ڰjp SSKrSSKrSSKrSSKrSSKrSSKrSSKrSSKrSSK r SSK r SSK r SSK r SSK r SSKrSSKrSSKrSSKJr SSKJr SSKJr SSKJrJr SSKrSSKJr SSKJr SSKrSSK rSSK!rSSK"J#r#J$r$J%r%J&r&J'r'J(r(J)r)J*r*J+r+J,r,J-r-J.r.J/r/J0r0J1r1J2r2J3r3J4r4J5r5J6r6J7r7J8r8 SS K9J:r:J;r;Jr>J?r?J@r@JArAJBrBJCrCJDrDJErEJFrFJGrGJHrHJIrIJJrJJKrKJLrLJMrMJNrNJOrOJPrP SS KQJRrRJSrSJTrT \R"\V5rWS rXS rYS rZSr[Sr\\ R"S5r^\I\>\<\=4r_S/r`0SS_SS_SS_SS_SS_SS_SS_S S!_S"S#_S$S%_S&S'_S(S)_S*S+_S,S-_S.S/_S0S1_S2S3_0S4S5_S6S7_S8S9_S:S;_SS?_S@SA_SBSC_SDSE_SFSG_SHSI_SJSG_SKSL_SMSN_SOSP_SQSR_SSST_E0SUST_SVS/_SWS1_SXSY_SZS[_S\S]_S^S__S`Sa_SbSc_SdSP_SeSf_SgSh_SiSh_SjSk_SlS]_SmSn_SoSp_ESqSrSsS_StSuSvSwSxSySySzSASqS{.Era\ R"S|\ RS}9rcS~rdSreSrfSrgSrhSriSrjSrkSrlSrmGSSjrnSroSrp"SS\q5rr"SS\q5rs"SS5rt"SS\t5ru"SS5rv"SS\t5rwGSSjrxSry\z4Sjr{Sr|\\4Sjr}\\4Sjr~SrSrSrSrGSSjrGSSjrSrSr"SS5r"SS5rSrSrSrSrSrSrGSSjrGSSjrSrSrSrSrSrGSSjrGSSjrSrSr"SS5r"SS\5r"SS5r"SS5r"SS5r"SS\5r"SS5r"SS5r"SS5r"SS5r"SS5r"SS\5r"SS5rSrSrSrGSSjrSrSrSrSrSrSrSrSrSr"SS5r"SS5r"SS5rSr"SS5rSrSrGSSjrSrSSt0r0SS_SS_SS_SS_S S!_S"S#_S$S%_S&S'_S(S)_S*S+_S,S-_S4S5_S8S9_S6S7_S:S;_SS?_0SS_S@SA_SBSC_SJSG_SKSL_SQSR_SSST_SS_SVS/_SWS1_SS_SXSY_SS_SZS[_S\S]_SS_S^S__E0SS_S`Sa_SbSc_SeSf_SdSP_SiSh_SjSk_SS_SSq_GSSr_GSSs_GSGS_GSSu_GSSv_GSSw_GSSx_GSGS _ESySzGS .ErGS r"GS GS 5rg(N)datetime) ip_address)Path) getproxies proxy_bypass)tzutc)LocationParseError)HAS_CRTHEX_PATIPV4_PATIPV4_REIPV6_ADDRZ_PAT IPV6_ADDRZ_REIPV6_PATLS32_PAT MD5_AVAILABLEUNRESERVED_PATUNSAFE_URL_CHARS ZONE_ID_PAT OrderedDictget_current_datetimeget_md5get_tzinfo_optionsjsonquoteurlparseurlsplit urlunsplit zip_longest) ClientErrorConfigNotFoundConnectionClosedErrorConnectTimeoutErrorEndpointConnectionErrorHTTPClientErrorInvalidDNSNameError!InvalidEndpointConfigurationErrorInvalidExpressionErrorInvalidHostLabelErrorInvalidIMDSEndpointErrorInvalidIMDSEndpointModeErrorInvalidRegionErrorMetadataRetrievalErrorMissingDependencyExceptionReadTimeoutErrorSSOTokenLoadErrorUnsupportedOutpostResourceError*UnsupportedS3AccesspointConfigurationErrorUnsupportedS3ArnErrorUnsupportedS3ConfigurationErrorUnsupportedS3ControlArnError&UnsupportedS3ControlConfigurationError) PluginContextreset_plugin_contextset_plugin_contextzhttp://169.254.169.254/zhttp://[fd00:ec2::254]/)ipv4ipv6z-._~z-z0-9][a-z0-9\-]*[a-z0-9] dualstackzapi.mediatailor mediatailorz api.pricingpricingz api.sagemaker sagemaker apigatewayz api-gatewayzapplication-autoscalingzapplication-auto-scaling appstream2 appstream autoscalingz auto-scalingzautoscaling-planszauto-scaling-planscez cost-explorer cloudhsmv2z cloudhsm-v2cloudsearchdomainzcloudsearch-domainz cognito-idpzcognito-identity-providerconfigzconfig-servicecurzcost-and-usage-report-servicezdata.iotziot-data-planez data.jobs.iotziot-jobs-data-planezdata.mediastorezmediastore-data datapipelinez data-pipeline devicefarmz device-farm directconnectzdirect-connect