nz ?location)r r r s r rn rn s ;; ,,r c ^ j t j fd }|S )a Method decorator for caching method calls to a single instance. **This is not a general purpose caching decorator.** In order to use this, you *must* provide an ``_instance_cache`` attribute on the instance. This decorator is used to cache method calls. The cache is only scoped to a single instance though such that multiple instances will maintain their own cache. In order to keep things simple, this decorator requires that you provide an ``_instance_cache`` attribute on your instance. c |f}|r't t |j }||f}| j j | }||S | g|i |}|| j |< |S r )tuplesortedr _instance_cacher )r argsr0 cache_key kwarg_itemsresultfunc func_names r _cache_guardz$instance_cache.<locals>._cache_guard s{ % v||~ 67K"D+6I%%)))4 Md,T,V,*0 Y' r )r functoolswraps)r r r s ` @r instance_cacher s1 I__T r c fd}|S )a Version of functools.lru_cache that stores a weak reference to ``self``. Serves the same purpose as :py:func:`instance_cache` but uses Python's functools implementation which offers ``max_size`` and ``typed`` properties. lru_cache is a global cache even when used on a method. The cache's reference to ``self`` will prevent garbace collection of the object. This wrapper around functools.lru_cache replaces the reference to ``self`` with a weak reference to not interfere with garbage collection. c t j i fd t j fd }j |_ |S )Nc & | g|i |S r r )weakref_to_selfr~ r0 r s r func_with_weakrefz=lru_cache_weakref.<locals>.wrapper.<locals>.func_with_weakref s );D;F; ;r c B t j | g|i |S r )weakrefref)r r~ r0 r s r innerz1lru_cache_weakref.<locals>.wrapper.<locals>.inner s! $W[[%6HHH Hr )r lru_cacher cache_info)r r r cache_args cache_kwargss ` @r wrapperz"lru_cache_weakref.<locals>.wrapper sY j 9L 9 < : < I I -77 r r )r r r s `` r lru_cache_weakrefr s Nr c t | j j j d }|D cg c] }|t v s | }}d}t | dkD r|dj | dz z }|dz }|dv ryt | |d yc c}w ) z?Switches the current s3 endpoint with an S3 Accelerate endpointr zhttps://s3-accelerate.r amazonaws.com) ListBuckets CreateBucket DeleteBucketNF)use_new_scheme)r r ro r S3_ACCELERATE_WHITELISTr r _switch_hosts)r operation_namer0 rT pr s r switch_host_s3_accelerater s W[[ ! ( ( . .s 3E >1&=!=QE >'H 5zA~CHHUOc)) HHH'8E: ?s BBc t j | j j d }|j | r|| }t | | yy)zBSwitches the host using a parameter value from a JSON request bodyr N)r rp datar r r )r param_name request_json new_endpoints r switch_host_with_paramr sF ::gll 1 1' :;L ##J/ g|, $r c @ t | j || }|| _ y r )_get_new_endpointr )r r r final_endpoints r r r s & \>N !GKr c t | }t | }|j }|r |j }||j |j |j df}t | }t j d| d| |S Nr zUpdating URI from to )r rq ro r rr r r r )original_endpointr r new_endpoint_components original_endpoint_componentsrq final_endpoint_componentsr s r r r s &| 4#+,=#> ) 0 0F(// &&$))$** ! 9:N LL%&7%8^<LMN r c |D ]G }|| v r9t | | t r&t || t rt | | || @|| | |< I y)zDeeply two dictionaries, overriding existing keys in the base. :param base: The base dictionary which will be merged into. :param extra: The dictionary to merge into the base. Keys from this dictionary will take precedence. N)ry r deep_merge)baseextrar s r r r sW 4K49d+5:t, tCy%* - #JS r c B | j dd j S )zcTranslate the form used for event emitters. :param service_id: The service_id to convert. -)r r| ) service_ids r hyphenize_service_idr ) s c3 ' - - //r c & e Zd ZdZdZd Zd Zd Zy) IdentityCachezBase IdentityCache implementation for storing and retrieving highly accessed credentials. This class is not intended to be instantiated in user code. base_identity_cachec || _ || _ y r _client_credential_clsr clientcredential_clss r r zIdentityCache.__init__: - r c | j di |} | }| j j ||| j dd }|S )N- )r refresh_usingr advisory_timeoutmandatory_timeoutr )build_refresh_callbackr create_from_metadataMETHOD)r r0 callbackr credential_entrys r get_credentialsz IdentityCache.get_credentials> sV .4..88: //DD ";; E r c t )zCallback to be implemented by subclasses. Returns a set of metadata to be converted into a new credential instance. )NotImplementedError)r0 s r r z$IdentityCache.build_refresh_callbackJ s "##r N)r r r r r r r r r r r r r 1 s #F. $r r c f e Zd ZdZdZd Z ej d fd Zd Z d dZ xZ S ) S3ExpressIdentityCachezS3Express IdentityCache for retrieving and storing credentials from CreateSession calls. This class is not intended to be instantiated in user code. s3expressc || _ || _ y r r r s r r z S3ExpressIdentityCache.__init__\ r r d )maxsizec $ t | | S )Nbucket)superr )r r __class__s r r z&S3ExpressIdentityCache.get_credentials` s w&f&55r c fd}|S )Nc j j } | d }j |d d }|d |d |d |d S ) NBucket CredentialsrZ T)isorW rX SessionToken)r] r^ r< r_ )r create_session_serialize_if_needed)r2 credsr r r s r refresherz@S3ExpressIdentityCache.build_refresh_callback.<locals>.refreshere sk ||22&2AH ]+E 22l# 3 J $M 2 #$5 6 ~. ) r r )r r r s `` r r z-S3ExpressIdentityCache.build_refresh_callbackd s r c l t |t r#|r|j S |j d S |S Nz%Y-%m-%dT%H:%M:%S%Zry r isoformatr r r r s r r z+S3ExpressIdentityCache._serialize_if_neededt 1 e^ , ((>>"78 8 r rS ) r r r r r r r r r r r __classcell__)r s @r r r S s? F. Y%6 &6 r r c . e Zd ZddZddZd Zd Zd Zy)S3ExpressIdentityResolverNc v t j | | _ |t | j | }|| _ y r )r proxyr r _cache)r r r caches r r z"S3ExpressIdentityResolver.