File: //opt/cppython/lib/python3.8/site-packages/botocore/__pycache__/regions.cpython-38.pyc
U
KD�g�� � @ s d Z ddlZddlZddlZddlmZ ddlZddlmZm Z ddl
m Z m Z ddl
mZ ddlmZ ddlmZmZmZmZmZmZmZmZmZmZm Z m Z m Z m Z dd l m!Z!m"Z" e�#e$�Z%d
Z&d i iZ'G d d
� d
�Z(G dd� de(�Z)G dd� de*e�Z+G dd� d�Z,dS )z�Resolves regions and endpoints.
This module implements endpoint resolution, including resolving endpoints for a
given service and region and resolving the available endpoints for a service
in a specific AWS partition.
� N)�Enum)�UNSIGNED�
xform_name)�AUTH_TYPE_MAPS�HAS_CRT��CRT_SUPPORTED_AUTH_TYPES)�EndpointProvider)�EndpointProviderError�EndpointVariantError�!InvalidEndpointConfigurationError�InvalidHostLabelError�MissingDependencyException�
NoRegionError�ParamValidationError�$UnknownEndpointResolutionBuiltInName�UnknownRegionError� UnknownSignatureVersionError�*UnsupportedS3AccesspointConfigurationError� UnsupportedS3ConfigurationError� UnsupportedS3ControlArnError�&UnsupportedS3ControlConfigurationError)�ensure_boolean�instance_cachez {service}.{region}.{dnsSuffix}� endpointsc @ s, e Zd ZdZd dd�Zdd� Zd d d
�ZdS )
�BaseEndpointResolverz3Resolves regions and endpoints. Must be subclassed.Nc C s t �dS )a7 Resolves an endpoint for a service and region combination.
:type service_name: string
:param service_name: Name of the service to resolve an endpoint for
(e.g., s3)
:type region_name: string
:param region_name: Region/endpoint name to resolve (e.g., us-east-1)
if no region is provided, the first found partition-wide endpoint
will be used if available.
:rtype: dict
:return: Returns a dict containing the following keys:
- partition: (string, required) Resolved partition name
- endpointName: (string, required) Resolved endpoint name
- hostname: (string, required) Hostname to use for this endpoint
- sslCommonName: (string) sslCommonName to use for this endpoint.
- credentialScope: (dict) Signature version 4 credential scope
- region: (string) region name override when signing.
- service: (string) service name override when signing.
- signatureVersions: (list<string>) A list of possible signature
versions, including s3, v4, v2, and s3v4
- protocols: (list<string>) A list of supported protocols
(e.g., http, https)
- ...: Other keys may be included as well based on the metadata
N��NotImplementedError)�self� service_name� region_name� r! �=/opt/cppython/lib/python3.8/site-packages/botocore/regions.py�construct_endpoint9 s z'BaseEndpointResolver.construct_endpointc C s t �dS )z�Lists the partitions available to the endpoint resolver.
:return: Returns a list of partition names (e.g., ["aws", "aws-cn"]).
Nr �r r! r! r" �get_available_partitionsV s z-BaseEndpointResolver.get_available_partitions�awsFc C s t �dS )a� Lists the endpoint names of a particular partition.
:type service_name: string
:param service_name: Name of a service to list endpoint for (e.g., s3)
:type partition_name: string
:param partition_name: Name of the partition to limit endpoints to.
(e.g., aws for the public AWS endpoints, aws-cn for AWS China
endpoints, aws-us-gov for AWS GovCloud (US) Endpoints, etc.
:type allow_non_regional: bool
:param allow_non_regional: Set to True to include endpoints that are
not regional endpoints (e.g., s3-external-1,
fips-us-gov-west-1, etc).
:return: Returns a list of endpoint names (e.g., ["us-east-1"]).
Nr )r r �partition_name�allow_non_regionalr! r! r" �get_available_endpoints] s z,BaseEndpointResolver.get_available_endpoints)N)r& F)�__name__�
__module__� __qualname__�__doc__r# r% r) r! r! r! r" r 6 s
�r c @ s� e Zd ZdZddgZd%dd�Zd&dd �Zd
d � Zd'd
d�Zd(dd�Z d)dd�Z
dd� Z d*dd�Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd S )+�EndpointResolverz7Resolves endpoints based on partition endpoint metadatazaws-isoz aws-iso-bFc C s d|krt d��|| _|| _dS )a
:type endpoint_data: dict
:param endpoint_data: A dict of partition data.
:type uses_builtin_data: boolean
:param uses_builtin_data: Whether the endpoint data originates in the
package's data directory.