discoveryzapplication-discovery-servicedmszdatabase-migration-servicedszdirectory-servicedynamodbstreamszdynamodb-streamselasticbeanstalkzelastic-beanstalkelasticfilesystemefselasticloadbalancingzelastic-load-balancingelasticmapreduceemrelbelbv2zelastic-load-balancing-v2emailseszentitlement.marketplacezmarketplace-entitlement-serviceeszelasticsearch-serviceevents eventbridgezcloudwatch-eventsziot-dataz iot-jobs-datakinesisanalyticszkinesis-analytics kinesisvideoz kinesis-videoz lex-modelszlex-model-building-servicez lex-runtimezlex-runtime-servicelogszcloudwatch-logsmachinelearningzmachine-learningzmarketplace-entitlementmarketplacecommerceanalyticszmarketplace-commerce-analyticszmetering.marketplacezmarketplace-meteringmeteringmarketplacemghz migration-hubz models.lex monitoring cloudwatchzmturk-requestermturkzresource-groups-tagging-apizroute-53zroute-53-domainszsagemaker-runtimesimpledbzsecrets-managerserverlessapplicationrepositoryzservice-catalogsfnzstorage-gateway)resourcegroupstaggingapiroute53route53domainsz runtime.lexruntime.sagemakersdbsecretsmanagerserverlessreposervicecatalogstates stepfunctionsstoragegatewayzstreams.dynamodbtaggingz^X-Amz-Checksum-([a-z0-9]*)$)flags)rz rest-jsonzrest-xmlzsmithy-rpc-v2-cborqueryec2c[U[5(aU$[U[5(aUR5S:H$g)zvEnsures a boolean value if a string or boolean is provided For strings, the value for True/False is case insensitive trueF) isinstanceboolstrlowervals K/home/mande/repo/quber/.venv/lib/python3.13/site-packages/botocore/utils.pyensure_booleanrs7 #t C  yy{f$$cURS5nUb0UR5nU[;aU[S.n[S0UD6eU$URS5(agg)z~Resolving IMDS endpoint mode to either IPv6 or IPv4. ec2_metadata_service_endpoint_mode takes precedence over imds_use_ipv6. "ec2_metadata_service_endpoint_mode)mode valid_modes imds_use_ipv6r<r;)get_config_variablerMETADATA_ENDPOINT_MODESr+)session endpoint_modelendpoint_modeerror_msg_kwargss rresolve_imds_endpoint_modersr //,M &,,. !8 8%6  /B1AB B  $ $_ 5 5 rc[US5=(aW URRSS5=(a4 URRS5S:H=(a URS:H$)zDetermines if the provided shape is the special header type jsonvalue. :type shape: botocore.shape :param shape: Shape to be inspected for the jsonvalue trait. :return: True if this type is a jsonvalue, False otherwise :rtype: Bool serialization jsonvalueFlocationheaderstring)hasattrrget type_name)shapes ris_json_value_headerrs_ ' (    # #K 7 (    # #J /8 ; ( OOx ' rcUcg[U[RR5(aX;$UR 5UR 5Vs/sHo"R 5PM sn;$s snf)z&Case-insensitive check for header key.F)r|botocore awsrequest HeadersDictrkeys) header_nameheaderskeys r has_headerrs] GX00<< = =%%  "glln&Mnsyy{n&MMM&MsA1cURRSURRSUR55nURSS5nURSS5n[R "SSU5nU$)znReturns the module name for a service This is the value used in both the documentation and client class name serviceAbbreviationserviceFullNameAmazonAWSz\W+)metadatar service_namereplaceresub) service_modelnames rget_service_module_namer su  ! ! % %"" }99  D <<" %D <<r "D 66&"d #D Krc(U(dg[U5$)N/)remove_dot_segmentspaths rnormalize_url_pathrs  t $$rc"UcU$[U5$)zHReturns None if val is None, otherwise ensure value converted to boolean)rrs rnormalize_booleanr s { c""rcDU(dgURS5n/nUHFnU(dM US:wdMUS:XaU(aUR5 M3M5URU5 MH USS:XaSnOSnUSS:Xa U(aSnOSnUSRU5-U-$)Nrr.z..r)splitpopappendjoin)url input_url output_listxfirstlasts rrr)s  #IK  1cDyOO%""1%  1v} 2w#~+ 388K( (4 //rc^U(aUS:Xa [US9eSHnX;dM [US9e g)Nr expression)[]*)r()rinvalids rvalidate_jmespath_for_setrDs4 s*$ ;;"  (J? ?