__init__} s. }}V, =*4<< HE r c t j d |xs | j j j }|j d| j |j d| j |j d| j y )Nz'Registering S3Express Identity Resolverbefore-parameter-build.s3before-call.s3before-sign.s3) r r r metar[ registerinject_signing_cache_keyapply_signing_cache_keyresolve_s3express_identityr event_emitteremitters r r z"S3ExpressIdentityResolver.register sr >? ;4<<#4#4#;#; ')F)F )4+G+GH)4+J+JKr c " d|v r d|d i|d< y y )Nr rb S3Expressr )r paramsr r0 s r r z2S3ExpressIdentityResolver.inject_signing_cache_key s# v $16(3C#DGK r c |j di }|j dd }|j di j d }|dk( r ||j di ||d d< y y y )Nendpoint_propertiesbackendr rb signingr )r setdefault)r r r r0 r r rb s r r z1S3ExpressIdentityResolver.apply_signing_cache_key sw %kk*? D%)))T: kk+r266}E k !k&= y" -.9GI { + '> !r c 2 |j j di }|j d }|dk( re|j d rS| j |d< d|vr?|j j di j di j d |d< y y y y ) Nr signing_namer z v4-s3expressidentity_cacher s3_redirectr r )r r startswithr ) r r r rY rh request_signerr r0 signing_contexts r r z4S3ExpressIdentityResolver.resolve_s3express_identity s "//--i<&**>: ; &+<+G+G , 15 O , -/1OO'' r:S2&S] , 2 , &r r )r r r r r r r r r r r r r | s LE:r r c > e Zd ZdZd dZd dZd Zd Zd Zd Z d Z y) S3RegionRedirectorv2a Updated version of S3RegionRedirector for use when EndpointRulesetResolver is in use for endpoint resolution. This class is considered private and subject to abrupt breaking changes or removal without prior announcement. Please do not use it directly. Nc N |xs i | _ t j | | _ y r )r r r r r endpoint_bridger r s r r z S3RegionRedirectorv2.__init__ s kr }}V, r c t j d |xs | j j j }|j d| j |j d| j |j d| j y )Nz(Registering S3 region redirector handlerneeds-retry.s3r z before-endpoint-resolution.s3) r r r r r[ r redirect_from_errorannotate_request_contextredirect_from_cacher s r r z S3RegionRedirectorv2.register st ?@ ;4<<#4#4#;#;)4+C+CD ')F)F +T-E-E r c |y|j di j di }t j |j d rt j d y|j d rt j d y|d j d i }|j d }|d j d i }|d v xr |j d k( } |d v xr% |j dk( xr d|j di v } |dk( xr d|v } |d duxr |d j dv } |dk( } t | | | | | g sy|d d d }|d j d }| j || }| t j d|d|d yt j d|d|d|d || j |< | j j }|j ||d d d |d }| j |d |j |d < d |d d d< |j j d }|=|j! | }|\ }}||d d!< i |d j d"i ||d d"< y)# An S3 request sent to the wrong region will return an error that contains the endpoint the request should be sent to. This handler will add the redirect information to the signing context and then redirect the request. Nr r r zBS3 request was previously for an Accesspoint ARN, not redirecting. redirected6S3 request was previously redirected, not redirecting.r6 Errorr` ResponseMetadata301400 HeadObject HeadBucketx-amz-bucket-region HTTPHeaders AuthorizationHeaderMalformedRegionr i- i. i3 PermanentRedirect client_region S3 client configured for region but the bucket S is not in that region and the proper region could not be automatically determined. is in region b; Please configure the proper region to avoid multiple unnecessary redirects and signing attempts.r )operation_model call_argsrequest_contextr T authSchemes auth_typer )r ArnParseris_arnr r r r- anyget_bucket_regionr r _ruleset_resolverconstruct_endpointset_request_urlr propertiesauth_schemes_to_signing_ctx)r request_dictr2 operationr0 redirect_ctxr$ error_coderesponse_metadatais_special_head_objectis_special_head_bucketis_wrong_signing_regionis_redirect_statusis_permanent_redirectr r- new_region ep_resolverep_info auth_schemes auth_infor7 r s r r z(S3RegionRedirectorv2.redirect_from_error s #'' 26::="M L , ,X 6 7 LL L ) LLH ,YYv& $QKOO,> C . ( KY^^|-K . ( 8,. 8% $$]B78 8 8 NX=N &a[ 4 ) : + :) !+.A A &'%&" i( 7A$Y/33OD ++FH= LL 0=fF fj 2 ) F ll44 00 %"9-m<XF ( 3 1 # 2 2 U @D Y .|< ))--m< ##?? MI)2 &I3<L #K 02 y)--i<2!2L #I . r c < |d }|d d }d|v r|d S |j di j dd }||S | j j | }|d d }|j dd }|S # t $ r }|j d d }Y d}~4d}~ww xY w a. There are multiple potential sources for the new region to redirect to, but they aren't all universally available for use. This will try to find region from response elements, but will fall back to calling HEAD on the bucket if all else fails. :param bucket: The bucket to find the region for. This is necessary if the region is not available in the error response. :param response: A response representing a service request that failed due to incorrect region configuration. r6 r! r( r' r r* Nr r r head_bucketr r2 r r r2 service_responseresponse_headersr r r3 s r r; z&S3RegionRedirectorv2.get_bucket_region6 $A;+,>? N $4 4#$9: : "%%gr266xF M D||//v/>H 12=AG 2D9 Djj!34]CG D $A6 6 B?BBc t ||d S )z Splice a new endpoint into an existing URL. Note that some endpoints from the the endpoint provider have a path component which will be discarded by this function. F)r )r old_urlr r0 s r r> z$S3RegionRedirectorv2.set_request_urlW s !,>>r c |j d }|0|| j v r!| j j | }||d< yyy)a If a bucket name has been redirected before, it is in the cache. This handler will update the AWS::Region endpoint resolver builtin param to use the region from cache instead of the client region to avoid the redirect. r Nz AWS::Region)r r )r builtinsr r0 r rK s r r z(S3RegionRedirectorv2.redirect_from_cache_ sG H% &DKK"7 0J&0H] # #8 r c 8 |j d }d||d|d< y)zStore the bucket name in context for later use when redirecting. The bucket name may be an access point ARN or alias. r F)r r r r Nr )r r r r0 r s r r z-S3RegionRedirectorv2.annotate_request_contextk s' H% " r r ) r r r r r r r r; r> r r r r r r r s- - jX B? 1 r r c > e Zd ZdZd dZd dZd Zd Zd Zd Z d Z y) S3RegionRedirectorzThis handler has been replaced by S3RegionRedirectorv2. The original version remains in place for any third-party libraries that import it. Nc || _ || _ | j i | _ t j | | _ t j dt y )NzThe S3RegionRedirector class has been deprecated for a new internal replacement. A future version of botocore may remove this class.category)_endpoint_resolverr r r r warningswarn FutureWarningr s r r zS3RegionRedirector.