�
partitionsz%Missing "partitions" in endpoint dataN)�
ValueError�_endpoint_data�uses_builtin_data)r �
endpoint_datar2 r! r! r" �__init__x s zEndpointResolver.__init__r& c C sB | j d D ]2}|d |kr q
|d }||kr.q
|| d S d S )Nr/ � partition�servicesr )r1 )r r r' r5 r6 r! r! r" �get_service_endpoints_data� s z+EndpointResolver.get_service_endpoints_datac C s& g }| j d D ]}|�|d � q|S )Nr/ r5 )r1 �append)r �resultr5 r! r! r" r% � s z)EndpointResolver.get_available_partitionsNc C s� g }| j d D ]�}|d |kr q|d }||kr2q|| d }|D ]J} | |d k}
|rz|
rz| �|| |�} | r�|�| � qB|s�|
rB|�| � qBq|S )Nr/ r5 r6 r �regions)r1 �_retrieve_variant_datar8 ) r r r' r( �endpoint_variant_tagsr9 r5 r6 Zservice_endpoints�
endpoint_nameZis_regional_endpointZ variant_datar! r! r" r) � s( � z(EndpointResolver.get_available_endpointsc C s\ | j d D ]L}|d |kr
|rJ| �|�d�|�}|rVd|krV|d S q
|d S q
d S )Nr/ r5 �defaults� dnsSuffix)r1 r; �get)r r' r< r5 �variantr! r! r" �get_partition_dns_suffix� s � z)EndpointResolver.get_partition_dns_suffixc C s� |dkr|r|d krd}|d k rhd }| j d D ]}|d |kr.|}q.|d k rd| �|||||d�}|S d S | j d D ]6}|r�|d | jkr�qr| �|||||�}|rr| S qrd S )N�s3z us-east-1r/ r5 T)r1 �_endpoint_for_partition�!_UNSUPPORTED_DUALSTACK_PARTITIONS) r r r r' �use_dualstack_endpoint�use_fips_endpointZvalid_partitionr5 r9 r! r! r" r# � sN ��� ����z#EndpointResolver.construct_endpointc C s8 | j d D ] }| �||�r
|d S q
t|dd��d S )Nr/ r5 z,No partition found for provided region_name.)r � error_msg)r1 �
_region_matchr )r r r5 r! r! r" �get_partition_for_region� s �z)EndpointResolver.get_partition_for_regionc
C s� |d }|r0|| j kr0d|� d�}tdg|d��|d �|t�} |d kr`d| krZ| d }nt� �||| |||d�}
|| d kr�| jf |
�S | �||�s�|r�| �d�} | �d
d �} | r�| s�t�d ||| � | |
d
< | jf |
�S t�d||� | jf |
�S d S )Nr5 z4Dualstack endpoints are currently not supported for z
partition� dualstack��tagsrH r6 ZpartitionEndpoint)r5 r � service_datar= rF rG r ZisRegionalizedTz'Using partition endpoint for %s, %s: %sr= z*Creating a regex based endpoint for %s, %s) rE r r@ �DEFAULT_SERVICE_DATAr �_resolverI �LOG�debug)
r r5 r r rF rG Zforce_partitionr' rH rN Zresolve_kwargsZpartition_endpointZis_regionalizedr! r! r" rD � sV ��
� �
�
� �z(EndpointResolver._endpoint_for_partitionc C s0 ||d krdS d|kr,t �|d ��|�S dS )Nr: TZ regionRegexF)�re�compile�match)r r5 r r! r! r" rI < s
z EndpointResolver._region_matchc C s> |� dg �}|D ](}t|d �t|�kr|�� }| S qd S )N�variantsrM )r@ �set�copy)r r3 rM rV rA r9 r! r! r" r; C s
z'EndpointResolver._retrieve_variant_datac C s$ g }|r|� d� |r |� d� |S )NrK Zfips)r8 )r rF rG rM r! r! r" �_create_tag_listJ s
z!EndpointResolver._create_tag_listc C s4 i }|||fD ] }| � ||�}|r| �||� q|S �N)r; � _merge_keys)r rM r3 �service_defaults�partition_defaultsr9 rV rA r! r! r" �_resolve_variantR s z!EndpointResolver._resolve_variantc
C s& |� di �� |i �}|� d�r.t�d|� �� |� di �}|� di �} | �||�}
|
r�| �|
||| �} | i kr�d|� d|� �} t|
| d��| �|| � n|} d| kr�|d | d< |d | d < || d
