wami 0.17.1

Who Am I - Multicloud Identity, IAM, STS, and SSO operations library for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

# Service Credential Module

IAM service-specific credential resource management for WAMI. This module provides
strongly typed representations, builders, and request types for managing
service-specific credentials used by AWS services like CodeCommit and IoT.

## Overview

Service-specific credentials are long-term credentials generated for specific AWS
services that don't support regular access keys. This module provides:

- **Model Types** – `ServiceSpecificCredential` and `ServiceSpecificCredentialMetadata`
  for representing service credential resources
- **Builder Functions** – Context-aware builders that generate consistent WAMI ARNs
- **Request Types** – DTOs for service API operations

## Models

### `ServiceSpecificCredential`

Represents a service-specific credential with the following fields:

- `user_name` – The IAM user associated with the credential
- `service_specific_credential_id` – Unique identifier for the credential
- `service_user_name` – Generated username for the service
- `service_password` – Generated password (only provided during creation)
- `service_name` – Name of the service (e.g., "codecommit.amazonaws.com")
- `create_date` – Timestamp when the credential was created
- `status` – Status of the credential (`Active` or `Inactive`)
- `wami_arn` – WAMI ARN for cross-provider identification
- `providers` – List of cloud provider configurations

### `ServiceSpecificCredentialMetadata`

Metadata about a service-specific credential (without the password):

- `user_name` – The IAM user associated with the credential
- `service_specific_credential_id` – Unique identifier for the credential
- `service_user_name` – Generated username for the service
- `service_name` – Name of the service
- `create_date` – Timestamp when the credential was created
- `status` – Status of the credential

## Builder Functions

### `build_service_credential`

Creates a new `ServiceSpecificCredential` with context-based identifiers:

```rust
use wami_core::context::WamiContext;
use wami_credentials::service_credential::build_service_credential;

let context = WamiContext::builder()
    .instance_id("123456789012")
    .tenant_path(wami_core::arn::TenantPath::single(0))
    .caller_arn(/* ... */)
    .build()
    .unwrap();

let credential = build_service_credential(
    "alice".into(),
    "codecommit.amazonaws.com".into(),
    &context,
)?;
```

## Request Types

The module provides request and response types for service credential operations:
- `CreateServiceSpecificCredentialRequest` – Request to create a service credential
- `CreateServiceSpecificCredentialResponse` – Response containing the created credential with password
- `ListServiceSpecificCredentialsRequest` – Request to list service credentials for a user
- `ListServiceSpecificCredentialsResponse` – Response containing a list of credential metadata
- `UpdateServiceSpecificCredentialRequest` – Request to update credential status
- `DeleteServiceSpecificCredentialRequest` – Request to delete a service credential
- `ResetServiceSpecificCredentialRequest` – Request to reset a credential's password
- `ResetServiceSpecificCredentialResponse` – Response containing the credential with new password

## Usage Example

```rust
use wami_core::context::WamiContext;
use wami_credentials::service_credential::build_service_credential;
use wami_credentials::ServiceSpecificCredential;

let context = WamiContext::builder()
    .instance_id("123456789012")
    .tenant_path(wami_core::arn::TenantPath::single(0))
    .caller_arn(
        wami_core::arn::WamiArn::builder()
            .service(wami_core::arn::Service::Iam)
            .tenant(0)
            .wami_instance("123456789012")
            .resource("user", "admin")
            .build()
            .unwrap(),
    )
    .is_root(false)
    .build()
    .unwrap();

// Create a new service-specific credential for CodeCommit
let credential = build_service_credential(
    "alice".into(),
    "codecommit.amazonaws.com".into(),
    &context,
)?;

assert_eq!(credential.user_name, "alice");
assert_eq!(credential.service_name, "codecommit.amazonaws.com");
assert_eq!(credential.status, "Active");
assert!(credential.service_password.is_some()); // Only available on creation
assert!(credential.wami_arn.to_string().contains("service-credential"));
```