__init__| sJ "1 ;; DK }}V, # r c |xs | j j j }|j d| j |j d| j |j d| j y )Nr r r )r r r[ r r r> r r s r r zS3RegionRedirector.register sa ;4<<#4#4#;#;)4+C+CD)4+?+?@4d6N6NOr c |y| j |j di rt j d y|j di j d rt j d y|d j di }|j d }|d j d i }|d v xr |j d k( }|d v xr% |j d k( xr d |j di v } |dk( xr d|v } |d duxr |d j dv } |dk( } t || | | | g sy|d d d } |d j d }| j | | }| t j d|d| d yt j d|d| d|d | j j d | }|d }|| |d }||d d< || j | < | j ||d d |d d< y) r Nr z=S3 request was previously to an accesspoint, not redirecting. s3_redirectedr r6 r r` r! r" r% r& r' r( r) r* r r+ r, r r r- r. r/ r0 r1 r2 s3rL )r r r T) _is_s3_accesspointr r r r r- r: r; rc resolver r> )r rA r2 rB r0 r$ rD rE rF rG rH rI rJ r r- rK r r s r r z&S3RegionRedirector.redirect_from_error sk " "<#3#3Ir#B C LLO Ir * . . ? LLH ,YYv& $QKOO,> C . ( KY^^|-K . ( 8,. 8% $$]B78 8 8 NX=N &a[ 4 ) : + :) !+.A A &'%&" i(3H=$Y/33OD ++FH= LL 0=fF fj 2 **224DN+ ! .= Y * - F \< +BC37 Y 0 r c < |d }|d d }d|v r|d S |j di j dd }||S | j j | }|d d }|j dd }|S # t $ r }|j d d }Y d}~4d}~ww xY wrQ rR rT s r r; z$S3RegionRedirector.get_bucket_region rW rX c t |j di j dd }|t |d |d |d< y y )Nr r r F)r r r r r r0 r s r r> z"S3RegionRedirector.set_request_url s@ ;;y"-11*dC -fUmXu MF5M r c | j | ry|j d }| j j | }|||d< yd|i|d< y)z This handler retrieves a given bucket's signing context from the cache and adds it into the request context. Nr r r )rk r r )r r r r0 r r s r r z&S3RegionRedirector.redirect_from_cache sT " "7 + H% ++//&1 &!0GI "*F!3GI r c d|v S Nr r )r r s r rk z%S3RegionRedirector._is_s3_accesspoint& s 7**r r ) r r r r r r r r; r> r rk r r r r_ r_ w s/ "P ]~ BN 4 +r r_ c e Zd Zy)InvalidArnExceptionN)r r r r r r rt rt * s r rt c " e Zd Zd Zed Zy)r8 c |j dd }t | dk rt d|z |d |d |d |d |d d S ) N: zUProvided ARN: %s must be of the format: arn:partition:service:region:account:resourcer6 rl r^ ) partitionservicer accountresource)r r rt )r arn arn_partss r parse_arnzArnParser.parse_arn/ si IIc1% y>A %@BEF #1 | l |!! r c t | t r| j d syt } |j | y# t $ r Y yw xY w)Nzarn:FT)ry r{ r r8 r rt )r arn_parsers r r9 zArnParser.is_arn> sK %%U-=-=f-E [ '" s A A A N)r r r r staticmethodr9 r r r r8 r8 . s r r8 c e Zd Z ej d Z ej d ZdgZd dZd Z d Z d Z d Z d Z d Zy) S3ArnParamHandlerzA^(?P<resource_type>accesspoint|outpost)[/:](?P<resource_name>.+)$zc^(?P<outpost_name>[a-zA-Z0-9\-]{1,63})[/:]accesspoint[/:](?P<accesspoint_name>[a-zA-Z0-9\-]{1,63}$)r Nc 6 || _ |t | _ y y r _arn_parserr8 r r s r r zS3ArnParamHandler.__init__T % ({D r c < |j d| j y )Nr r handle_arnr r s r r zS3ArnParamHandler.registerY s :DOOLr c |j | j v ry | j | }|y |d dk( r| j ||| y |d dk( r| j ||| y y )N resource_type accesspointoutpost)r _BLACKLISTED_OPERATIONS"_get_arn_details_from_bucket_param_store_accesspoint_store_outpost)r r modelr r0 arn_detailss r r z S3ArnParamHandler.handle_arn\ ss ::55 5 ==fE '= 8 # #FG[ A )Y 6 = 7r c d|v r5 |d }| j j | }| j || |S y # t $ r Y y w xY w)Nr )r r _add_resource_type_and_namert )r r r r s r r z4S3ArnParamHandler._get_arn_details_from_bucket_paramg sa v X& " . . 8 8 = 00kB"" ' s 3; AAc | j j |d }|r)|j d |d< |j d |d< y t | )Nr~ r resource_name)r )_RESOURCE_REGEXrJ groupr2 )r r r rJ s r r z-S3ArnParamHandler._add_resource_type_and_namer sQ $$**;z+BC +0;;+GK (+0;;+GK ('C0 0r c H |d |d< |d |d |d |d |d d|d< y ) Nr r r} r{ r r| )r r} r{ r r| r r r r r r s r r z$S3ArnParamHandler._store_accesspointz sH '7x 0"9-$[1!(+"9- % !r c |d }| j j | }|s t | |j d }||d< |j d ||d |d |d |d d |d < y ) Nr )r accesspoint_namer outpost_namer} r{ r r| )r r r} r{ r r| r )_OUTPOST_RESOURCE_REGEXrJ r0 r )r r r r r rJ r s r r z S3ArnParamHandler._store_outpost s #O4 ,,22=A1 N N !;;'9:+x !KK 7$"9-$[1!(+"9- % !r r )r r r r rR r r r r r r r r r r r r r r r J s\ bjjLO )bjj 6 . .+ M > 1 " r r c e Zd ZdZdZ d dZd Zd Zd Zd Z d Z d Z d Z d Z d Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zed Z ed Z ed Z y) S3EndpointSetterawsr Nc || _ || _ || _ || _ |i | _ || _ || _ || j | _ y y r rc _region _s3_config_use_fips_endpoint _endpoint_url _partition_DEFAULT_PARTITIONr endpoint_resolverr s3_configrL r{ use_fips_endpoints r r zS3EndpointSetter.__init__ sV #4 #"3 DO )# " 5 5DO r c |j d| j |j d| j |j d| j y )Nr zchoose-signer.s3z%before-call.s3.WriteGetObjectResponse)r set_endpoint set_signer#update_endpoint_to_s3_object_lambdar s r r zS3EndpointSetter.register sH /1B1BC 14??C 3 4 4 r c | j r t d | j |d | j ry | j }|j d| j }dj |d |d }t |d |d |d< y ) NzOS3 client does not support accelerate endpoints for S3 Object Lambda operationsmsgs3-object-lambdaz https://{host_prefix}{hostname} host_prefixrI )r rI r F) _use_accelerate_endpointr3 _override_signing_namer rc r= r formatr )r r r r0 resolverresolvedr s r r z4S3EndpointSetter.update_endpoint_to_s3_object_lambda s ( (1e ##G-?@ **.. 