#rcU(a [U5 URSS5nUS[U5S:aUSOSpeU(d [US9eU(aXP;a0X'[ XXbSS9$X U'g)Nrr:rrrF)is_first)rrlenr(set_value_from_jmespath)sourcervaluerbits current_key remainders rrrOs~ !*-   C #D!!WTQd1gB $ ;;  $#%F &  E   ;rcRURS05nURS5S:HnU$)z9Determine if request is intended for an MRAP accesspoint.s3_accesspointregionrr)contextr is_globals ris_global_accesspointrms.[[!126N""8,2I rc [SS9n[U5nUR"U40UD6[U5 $![U5 f=f)NDISABLED)plugins)r7r9 create_clientr8)rrkwargsctxtokens rcreate_nested_clientrtsB  +C s #E$$$\F..x@ ;**//#C GG/ 9 ? ? AV K "(,F!G% ,,;;MM'7<  rcUR$r)rrs r get_base_urlIMDSFetcher.get_base_urls ~~rcXUc0nURS5S:HnURS5nU(aU(a[RS5 SnU[:waUnOU(aUnOU(a[nO[n[R SU5 [ U5(d [US9eU$)Nrr<ec2_metadata_service_endpointzFCustom endpoint and IMDS_USE_IPV6 are both set. Using custom endpoint.zIMDS ENDPOINT: %s)endpoint)rloggerwarningMETADATA_BASE_URLMETADATA_BASE_URL_IPv6debug is_valid_urir*)rrrH requires_ipv6custom_metadata_endpointchosen_base_urls rrIMDSFetcher._select_base_urls >F JJ; < F $*::.M#N 5 NNX  ( (&O %6O 4O/O (/:O,,*OD DrcSnUR(a"URRS5(dSnURUU3$)Nrr)rendswith)rrseps r_construct_urlIMDSFetcher._construct_urls? >>$.."9"9#">">C..!#tf--rc UR5 URUR5nSUR0nUR U5 [ R RSXS9n[UR5HxnURRUR55nURS:XaURs $URS;a gURS;a [U5eMz g![ a  g["a!n[$R'SUUSS 9 SnAMSnAf[(a=n[+UR,R/S 5[05(a [3XS 9eeSnAff=f) Nz$x-aws-ec2-metadata-token-ttl-secondsPUTmethodrr)iii)iOCaught retryable HTTP exception while making metadata service request to %s: %sTexc_infoerror)rr6)_assert_enabledr, _TOKEN_PATH _TOKEN_TTL_add_user_agentrr AWSRequestrangerrsendprepare status_codetextrr/RETRYABLE_HTTP_ERRORSrr#r%r|rrr r*)rrrriresponsees r_fetch_metadata_token!IMDSFetcher._fetch_metadata_tokensW !!$"2"23 2DOO  W%%%00c1 t))*A ==--goo.?@''3.#==())_<))V3-g664+0$ (  0! # ahhll735GHH2CII  s7AC; C;C;; E7 E7D-- E7:8E22E7c *UR5 U(dUR5 Uc URnURU5n0nUbX5S'UR U5 [ UR 5H\n[RRSXES9nURRUR55nU"U5(dUs $M^ UR!5e![a!n [RSUU SS9 Sn A MSn A ff=f)aMake a get request to the Instance Metadata Service. :type url_path: str :param url_path: The path component of the URL to make a get request. This arg is appended to the base_url that was provided in the initializer. :type retry_func: callable :param retry_func: A function that takes the response as an argument and determines if it needs to retry. By default empty and non 200 OK responses are retried. :type token: str :param token: Metadata token to send along with GET requests to IMDS. Nzx-aws-ec2-metadata-tokenGETr0r3Tr4)r7_assert_v1_enabled_default_retryr,r:r<rrrr;rr=r>rArr#_RETRIES_EXCEEDED_ERROR_CLS) rurl_path retry_funcrrrrBrrCrDs r _get_requestIMDSFetcher._get_requests   # # %  ,,J!!(+  27. / W%t))*A "--88 c9 ==--goo.?@!(++#O, + ..00)  0!  