< | �|| � | �| | � | �|| d ||| d �| d < d | k�r"| �|| d ||| d �| d < | S )
Nr �
deprecatedz3Client is configured with the deprecated endpoint: r> z Endpoint does not exist for z in region rL r? r5 Z endpointName�hostnameZ
sslCommonName)r@ rQ �warningrY r^ r r[ �_expand_template)
r r5 r rN r= rF rG r3 r\ r] rM r9 rH r! r! r" rP \ s\ �
� �� �
�zEndpointResolver._resolvec C s" |D ]}||kr|| ||< qd S rZ r! )r � from_datar9 �keyr! r! r" r[ � s z EndpointResolver._merge_keysc C s |j |||d�S )N)Zservice�regionr? )�format)r r5 �templater r= r? r! r! r" rb � s
�z!EndpointResolver._expand_template)F)r& )r& FN)N)NNFF)F)r* r+ r, r- rE r4 r7 r% r) rB r# rJ rD rI r; rY r^ rP r[ rb r! r! r! r" r. s s4
�
�
�
2 �
A
Ar. c @ s@ e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdS )�EndpointResolverBuiltinsz AWS::Regionz AWS::UseFIPSzAWS::UseDualStackzAWS::STS::UseGlobalEndpointzAWS::S3::UseGlobalEndpointzAWS::S3::AcceleratezAWS::S3::ForcePathStylezAWS::S3::UseArnRegionz AWS::S3Control::UseArnRegionz'AWS::S3::DisableMultiRegionAccessPointsz
SDK::EndpointzAWS::Auth::AccountIdz AWS::Auth::AccountIdEndpointModeN)r* r+ r, Z
AWS_REGIONZ AWS_USE_FIPSZAWS_USE_DUALSTACKZAWS_STS_USE_GLOBAL_ENDPOINTZAWS_S3_USE_GLOBAL_ENDPOINTZAWS_S3_ACCELERATEZAWS_S3_FORCE_PATH_STYLEZAWS_S3_USE_ARN_REGIONZ AWS_S3CONTROL_USE_ARN_REGIONZAWS_S3_DISABLE_MRAPZ SDK_ENDPOINTZ
ACCOUNT_IDZACCOUNT_ID_ENDPOINT_MODEr! r! r! r" rh � s rh c @ s� e Zd ZdZd&dd�Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dd� Z e
dd� �Ze
dd� �Ze
dd� �Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� ZdS )'�EndpointRulesetResolverz5Resolves endpoints using a service's endpoint rulesetTNc C sH t ||d�| _| jjj| _|| _|| _|| _|| _|| _ || _
i | _ d S )N)Z ruleset_data�partition_data) r � _providerZruleset�
parameters�_param_definitions�_service_model� _builtins�_client_context�_event_emitter�_use_ssl�_requested_auth_schemeZ_instance_cache) r Zendpoint_ruleset_datarj Z
service_model�builtinsZclient_contextZ
event_emitterZuse_sslZrequested_auth_schemer! r! r" r4 � s � z EndpointRulesetResolver.__init__c
C s� |dkr i }|dkri }| � |||�}t�d|� �� z| jjf |�}W n@ tk
r� } z"| �||�}|dkrr� n||�W 5 d}~X Y nX t�d|j� �� | js�|j� d�r�|j
d|jdd� � �d�}|j
dd � |j � � D �d
�}|S ) zAInvokes the provider with params defined in the service's rulesetNz+Calling endpoint provider with parameters: zEndpoint provider result: zhttps://zhttp://� )�urlc S s i | ]\}}||d �qS )r r! )�.0rd �valr! r! r" �
<dictcomp> s z>EndpointRulesetResolver.construct_endpoint.<locals>.<dictcomp>)�headers)
�_get_provider_paramsrQ rR rk Zresolve_endpointr
�#ruleset_error_to_botocore_exceptionrv rr �
startswith�_replacerz �items)r �operation_model� call_args�request_context�provider_paramsZprovider_result�exZbotocore_exceptionr! r! r" r# � sF ��� ����z*EndpointRulesetResolver.construct_endpointc C sl i }| � |||�}| j�� D ]J\}}| j|||d�}|dkrV|jdk rV| j|j|d�}|dk r |||< q |S )a� Resolve a value for each parameter defined in the service's ruleset
The resolution order for parameter values is:
1. Operation-specific static context values from the service definition
2. Operation-specific dynamic context values from API parameters
3. Client-specific context parameters
4. Built-in values such as region, FIPS usage, ...
)�
param_namer� r� N)� builtin_namert )�_get_customized_builtinsrm r �_resolve_param_from_context�builtin�_resolve_param_as_builtin) r r� r� r� r� �customized_builtinsr� Z param_defZ param_valr! r! r" r{ s( ���
z,EndpointRulesetResolver._get_provider_paramsc C sV | � ||�}|d k r|S | �|||�}|d k r2|S | �|||�}|d k rL|S | �|�S rZ )�&_resolve_param_as_static_context_param�'_resolve_param_as_dynamic_context_param�)_resolve_param_as_operation_context_param�&_resolve_param_as_client_context_param)r r� r� r� ZstaticZdynamicZoperation_context_paramsr! r! r" r� ; s, � � ��z3EndpointRulesetResolver._resolve_param_from_contextc C s | � |�}|�|�S rZ )�_get_static_context_paramsr@ )r r� r� Zstatic_ctx_paramsr! r! r" r� Q s
z>EndpointRulesetResolver._resolve_param_as_static_context_paramc C s( | � |�}||kr$|| }|�|�S d S rZ )�_get_dynamic_context_paramsr@ )r r� r� r� Zdynamic_ctx_params� member_namer! r! r" r� W s
z?EndpointRulesetResolver._resolve_param_as_dynamic_context_paramc C s( | � � }||kr$|| }| j�|�S d S rZ )�_get_client_context_paramsrp r@ )r r� Zclient_ctx_paramsZclient_ctx_varnamer! r! r" r� _ s z>EndpointRulesetResolver._resolve_param_as_client_context_paramc C s* |j }||kr&|| d }t�||�S d S )N�path)Z operation_context_parameters�jmespath�search)r r� r� r� Zoperation_ctx_paramsr� r! r! r" r� e s zAEndpointRulesetResolver._resolve_param_as_operation_context_paramc C s4 |t j�� krt|d��|�|�}t|�r0|� S |S )N��name)rh � __members__�valuesr r@ �callable)r r� rt r� r! r! r" r� m s
z1EndpointRulesetResolver._resolve_param_as_builtinc C s dd� |j D �S )z=Mapping of param names to static param value for an operationc S s i | ]}|j |j�qS r! )r� �value�rw �paramr! r! r" ry x s � zFEndpointRulesetResolver._get_static_context_params.<locals>.<dictcomp>)Zstatic_context_parameters�r r� r! r! r" r� u s �z2EndpointRulesetResolver._get_static_context_paramsc C s dd� |j D �S )z7Mapping of param names to member names for an operationc S s i | ]}|j |j�qS r! )r� r� r� r! r! r" ry � s � zGEndpointRulesetResolver._get_dynamic_context_params.<locals>.<dictcomp>)Zcontext_parametersr� r! r! r" r� } s �z3EndpointRulesetResolver._get_dynamic_context_paramsc C s dd� | j jD �S )z7Mapping of param names to client configuration variablec S s i | ]}|j t|j ��qS r! )r� r r� r! r! r" ry � s � zFEndpointRulesetResolver._get_client_context_params.<locals>.<dictcomp>)rn Zclient_context_parametersr$ r! r! r" r� � s �z2EndpointRulesetResolver._get_client_context_paramsc C s8 | j j�� }t�| j�}| jjd|� �||||d� |S )Nzbefore-endpoint-resolution.)rt �model�params�context)rn �
service_idZ hyphenizerX ro rq �emit)r r� r� r� r� r� r! r! r" r� � s �z0EndpointRulesetResolver._get_customized_builtinsc s� t |t�rt|�dkr td��t�dd�dd� |D ��� j� � jtkrPdi fS � fdd�|D �}� jd k r�z t � fd
d �|D ��\}}W n t
k
r� d i f Y S X n~zt d d � |D ��\}}W nb t
k
�r& d
}dd� |D �}t �s t dd � |D ��}|�rt
dd��ntd�|�d��Y nX i }d|k�rD|d |d< n.d|k�rrt|d �dk�rrd�|d �|d< d|k�r�|j|d d� d|k�r�t|d �|d< t�d|d ||� ||fS ) a� Convert an Endpoint's authSchemes property to a signing_context dict
:type auth_schemes: list
:param auth_schemes: A list of dictionaries taken from the
``authSchemes`` property of an Endpoint object returned by
``EndpointProvider``.