9?? }- j) @ *&- uMu r c | j | rh| j | | j | | j | | j | }| j | | j || y | j r2| j rt d| j z t dd|i| | j r | j dd|i| y y )Nz{Client is configured to use the FIPS psuedo region for "%s", but S3 Accelerate does not have any FIPS compatible endpoints.r r r ) _use_accesspoint_endpoint _validate_accesspoint_supported_validate_fips_supported_validate_global_regions(_resolve_region_for_accesspoint_endpoint._resolve_signing_name_for_accesspoint_endpoint _switch_to_accesspoint_endpointr r r3 r r _s3_addressing_handler)r r r0 rY s r r z S3EndpointSetter.set_endpoint s ) )' 2 0 0 9 ) )' 2 ) )' 2 GGK ? ? H 0 0+ F ( (&&5037<<A & @g @ @ & & 'D ' ' B B6 B 'r c d|j v S rr r r s r r z*S3EndpointSetter._use_accesspoint_endpoint s 7??22r c j | j sy d|j d d v r t dh d|j d v rt d| j z |j d d }|| j k7 r:| j j dd s t d | j d |d y y ) Nfipsr r ,Invalid ARN, FIPS region not allowed in ARN.r r zhClient is configured to use the FIPS psuedo-region "%s", but outpost ARNs do not support FIPS endpoints.use_arn_regionTz8Client is configured to use the FIPS psuedo-region for "z1", but the access-point ARN provided is for the "zn" region. For clients using a FIPS psuedo-region calls to access-point ARNs in another region are not allowed.)r r r1 r r r r r accesspoint_regions r r z)S3EndpointSetter._validate_fips_supported s && W__%56x@ @<CD W__-= > ><F||% %__-= >x H -??&&'7> A <<); = ? .r c | j j dd ry | j dv rt d| j z y )Nr T)z aws-globalz s3-external-1zClient is configured to use the global psuedo-region "%s". When providing access-point ARNs a regional endpoint must be specified.r )r r r r1 r s r r z)S3EndpointSetter._validate_global_regions sK ?? / 6 <<: :<248LLA ;r c | j r t d |j d d }|| j k7 r t d| j d|d |j d j d }|d k( r'| j j d r t d |j d j d }|r'| j j d r t d | j | y )NzZClient does not support s3 accelerate configuration when an access-point ARN is specified.r r r{ Client is configured for "z3" partition, but access-point ARN provided is for "zE" partition. The client and access-point partition must be the same.r| r use_dualstack_endpointzjClient does not support s3 dualstack configuration when an S3 Object Lambda access point ARN is specified.r zTClient does not support s3 dualstack configuration when an outpost ARN is specified.)r r1 r r r r _validate_mrap_s3_config)r r request_partition s3_servicer s r r z0S3EndpointSetter._validate_accesspoint_supported" s ( (<= $OO,< =k J /< (9; __%56::9E + +0C0C $1 =N '78<<^L DOO / /0H I<8 %%g.r c t |j sy | j j d r t d | j j d r t d y )N$s3_disable_multiregion_access_pointszCInvalid configuration, Multi-Region Access Point ARNs are disabled.r r zeClient does not support s3 dualstack configuration when a Multi-Region Access Point ARN is specified.)r r r r r1 r s r r z)S3EndpointSetter._validate_mrap_s3_configH sc $W__5 ?? E F<) __ !9 :<I ;r c t |j r | j |d | j S | j j dd r&|j d d }| j || |S | j S )Nr r Tr r )r r _override_signing_regionr r r r s r r z9S3EndpointSetter._resolve_region_for_accesspoint_endpointZ sy 1 ) )'3 7 || __ !14 8!( 1A!B8!L ) )'3E F% %||r c @ t | rt ryt d y )Ns3v4azzUsing S3 with an MRAP arn requires an additional dependency. You will need to pip install botocore[crt] before proceeding.r )r r r- )r r r0 s r r zS3EndpointSetter.set_signerg s' ) 07 *r c ` |j d d }| j |j | y )Nr r| r r )r r accesspoint_services r r z?S3EndpointSetter._resolve_signing_name_for_accesspoint_endpointr s, %oo.> ? J ##GOO5HIr c J t |j }t |j | j |j | | j |j |j |j df }t j d|j d| ||_ y r ) r r r rq _get_netlocr _get_accesspoint_pathr rr r r )r r rY original_componentsaccesspoint_endpoints r r z0S3EndpointSetter._switch_to_accesspoint_endpointv s &w{{ 3 )#** +>**',,goo $)) T2F1G H + r c ^ t | r| j | S | j || S r )r _get_mrap_netloc_get_accesspoint_netloc)r r5 rY s r r z S3EndpointSetter._get_netloc s. 1(( 9 9//M Mr c |d }d}|d g}| j r1t | j j }|j | n(|d }|j d|| j | g dj | S )Nr z s3-globalr r{ r r )r r ro r r _get_partition_dns_suffixr )r r5 r rY mrap_netloc_componentsendpoint_url_netlocr{ s r r z!S3EndpointSetter._get_mrap_netloc s ()9:! "0"8!9 "*4+=+=">"E"E " ) )*= >&{3I " ) )! 229= xx.//r c |d }dj |d |d g}|j d }| j rD|r|j | t | j j }|j | n|r|dg}|j | nO|d dk( r$| j d| }|j | n#| j d | }|j | | j j d r|j d |j || j | g d j | S ) Nr z{}-{}r r} r s3-outpostsr| r zs3-accesspointr r9 r ) r r r r r ro r _inject_fips_if_neededr _get_dns_suffixr ) r r5 rY r accesspoint_netloc_componentsr r outpost_host components r r z(S3EndpointSetter._get_accesspoint_netloc sF ()9: NN>&1>)3L M) % &)).9 -44\B"*4+=+=">"E"E ) 0 01D E ,m < -44\B *.@@ 7 7& .44Y? 7 7$o .44Y?""#;<-44[A ) 0 0 d 2 2; ?@ xx566r c ( | j rd|z S |S )Nz%s-fipsr )r r r5 s r r z'S3EndpointSetter._inject_fips_if_needed s " " y( (r c F |d d }|j d|z dd xs dS )Nr r r r r6 )r )r original_pathr5 r s r r z&S3EndpointSetter._get_accesspoint_path s2 /08 $$S4ZQ7>3>r c X | j j | }| | j }|S r )rc get_partition_dns_suffix_DEFAULT_DNS_SUFFIX)r partition_name dns_suffixs r r z*S3EndpointSetter._get_partition_dns_suffix s4 ,,EE 11Jr c l | j j d| }| j }|r d|v r|d }|S Nrj dnsSuffixrc r= r r rY r r s r r z S3EndpointSetter._get_dns_suffix D **== + -- x/!+.Jr c d |j j di }||d< ||j d< y Nr r r r r r rY r s r r z)S3EndpointSetter._override_signing_region 2 !//--i< %0!%4 "r c < |j di }||d< ||d< y Nr r r )r r r r s r r z'S3EndpointSetter._override_signing_name s( !