s;AC'' D1D  Dc>URbURUS'gg)Nz User-Agent)r)rrs rr:IMDSFetcher._add_user_agent$s#    '$($4$4GL ! (rcpUR(a%[RS5 UR5eg)Nz)Access to EC2 metadata has been disabled.)r rr#rKrs rr7IMDSFetcher._assert_enabled(s* >> LLD E224 4 rc8UR(a [SS9eg)NzLUnable to retrieve token for use in IMDSv2 call and IMDSv1 has been disabled error_msg)r r-rs rrIIMDSFetcher._assert_v1_enabled-s  ! !(h  "rcTURU5=(d URU5$r_is_non_ok_response _is_emptyrrCs rrJIMDSFetcher._default_retry3!''1MT^^H5MMrcHURS:waURUSSS9 gg)Nr2znon-200Tlog_bodyF)r?_log_imds_responser\s rrZIMDSFetcher._is_non_ok_response6s+   3 &  # #Hi$ # GrcJUR(dURUSSS9 gg)Nzno bodyTr`F)contentrbr\s rr[IMDSFetcher._is_empty<s&  # #Hi$ # GrcSnX!RUR/nU(a US- nURUR5 [R "U/UQ76 g)NzHMetadata service returned %s response with status code of %s for url: %sz, content body: %s)r?rrrerr#)rrC reason_to_logra statement logger_argss rrbIMDSFetcher._log_imds_responseBsU 1 %&:&:HLLI  - -I   x// 0 Y--r)rrr r rrrrrF)rrrrrrKr8r9 DEFAULT_METADATA_SERVICE_TIMEOUTr!rrrr,rErNr:r7rIrJrZr[rbrrrrrrsj"7$KJ1"  8>. "H*1X55  N  .rrcX\rSrSrSr/SQrSrSSjrSSjrSr S r S r S r S r S rg)InstanceMetadataFetcheriNz*latest/meta-data/iam/security-credentials/) AccessKeyIdSecretAccessKeyToken ExpirationcUR5nURU5nURX!5nURU5(a'UUSUSUSUSS.nUR U5 U$SU;aSU;a[ R SU5 0$!URa$ [ R S UR5 0$[a+n[ R S UR5 SnA0$SnAff=f) Nrprqrrrs) role_name access_key secret_keyr expiry_timeCodeMessagez7Error response received when retrievingcredentials: %s.\Max number of attempts exceeded (%s) when attempting to retrieve data from metadata service.zBad IMDS request: %s) rE _get_iam_role_get_credentials_contains_all_credential_fields_evaluate_expirationrr#rKrrr)rrru credentialsrDs rretrieve_iam_role_credentials5InstanceMetadataFetcher.retrieve_iam_role_credentialsWs% <..0E**51I// AK33K@@!*"-m"<"-.?"@(1#.|#<  ))+6""[(Y+-ELL+#  //  LLE""  # < LL/ ; ;  ->(. M* -125  .  LL3[5O  sB/C#C.-C.rr)rrrrrrrr|r}rrrr~rrrrrroroNs9rcFUR5nUR5nU$r) _get_fetcherretrieve_region)rrrs rr0IMDSRegionProvider._get_instance_metadata_regions###%((* rc^URcUR5UlUR$r)r_create_fetcherrs rrIMDSRegionProvider._get_fetchers& ==  002DM}}rcfURRS5nURRS5nURRS5[UR5URRS5S.n[UUURURR 5US9nU$)Nmetadata_service_timeoutmetadata_service_num_attemptsrr)rrr)rrrrrH)rrrInstanceMetadataRegionFetcherrr)rmetadata_timeoutmetadata_num_attempts imds_configrs rr"IMDSRegionProvider._create_fetchers==<< & !% A A +! .2]]-N-N/.3M 3)- (I(I*)  0$. }}//1  r)rrrNN) rrrrrrrrrrrrrrrs ,   rrc$\rSrSrSrSrSrSrg)riz-latest/meta-data/placement/availability-zone/cUR5nU$!URa# [RSUR5 gf=f)aGet the current region from the instance metadata service. :rvalue: str :returns: The region the current instance is running in or None if the instance metadata service cannot be contacted or does not give a valid response. :rtype: None or str :returns: Returns the region as a string if it is configured to use IMDS as a region source. Otherwise returns ``None``. It will also return ``None`` if it fails to get the region from IMDS due to exhausting its retries or not being able to connect. r{N) _get_regionrKrr#r)rrs rr-InstanceMetadataRegionFetcher.retrieve_regionsO %%'FM//  LLE""    s0AAcUR5nURURURUS9nURnUSSnU$)Nrr)rErNrrJr@)rrrCavailability_zoners rr)InstanceMetadataRegionFetcher._get_region+sU**,$$^^**%  %MM"3B' rrN)rrrrrrrrrrrrrs?I. rrcJUHn[X[5(a$X0;aX1;a[XX5 M6XX'M>[X[5(aBU(a;X0;a.