:rtype: str, dict
:return: Tuple of auth type string (to be used in
``request_context['auth_type']``) and signing context dict (for use
in ``request_context['signing']``).
r z&auth_schemes must be a non-empty list.z_Selecting from endpoint provider's list of auth schemes: %s. User selected auth scheme is: "%s"z, c S s g | ]}d |� d�� d ��qS )�"r� )r@ �rw �sr! r! r" �
<listcomp>� s zGEndpointRulesetResolver.auth_schemes_to_signing_ctx.<locals>.<listcomp>�nonec s" g | ]}|d � � |d �i��qS r� )�_strip_sig_prefix�rw �schemer$ r! r" r� � s �Nc 3 s* | ]"}� � � j|d �r� j|fV qdS �r� N)�._does_botocore_authname_match_ruleset_authnamers r� r$ r! r" � <genexpr>� s ��zFEndpointRulesetResolver.auth_schemes_to_signing_ctx.<locals>.<genexpr>c s s& | ] }|d t kr|d |fV qdS r� )r r� r! r! r" r� � s �Fc S s g | ] }|d �qS r� r! r� r! r! r" r� � s c s s | ]}|t kV qd S rZ r r� r! r! r" r� � s �zbThis operation requires an additional dependency. Use pip install botocore[crt] before proceeding.��msg)Zsignature_versionZ
signingRegionre ZsigningRegionSet�,Z signingName)Z signing_nameZdisableDoubleEncodingz?Selected auth type "%s" as "%s" with signing context params: %sr� )�
isinstance�list�len� TypeErrorrQ rR �joinrs r �next�
StopIterationr �anyr r �updater )r Z auth_schemesr� r� Zfixable_with_crtZauth_type_optionsZsigning_contextr! r$ r" �auth_schemes_to_signing_ctx� st
�
�
�����
�
��z3EndpointRulesetResolver.auth_schemes_to_signing_ctxc C s |� d�r|dd� S |S )z6Normalize auth type names by removing any "sig" prefix�sig� N)r} )r Z auth_namer! r! r" r� � s z)EndpointRulesetResolver._strip_sig_prefixc C s> | � |�}|�d�d }|dkr6|�d�r6|dd� }||kS )a\
Whether a valid string provided as signature_version parameter for
client construction refers to the same auth methods as a string
returned by the endpoint ruleset provider. This accounts for:
* The ruleset prefixes auth names with "sig"
* The s3 and s3control rulesets don't distinguish between v4[a] and
s3v4[a] signers
* The v2, v3, and HMAC v1 based signers (s3, s3-*) are botocore legacy
features and do not exist in the rulesets
* Only characters up to the first dash are considered
Example matches:
* v4, sigv4
* v4, v4
* s3v4, sigv4
* s3v7, sigv7 (hypothetical example)
* s3v4a, sigv4a
* s3v4-query, sigv4
Example mismatches:
* v4a, sigv4
* s3, sigv4
* s3-presign-post, sigv4
�-r rC � N)r� �splitr} )r ZbotonameZrsnamer! r! r" r� s
zFEndpointRulesetResolver._does_botocore_authname_match_ruleset_authnamec C sz |j �d�}|dkrdS |�d�rXz|�d�d }W n tk
rL |}Y nX t|d�S | jj}|dkr�|dksx|d kr�t|d
�S |�d �s�|�d �s�|�d
�s�|�d�s�|�d�s�|�d�r�t |d
�S |�
� �d�r�t |d�S |dk�rB|�d��r |�d�}t ||d�S |�d��s$|�d��r.t
|d
�S |dk�rBt |d�S |dk�rv|�d��rbt|d
�S |dk�rvt|d
�S dS )z�Attempts to translate ruleset errors to pre-existing botocore
exception types by string matching exception strings.
r� NzInvalid region in ARN: �`� )�labelrC z/S3 Object Lambda does not support S3 Acceleratez#Accelerate cannot be used with FIPSr� z S3 Outposts does not supportzS3 MRAP does not supportz!S3 Object Lambda does not supportz Access Points do not supportzInvalid configuration:z#Client was configured for partitionz invalid arn:)�reportZ s3controlz Invalid ARN:ZBucket)�arnr� z!AccountId is required but not set�eventszUInvalid Configuration: FIPS is not supported with EventBridge multi-region endpoints.z&EndpointId must be a valid host label.)�kwargsr@ r} r� �
IndexErrorr
rn r r r �lowerr r r r )r Zruleset_exceptionr� r� r� r r� r! r! r" r| # sb
��
������
�
�
z;EndpointRulesetResolver.ruleset_error_to_botocore_exception)TN)r* r+ r, r- r4 r# r{ r� r� r� r� r� r� r r� r� r� r� r� r� r� r| r! r! r! r" ri � s.
�
2!
c ri )-r- rX �loggingrS �enumr r� Zbotocorer r Z
botocore.authr r Z botocore.crtr Zbotocore.endpoint_providerr Zbotocore.exceptionsr
r r r
r r r r r r r r r r Zbotocore.utilsr r � getLoggerr* rQ ZDEFAULT_URI_TEMPLATErO r r. �strrh ri r! r! r! r" �<module>
s( @
= 9#