++i4 +7' , r c Z | j j d ry| j yt | j j }|j d sy|j d }|d dk7 ry|dd }t | t t | k7 ryt d |D S ) Nuse_accelerate_endpointTFr r r s3-accelerater6 c 3 , K | ] }|t v y wr r .0r s r <genexpr>z<S3EndpointSetter._use_accelerate_endpoint.<locals>.<genexpr> s G A1// ) r r r r ro r r r setall)r ro rT feature_partss r r z)S3EndpointSetter._use_accelerate_endpoint s ?? 8 9 % $,,-44/ S! 8 & a } S %7!8 8 G GGGr c \ | j ry| j j d }|r|S y )Nvirtualaddressing_style)r r r )r configured_addressing_styles r _addressing_stylez"S3EndpointSetter._addressing_style s6 ( ( '+oo&9&9:L&M# &. . 'r c | j dk( rt j d t S | j dk( s | j t j d y t j d t S )Nr z'Using S3 virtual host style addressing.r z Using S3 path style addressing.zSDefaulting to S3 virtual host style addressing with path style addressing fallback.)r r r rg r rj r s r r z'S3EndpointSetter._s3_addressing_handler si ! !Y . LLB C/ / ! !V +t/A/A/M LL: ; . r NNNNF) r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r s ) 6* N6C03 @ $/L$ J+$N 0$ 7@ ?5- H HD / / r r c e Zd ZdZdZ ej d Z d dZd Z d Z d Z d Z d Z d Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Z d Z d Z d Z y) S3ControlEndpointSetterr r z^[a-zA-Z0-9\-]{1,63}$Nc || _ || _ || _ || _ |i | _ || _ || _ || j | _ y y r r r s r r z S3ControlEndpointSetter.__init__> sV #4 #"3 DO )# " 5 5DO r c < |j d| j y )Nzbefore-sign.s3-control)r r r s r r z S3ControlEndpointSetter.registerR s 79J9JKr c | j | rW| j | | j | }| j | | j || | j | y | j | rQ| j | | j |d | j | j }| j || y y Nr ) _use_endpoint_from_arn_details-_validate_endpoint_from_arn_details_supported _resolve_region_from_arn_details&_resolve_signing_name_from_arn_details"_resolve_endpoint_from_arn_details _add_headers_from_arn_details _use_endpoint_from_outpost_id#_validate_outpost_redirection_validr _construct_outpost_endpointr _update_request_netloc)r r r0 rY new_netlocs r r z$S3ControlEndpointSetter.set_endpointU s . .w 7 > >w G ??HK 7 7 @ 3 3G[ I . .w 7 / / 8 4 4W = ' ' ? 99$,,GJ ' ' < 9r c d|j v S )Nr r r s r r' z6S3ControlEndpointSetter._use_endpoint_from_arn_detailsb s //r c d|j v S )N outpost_idr r s r r- z5S3ControlEndpointSetter._use_endpoint_from_outpost_ide s w..r c . d|j d d v r t |j d d d | j j dd s@|j d d }|| j k7 r d |d | j d }t | |j d d }|| j k7 r t d| j d|d | j j d r t d d|j d v r| j | y y )Nr r r r r r r r FzCThe use_arn_region configuration is disabled but received arn for "z(" when the client is configured to use ""r r{ r z&" partition, but arn provided is for "z;" partition. The client and arn partition must be the same.r 7S3 control client does not support accelerate endpointsr )r r4 r r r r5 r r. )r r arn_regionrB request_partions r r( zES3ControlEndpointSetter._validate_endpoint_from_arn_details_supportedh s W__]3H= =.OOM2:>B ""#3U; 7AJT\\) / =KK!//-8E doo -8 9 ?? 8 98M W__] ; ; 4 4W = <r c R | j j d r t d y )Nr zPClient does not support s3 dualstack configuration when an outpost is specified.r )r r r5 r s r r. z;S3ControlEndpointSetter._validate_outpost_redirection_valid s, ?? 7 884 9r c | j j dd r&|j d d }| j || |S | j S )Nr Fr r )r r r r r )r r r9 s r r) z8S3ControlEndpointSetter._resolve_region_from_arn_details sL ?? / 7 7AJ ) )': > ||r c N |j d d }| j || |S )Nr r| r )r r arn_services r r* z>S3ControlEndpointSetter._resolve_signing_name_from_arn_details s+ oom4Y? ##G[9r c L | j || }| j || y r ) _resolve_netloc_from_arn_detailsr0 )r r rY r1 s r r+ z:S3ControlEndpointSetter._resolve_endpoint_from_arn_details s) :: [ ##GZ8r c t |j }t |j ||j |j df }t j d|j d| ||_ y r )r r r rq r rr r r )r r r1 r arn_details_endpoints r r0 z.S3ControlEndpointSetter._update_request_netloc so &w{{ 3 )#**#((#)) T2F1G H + r c x |j d }d|v r| j | S |d }| j || S )Nr r r} )r r/ _construct_s3_control_endpoint)r r rY r r} s r r@ z8S3ControlEndpointSetter._resolve_netloc_from_arn_details sF oom4 [ (33K@ @ i(22;HHr c 8 | j j | S r )_HOST_LABEL_REGEXrJ )r labels r _is_valid_host_labelz,S3ControlEndpointSetter._is_valid_host_label s %%++E22r c L |D ] }| j | rt | y )N)rG )rH r( )r labelsrG s r _validate_host_labelsz-S3ControlEndpointSetter._validate_host_labels s% E,,U3+%88 r c | j || | j r$t | j j }||g}n9|dg}| j | | j | }|j ||g | j | S )N s3-control)rK r r ro _add_dualstackr r _construct_netloc)r rY r} r ro r s r rD z6S3ControlEndpointSetter._construct_s3_control_endpoint s "";8 "*4+=+=">"E"E 23F F ' --k:J MM; 3 4%%f--r c | j | | j r t | j j S d|| j | g}| j | | j | S r& )rK r r ro r _add_fipsrO )r rY ro s r r/ z3S3ControlEndpointSetter._construct_outpost_endpoint sl "";/ D . ./66 6 $$[1F NN6 "%%f--r c $ dj | S )Nr )r r ro s r rO z)S3ControlEndpointSetter._construct_netloc s xx r c 4 | j r |d dz |d< y y )Nr z-fipsr rS s r rQ z!S3ControlEndpointSetter._add_fips s" " " q G+F1I #r c ^ | j j d r|j d y y )Nr r9 )r r r rS s r rN z&S3ControlEndpointSetter._add_dualstack s& ?? 7 8 MM+ & 9r c l | j j d| }| j }|r d|v r|d }|S r r r s r r z'S3ControlEndpointSetter._get_dns_suffix r r c d |j j di }||d< ||j d< y r r r s r r z0S3ControlEndpointSetter._override_signing_region r r c d |j j di }||d< ||j d< y r r )r r r r s r r z.S3ControlEndpointSetter._override_signing_name s2 !