[X[5(aXR X5 MXX'MXX'M g)zGiven two dict, merge the second dict into the first. The dicts can have arbitrary nesting. :param append_lists: If true, instead of clobbering a list with the new value, append all of the new values onto the original list. N)r|dict merge_dictslistextend)dict1dict2 append_listsrs rrr7s ej$ ' '| EJ 3"Z  D ) )l| 5:t < < !!%*-"Z EJ%rcD0nUHnXXR5'M U$)zDCopies the given dictionary ensuring all keys are lowercase strings.)r)originalr rs rlowercase_dictrTs& D$MYY[ KrcU"U5nUR5n[U5sSSS5 $!,(df  g=f![a [US9ef=f)Nr)readparse_key_val_file_contentsOSErrorr!)filename_openfcontentss rparse_key_val_filer\sH, 8_vvxH.x8__ ,(++,s"A/ A =AAAc0nUR5HCnSU;aM URSS5up4UR5nUR5nXAU'ME U$)N=r:) splitlinesrstrip)rfinallinerrs rrres\ E##% d? ::c1%iikiikc & Lrc f/n[US5(aUR5nOUnUHuupE[U[5(a3UH+nUR [ U5S[ U535 M- MMUR [ U5S[ U535 Mw SR U5$)a6Urlencode a dict or list into a string. This is similar to urllib.urlencode except that: * It uses quote, and not quote_plus * It has a default list of safe chars that don't need to be encoded, which matches what AWS services expect. If any value in the input ``mapping`` is a list type, then each list element wil be serialized. This is the equivalent to ``urlencode``'s ``doseq=True`` argument. This function should be preferred over the stdlib ``urlencode()`` function. :param mapping: Either a dict to urlencode or a list of ``(key, value)`` pairs. itemsr&)rrr|rrpercent_encoder)mappingsafe encoded_pairspairsrrelements rpercent_encode_sequencerts(Mw     eT " " $$%c*+1^G-D,EF!  !#&'q)>(?@  88M ""rc[U[[45(d [U5n[U[5(dURS5n[ XS9$)aUrlencodes a string. Whereas percent_encode_sequence handles taking a dict/sequence and producing a percent encoded string, this function deals only with taking a string (not a dict/sequence) and percent encoding it. If given the binary type, will simply URL encode it. If given the text type, will produce the binary type by UTF-8 encoding the text. If given something else, will convert it to the text type first. utf-8)r)r|bytesr~encoder) input_strrs rrrsF i% . . N i ' '$$W-  &&rc [R"SSSSSS[5S9nURU"55nU[R"US9-$)axParse numerical epoch timestamps (seconds since 1970) into a ``datetime.datetime`` in UTC using ``datetime.timedelta``. This is intended as fallback when ``fromtimestamp`` raises ``OverflowError`` or ``OSError``. :type value: float or int :param value: The Unix timestamps as number. :type tzinfo: callable :param tzinfo: A ``datetime.tzinfo`` class or compatible callable. r:rtzinfor)rr astimezoner)rr epoch_zeroepoch_zero_localizeds r_epoch_seconds_to_datetimersK""4Aq!QuwGJ%00: ("4"4U"C CCrc[U[[45(a$[RR X"55$[RR [U5U"55$![ [ 4a Of=f[RRUS[50S9$![ [ 4an[ SUSU35eSnAff=f)z.Parse timestamp with pluggable tzinfo options.GMT)tzinfoszInvalid timestamp "z": N) r|intfloatr fromtimestamp