Struct StsService 

pub struct StsService { /* private fields */ }

Implementations

impl StsService

pub fn new(state: SharedIamState) -> Self

pub fn with_snapshot_store(self, store: Arc<dyn SnapshotStore>) -> Self

pub fn with_snapshot_lock(self, lock: IamSnapshotLock) -> Self

Trait Implementations

impl AwsService for StsService

fn iam_enforceable(&self) -> bool

STS opts into Phase 1 IAM enforcement.

fn iam_action_for(&self, request: &AwsRequest) -> Option<IamAction>

STS actions operate on * per AWS — see https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html. AssumeRole* variants additionally carry a role ARN as the target resource so policies can scope by role name.

fn service_name(&self) -> &str

The AWS service identifier (e.g., “sqs”, “sns”, “sts”, “events”, “ssm”).

fn handle<'life0, 'async_trait>( &'life0 self, req: AwsRequest, ) -> Pin<Box<dyn Future<Output = Result<AwsResponse, AwsServiceError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Handle an incoming request.

fn supported_actions(&self) -> &[&str]

List of actions this service supports (for introspection).

fn iam_condition_keys_for( &self, _request: &AwsRequest, _action: &IamAction, ) -> BTreeMap<String, Vec<String>>

Derive service-specific IAM condition keys for an incoming request.

fn resource_tags_for( &self, _resource_arn: &str, ) -> Option<HashMap<String, String>>

Return the tags on the resource identified by resource_arn.

fn request_tags_from( &self, _request: &AwsRequest, _action: &str, ) -> Option<HashMap<String, String>>

Extract tags being sent in the request (e.g. on CreateQueue, PutObject with x-amz-tagging, TagResource).