//--i< +7'%4 "r c n |j d }|j d }|r| j || y y )Nr r )r r _add_outpost_id_header)r r r r s r r, z5S3ControlEndpointSetter._add_headers_from_arn_details s6 oom4 "~6 ' ' > r c " ||j d< y )Nzx-amz-outpost-id)r )r r r s r rZ z.S3ControlEndpointSetter._add_outpost_id_header s .:*+r r ) r r r r r r rR rF r r r r' r- r( r. r) r* r+ r0 r@ rH rK rD r/ rO rQ rN r r r r, rZ r r r r" r" 9 s )" #;< 6(L =0/ >@ 9 + I39 . . ,'55? ;r r" c e Zd ZdZ ej d ZddZd Zd Z d Z d Z d Z d Z d Zd Zd Zd Zd Zd Zy)S3ControlArnParamHandlerzThis handler has been replaced by S3ControlArnParamHandlerv2. The original version remains in place for any third-party importers. z[/:]Nc j || _ |t | _ t j dt y )NzThe S3ControlArnParamHandler class has been deprecated for a new internal replacement. A future version of botocore may remove this class.ra )r r8 rd re rf r s r r z!S3ControlArnParamHandler.__init__ s0 % ({D # r c < |j d| j y )Nz!before-parameter-build.s3-controlr r s r r z!S3ControlArnParamHandler.register" s / OO r c |j dv r| j ||| y | j ||| | j ||| y )N)r ListRegionalBuckets)r _handle_outpost_id_param_handle_name_param_handle_bucket_param)r r r r r0 s r r z#S3ControlArnParamHandler.handle_arn( sG ::@ @ ) )&% A # #FE7 ; % %feW =r c ||vry || }| j j | }||d< | j | |d< |S # t $ r Y y w xY w)Nr resources)r r _split_resourcert )r r r r r s r _get_arn_details_from_paramz4S3ControlArnParamHandler._get_arn_details_from_param2 si V # $C **44S9K&)K #'+';';K'HK $ " s :A A Ac > | j j |d S )Nr~ )_RESOURCE_SPLIT_REGEXr )r r s r rg z(S3ControlArnParamHandler._split_resource> s ))// J0GHHr c ` |d }d|v r |d |k7 rd|d z }t |d | ||d< y )Nr} AccountIdzGAccount ID in arn does not match the AccountId parameter provided: "%s"r r6 )r4 )r r r account_idrB s r _override_account_id_paramz3S3ControlArnParamHandler._override_account_id_paramA sZ + & VK%8J%F!{#$I / + ){r c d|vry |d |d< y )N OutpostIdr4 r )r r r r s r rb z1S3ControlArnParamHandler._handle_outpost_id_paramN s f $ &{ 3 r c |j dk( ry | j |d }|y | j | r| j ||| y d}t |d | NCreateAccessPointNamez4The Name parameter does not support the provided ARNr r6 )r rh _is_outpost_accesspoint_store_outpost_accesspointr4 r r r r r rB s r rc z+S3ControlArnParamHandler._handle_name_paramS sj ::, , 66vvF ' ' 4 + +FG[ INI. + r c ` |d dk7 ry|d }t | dk7 ry|d dk( xr |d d k( S ) Nr| r Frf rz r r rl r r r r rf s r ru z0S3ControlArnParamHandler._is_outpost_accesspointc sH y !] 2 , y>Q |y(JYq\]-JJr c l | j || |d d }||d< ||d< |d d |d< ||d< y )Nrf r^ rt r r6 r r rn )r r r r r s r rv z3S3ControlArnParamHandler._store_outpost_accesspointl sT '' <&{3A6)v*: &'&1+&>q&A N#!, r c | j |d }|y | j | r| j ||| y d}t |d | Nr z6The Bucket parameter does not support the provided ARNr r6 )rh _is_outpost_bucket_store_outpost_bucketr4 rw s r rd z-S3ControlArnParamHandler._handle_bucket_paramt sb 66vxH " "; / & &vw D I / + r c ` |d dk7 ry|d }t | dk7 ry|d dk( xr |d d k( S ) Nr| r Frf rz r r rl r ry rz s r r z+S3ControlArnParamHandler._is_outpost_bucket sH y !] 2 , y>Q |y(EYq\X-EEr c l | j || |d d }||d< ||d< |d d |d< ||d< y )Nrf r^ r rb r6 r r r| )r r r r rb s r r z.S3ControlArnParamHandler._store_outpost_bucket sS '' <!+.q1 &x%0 M"&1+&>q&A N#!, r r )r r r r r rR rj r r r rh rg rn rb rc ru rv rd r r r r r r] r] s^ 'BJJw / > I )4 K- F-r r] c B e Zd ZdZd dZd Zd Zd Zd Zd Z d Z d Z y) S3ControlArnParamHandlerv2a Updated version of S3ControlArnParamHandler for use when EndpointRulesetResolver is in use for endpoint resolution. This class is considered private and subject to abrupt breaking changes or removal without prior announcement. Please do not use it directly. Nc 6 || _ |t | _ y y r r r s r r z#S3ControlArnParamHandlerv2.__init__ r r c < |j d| j y )Nz%before-endpoint-resolution.s3-controlr r s r r z#S3ControlArnParamHandlerv2.register s 3 OO r c |j dk( ry | j |d }|y | j | | j | | j | r| j ||| y d}t |d | rr )r rh _raise_for_fips_pseudo_region _raise_for_accelerate_endpointru rv r4 rw s r rc z-S3ControlArnParamHandlerv2._handle_name_param s ::, , 66vvF **;7 ++G4 ' ' 4 + +FG[ INI. + r c ( | j || y r r| r s r rv z5S3ControlArnParamHandlerv2._store_outpost_accesspoint '' <r c | j |d }|y | j | | j | | j | r| j ||| y d}t |d | r~ )rh r r r r r4 rw s r rd z/S3ControlArnParamHandlerv2._handle_bucket_param s~ 66vxH **;7 ++G4 " "; / & &vw D I / + r c ( | j || y r r| r s r r z0S3ControlArnParamHandlerv2._store_outpost_bucket r r c r |d }|j d s|j d rt |d d y )Nr zfips-r r r6 )r r r4 )r r r9 s r r z8S3ControlArnParamHandlerv2._raise_for_fips_pseudo_region sE * )Z-@-@-I. +B .Jr c d |d j xs i }|j d r t d y )N client_configr r8 r )rj r r5 )r r r s r r z9S3ControlArnParamHandlerv2._raise_for_accelerate_endpoint s9 O,//52 ==2 38M 4r r ) r r r r r r rc rv rd r r r r r r r r s/ + $="=r r c | e Zd ZdZdZdZdZedddgZdej fd Z dd Z d Z d Z d Zd ZddZd Zd Zy)ContainerMetadataFetcherrl r^ r6 z 169.254.170.2z169.254.170.23z fd00:ec2::23 localhostNc x |*t j j | j }|| _ || _ y )N)r )r r r TIMEOUT_SECONDSr _sleep)r r sleeps r r z!ContainerMetadataFetcher.__init__ s; ? **99 ,, : G r c H | j | | j || S )zRetrieve JSON metadata from container metadata. :type full_url: str :param full_url: The full URL of the metadata service. This should include the scheme as well, e.g "http://localhost:123/foo" )_validate_allowed_url_retrieve_credentials)r full_urlr s r retrieve_full_uriz*ContainerMetadataFetcher.retrieve_full_uri s% ""8,))(G<<r c t j j | }| j |j ry | j |j }|s4t d|j ddj | j y )NzUnsupported host 'zN'. Can only retrieve metadata from a loopback address or one of these hosts: z, ) r compatr _is_loopback_addressrI _check_if_whitelisted_hostrs r _ALLOWED_HOSTS)r r parsedis_whitelisted_hosts r r z.ContainerMetadataFetcher._validate_allowed_url s ))(3 $ $V__ 5 " = =foo N" $V__$5 6BBF))DL_L_B`Aac #r c P t | }|j S # t $ r Y yw xY w)NF)r is_loopbackrs )r rI ips r r z-ContainerMetadataFetcher._is_loopback_address s- H%B>> ! s %%c " || j v ryy)NTF)r )r ru s r r z3ContainerMetadataFetcher._check_if_whitelisted_host s 4&& &r c F | j | }| j | S )zRetrieve JSON metadata from container metadata. :type relative_uri: str :param relative_uri: A relative URI, e.g "/foo/bar?id=123" :return: The parsed JSON response. )r r )r relative_urir s r retrieve_uriz%ContainerMetadataFetcher.retrieve_uri s# == .))(33r c 0 ddi}||j | d} | j ||| j S # t $ rR}t j d|d | j | j |dz }|| j k\ r Y d }~nd }~ww xY w})NAcceptzapplication/jsonr TzAReceived error when attempting to retrieve container metadata: %sr" r6 ) r _get_responser r, r r r SLEEP_TIMERETRY_ATTEMPTS)r r extra_headersr attemptsr3 s r r z.ContainerMetadataFetcher._retrieve_credentials% s /0 $ NN= ) )) gt';'; * - ! DOO,A t 2 22 3 s 9 BABBc t j j } |d|| }| j j |j }|j j d }|j dk7 r t d|j d| t j | S # t $ r& d}t j d || t | w xY w# t $ r} d | }t | d } ~ ww xY w) Nr6 r r r zReceived non 200 response z from container metadata: rA z>Unable to parse JSON returned from container metadata servicesz%s:%sz?Received error when attempting to retrieve container metadata: )r r r) r r+ r, rN r r- r, r rp rs r r r/ ) r r r r r) r r2 response_textrB r3 s r r z&ContainerMetadataFetcher._get_response; s >!,,77J 8WMG}}))'//*;<H $ , , 3 3G <M##s*,4X5I5I4J K44A?D Bzz-00 B \ Wi ?,yAA B % >''(c+ )9= = >s* BC B, ,/CC C='C88C=c $ d| j | S )Nzhttp://) IP_ADDRESS)r r s r r z!ContainerMetadataFetcher.full_urlU s ), 88r r )r r r r r r r r timer r r r r r r r r r r r r r r sa ONJ J N $4:: = 4,>49r r c 0 t | ri S t S r )should_bypass_proxiesr r s r r r Y s S! |r c t t | j ry y# t t j f$ r Y yw xY w)z: Returns whether we should bypass proxies or not. TF)r r ro r socketgaierrorr s r r r ` sF ,, - . v ' s # ??c @ | sy t | S # t t f$ r Y nw xY wt | d rnt | d rb | j }| j dd | j }| j | ||z S # t j $ r Y y w xY wy )Nr seektellrl )r AttributeErrorr r r r ioUnsupportedOperation)r orig_pos end_file_poss r determine_content_lengthr u s 4y I & tV v!6 yy{H IIaO 99;L IIh (* *&& s ""AB B B c | j d }|syt j j }||d< |j d }||S d|v r|S y)zReturns encodings from given HTTP Header Dict. :param headers: dictionary to extract encoding from. :param default: default encoding if the content-type is text z content-typeNcharsetr. )r rX messagera get_param)r default content_typer r s r get_encoding_from_headersr sa ;;~.L mm##%G *GN *G r c t | t t f r t | }n t | }t j | j d S )Nr )ry r bytearray_calculate_md5_from_bytes_calculate_md5_from_filebase64 b64encoder )r r0 binary_md5s r calculate_md5r sA $ *+.t4 -d3 J ' . .w 77r c 8 t | }|j S r )r r ) body_bytesmd5s r r r s * C ::<r c j }t }t fdd D ] }|j | j | |j S )Nc & j d S r r )fileobjs r r z*_calculate_md5_from_file.<locals>.<lambda> s gll; 7r r )r r r r r r )r start_positionr r s ` r r r sK \\^N )C7= 5 > LL ::<r c n | j di j di }|j d dk( S )Nr r r r r )r r s r _is_s3express_requestr s; **Y377 r " "9 - <<r c T | d }d|v ry|D ] }t j | s y y)Nr Content-MD5TF)CHECKSUM_HEADER_PATTERNrJ )r r r s r _has_checksum_headerr s; Y G " ( ( 0 r c L t | st | fi | t | fi | y y r )r conditionally_calculate_md5conditionally_enable_crc32)r r0 s r conditionally_calculate_checksumr s) '#F5f5"64V4 (r c | j di j di }|j d }t | r| d |dv rddddd i| d d< y y y y ) Nr r request_algorithmr )Nconditional-md5crc32r zx-amz-checksum-crc32) algorithminr )r r )r r0 checksum_contextchecksum_algorithms r r r s zz)R044ZD)--.AB f% 6N & "; ; $ .") y*% < ' &r c | d }| j di j di }|j d }|r|dk7 ryt | ryt | ryt r|t |fi |}|| d d< yyy) z1Only add a Content-MD5 if the system supports it.r r r r r Nr r )r r r r r )r r0 r r r md5_digests r r r s &>D zz)R044ZD)--.AB 04E EF# V$)"4262 +5y-( *}r c e Zd ZefdZd Zy)FileWebIdentityTokenLoaderc || _ || _ y r )_web_identity_token_pathr )r web_identity_token_pathr s r r z#FileWebIdentityTokenLoader.__init__ s (?% r c | j | j 5 }|j cd d d S # 1 sw Y y xY wr )r r r )r token_files r __call__z#FileWebIdentityTokenLoader.__call__ s, ZZ55 6* ??$ 7 6 6s 6?N)r r r openr r r r r r r s 6: %r r c * e Zd ZddZd ZddZddZy)SSOTokenLoaderNc |i }|| _ y r )r )r r s r r zSSOTokenLoader.__init__ s =E r c r |}||}t j |j d j S )Nr )r sha1r r )r start_url session_namer s r _generate_cache_keyz"SSOTokenLoader._generate_cache_key s5 #$I||I , ,W 56@@BBr c F | j || }|| j |< y r )r r )r r r< r r s r save_tokenzSSOTokenLoader.save_token s" ,,Y E !& I r c | j || }t j d| || j vr|}||}d| d}t | | j | }d|vsd|vrd| d}t | |S )Nz Checking for cached token at: z Token for z does not existrA accessToken expiresAtz is invalid)r r r r r/ )r r r r r rB r< s r r zSSOTokenLoader.__call__ s ,,Y E 5i[AB DKK ' D'#$TF/:I#i8 8 I& %E)A$YK{;I#i8 8 r r )r r r r r r r r r r r r s C 'r r c 6 e Zd ZdZdZd dZd Zd Zd Zd dZ y) EventbridgeSignerSetterr r Nc . || _ || _ || _ y r )rc r r )r r r rL s r r z EventbridgeSignerSetter.__init__2 s "3 )r c t |j d| j |j d| j y )Nz'before-parameter-build.events.PutEventsz before-call.events.PutEvents)r check_for_global_endpointset_endpoint_urlr s r r z EventbridgeSignerSetter.register7 s7 5 * * *D,A,A r c ^ d|v r)|d }t j d|d d| ||d< y y )Neventbridge_endpointzRewriting URL from r r )r r ro s r r z(EventbridgeSignerSetter.set_endpoint_url@ sA !W , 56H LL.ve}oT(L M $F5M -r c |j d }|y t | dk( r t d t s t d |j d }d }|'|j r t d |j rdg}| j =t d | }|j |k7 r t d | j || }n | j }||d < d |d< y )N EndpointIdr z+EndpointId must not be a zero length stringr zqUsing EndpointId requires an additional dependency. You will need to pip install botocore[crt] before proceeding.r z>FIPS is not supported with EventBridge multi-region endpoints.r9 https://z-EndpointId is not a valid hostname component.endpoint_variant_tagsr v4ar7 ) r r r& r r- r r r r rI _get_global_endpoint) r r r r0 r rF r rT resolved_endpoints r r z1EventbridgeSignerSetter.check_for_global_endpointF s ::l+ x=A 3A ,3 _- $ ''7. ,,)4 % % xz 23E~~)7G !% 9 90E !: ! !% 2 2 *;&' $ r c | j }|j | j }| | j }|j || }| | j }d| d| dS )Nr r z.endpoint.events.r )rc get_partition_for_regionr r r r )r r r r r{ r s r r z,EventbridgeSignerSetter._get_global_endpointr sv ** 55dllC //I 66 -B 7 11J(#4ZLBBr r r ) r r r r r r r r r r r r r r r . s) )* % *%X Cr r c * | yt | }|j j d r|j dvry|j j d }|d dk7 ry|dd }t | t t | k7 ryt d |D S ) zDoes the URL match the S3 Accelerate endpoint scheme? Virtual host naming style with bucket names in the netloc part of the URL are not allowed by this function. Fr )httpshttpr r r r6 r c 3 , K | ] }|t v y wr r r s r r z'is_s3_accelerate_url.<locals>.<genexpr> s C]q++]r )r ro r rq r r r r )r url_partsrT r s r is_s3_accelerate_urlr s { I $ $ !2 2 " "3 'E Qx?" !BKM =S]!3 44 C]C CCr c e Zd ZdZej j ej j dddd ZedfdZ d Z d Z d Z d Z d Zd ZddZy) JSONFileCachezJSON file cache. This provides a dict like interface that stores JSON serializable objects. The objects are serialized to JSON and stored in a file. These values can be retrieved at a later time. ~z.awsbotor Nc < || _ | | j }|| _ y r ) _working_dir_default_dumps_dumps)r working_dir dumps_funcs r r zJSONFileCache.__init__ s" ' ,,J r c D t j || j S )N)r )r dumpsr )r r s r r$ z JSONFileCache._default_dumps s zz#t'@'@AAr c b | j | }t j j | S r )_convert_cache_keyr r isfile)r r actual_keys r __contains__zJSONFileCache.__contains__ s% ,,Y7 ww~~j))r c | j | } t | 5 }t j | cddd S # 1 sw Y yxY w# t t f$ r t | w xY w)z Retrieve value from a cache key.N)r+ r r loadr rs KeyError)r r r- r s r __getitem__zJSONFileCache.__getitem__ sV ,,Y7 &j!Qyy| "!!$ &9% % &s% A = A AA A A$c | j | } t | }|j y # t $ r t | w xY wr )r+ r unlinkFileNotFoundErrorr1 )r r r- key_paths r __delitem__zJSONFileCache.__delitem__ sE ,,Y7 &J'H OO &9% % &s / Ac | j | } | j | }t j j | j s t j | j t j t j |t j t j z d d 5 }|j |j | d d d y # t t f$ r t d| w xY w# 1 sw Y y xY w)Nz3Value cannot be cached, must be JSON serializable: i w)r+ r% r rs r r isdirr# makedirsfdopenr O_WRONLYO_CREATtruncatewrite)r r r full_key file_contentr s r __setitem__zJSONFileCache.__setitem__ s **95 ;;u-L ww}}T . ./ KK)) * YY GGHbkkBJJ 6 > JJL GGL ! :& &&+W. s C! 6"D! C?D c ` t j j | j |dz }|S )Nz.json)r r r r# )r r full_paths r r+ z JSONFileCache._convert_cache_key s' GGLL!2!2I4GH r c l t |t r#|r|j S |j d S |S r r r s r r z"JSONFileCache._serialize_if_needed r r rS )r r r r r r expanduserr CACHE_DIRr r$ r. r2 r7 rC r+ r r r r r r s^ ""277<<VVW#MNI#, ! B*&&""r r c * | y| j d S )NFz--x-s3)r r s r is_s3express_bucketrJ s ~ ??8 $$r appmeshzapp-meshglobalacceleratorzglobal-acceleratorziotevents-dataziot-events-data ioteventsz iot-events iotwirelessz iot-wirelesskinesisanalyticsv2zkinesis-analytics-v2z lexv2-modelsz lex-models-v2z lexv2-runtimezlex-runtime-v2z sms-voicezpinpoint-sms-voice s3controlrM zservice-catalog-appregistry)rk rm rn rp zservicecatalog-appregistryrs rt )TrS r )z ISO-8859-1)r r r email.messagerX r r r loggingr r r r r rd r r ipaddressr pathlibr urllib.requestr r dateutil.parserr dateutil.tzr urllib3.exceptionsr r botocore.awsrequestbotocore.httpsessionbotocore.compatr r r r r r r r r r r r r r r r r r r r r botocore.exceptionsr r r! r" r# r$ r% r& r' r( r) r* r+ r, r- r. r/ r0 r1 r2 r3 r4 r5 getLoggerr r rT r r r SAFE_CHARSrR r` r/ r EVENT_ALIASESrS r r r r r r r r r r r r Exceptionr r r rV r r r r r r r r r r r r r r r r r r r% rM rO rV r r\ rd rj rg rn r r r r r r r r r r r r r_ rs rt r8 r r r" r] r r r r r r r r r r r r r r r r r r r rJ SERVICE_NAME_ALIASES.CLIENT_NAME_TO_HYPHENIZED_SERVICE_ID_OVERRIDESr r r <module>rc s / 3 1 $ $ * $ $ * ' 4 8 $#$ - 2 * 2::4 5 '- J J,J }J 9 J [ J - J 9J +J >J -J /J -J -J . J J *!J" #J$ *%J& ('J( O)J* -+J, 5-J. %/J0 01J2 '3J4 5J6 )7J8 +9J: ;J< 4=J> ?J@ -AJB #CJD (EJF UGJH @IJJ !KJL mMJN OJP QJR *SJT 5UJV /WJX +YJZ O[J\ .]J^ (_J` aJb )cJd @eJf #$DgJh 2iJj 1kJl ?mJn .oJp ,qJr wsJt <uJv /wJx =yJz z{J| (}J~ (J@ ,AJB :CJD 'EJF 7GJH 'IJJ '*,SJ \ %"**# -- ,"N"% #06@ < I ) @. @.F}k }@? ?D#K #L$: (, , +5 ##L $. '* D >&-`*Z &!6 7B1"" "(a a H5/ #: :6 < 6:=?@- B8;&-!$ *0 $ $D&] &R4 4nA A Hp+ p+f * 8R R jW Wt T; T;nB- B-JJ!9 JZt9 t9n *:.8 = 5 "6,% % BPC PCf DBB BJ% ,-@A <2,<2 -<2 9 <2 z <2 > <2 -<2 /<2 -<2 -<2 .<2 <2 *<2 O <2 % <2 -!<2" 0#<2$ '%<2& '<2( ))<2* ++<2, --<2. #/<20 (1<22 !3<24 m5<26 -7<28 9<2: *;<2< 5=<2> /?<2@ 'A<2B C<2D >E<2F +G<2H 0I<2J OK<2L .M<2N OO<2P (Q<2R %S<2T U<2V )W<2X #$DY<2Z @[<2\ 1]<2^ ?_<2` %a<2b =c<2d ze<2f (g<2h i<2j '7'"?'w<2 .r