TypeErrorrdateutilparserparser)rrrDs r_parse_timestamp_with_tzinfor s%#u&&  ..ufh?? $$225<J J:&   >$$UUEG4D$EE z ">.ugS<==>s*-A//BB'B..C>CCc[5nUHn[X5s $ [U5nUH n[XBS9s $ [SUS35e![[4a*n[R SUR US9 SnAMvSnAff=f![[4a)n[R SWR US9 SnANSnAff=f![[4a Nf=f)zParse a timestamp into a datetime object. Supported formats: * iso8601 * rfc822 * epoch (value is an integer) This will return a ``datetime.datetime`` object. z2Unable to parse timestamp with "%s" timezone info.r4NrzHUnable to parse timestamp using fallback method with "%s" timezone info.z1Unable to calculate correct timezone offset for "") rr r OverflowErrorrr#rrrr r RuntimeError)rtzinfo_optionsrrD numeric_values rparse_timestamprs()N  /> >!e  (1-OO)  ;E7!D 7'  LLD   ('  LL!    z "   sD A CB B BBB CB??CCCc[U[5(aUnO [U5nURcUR [ 5S9nU$UR [ 55nU$)aUConverted the passed in value to a datetime object with tzinfo. This function can be used to normalize all timestamp inputs. This function accepts a number of different types of inputs, but will always return a datetime.datetime object with time zone information. The input param ``value`` can be one of several types: * A datetime object (both naive and aware) * An integer representing the epoch time (can also be a string of the integer, i.e '0', instead of 0). The epoch time is considered to be UTC. * An iso8601 formatted timestamp. This does not need to be a complete timestamp, it can contain just the date portion without the time component. The returned value will be a datetime object that will have tzinfo. If no timezone info was provided in the input value, then UTC is assumed, not local time. r)r|_DatetimeClassrrrrr)r datetime_objs rparse_to_aware_datetimersg6%(( 'u- " $++57+;  $..uw7 rc[R"SSS5nURcUc [5nURUS9nURSS9UR 5- U- nUR 5$)a[Calculate the timestamp based on the given datetime instance. :type dt: datetime :param dt: A datetime object to be converted into timestamp :type default_timezone: tzinfo :param default_timezone: If it is provided as None, we treat it as tzutc(). But it is only used when dt is a naive datetime. :returns: The timestamp rr:Nr)rrrr utcoffset total_seconds)dtdefault_timezoneepochds rdatetime2timestampr /sn   dAq )E yy  #$w  ZZ/Z 0 $ ",,.058A ?? rc^[R"5n[U4SjS5HnURU5 M U(aUR 5$UR 5$)aCalculate a sha256 checksum. This method will calculate the sha256 checksum of a file like object. Note that this method will iterate through the entire file contents. The caller is responsible for ensuring the proper starting position of the file and ``seek()``'ing the file back to its starting location if other consumers need to read from the file like object. :param body: Any file like object. The file must be opened in binary mode such that a ``.read()`` call returns bytes. :param as_hex: If True, then the hex digest is returned. If False, then the digest (as binary bytes) is returned. :returns: The sha256 checksum c&>TRS5$Nr)bodysr"calculate_sha256..Usdii 4rr)hashlibsha256iterupdate hexdigestdigest)r&as_hexchecksumchunks` rcalculate_sha256r2BsN$~~H4c:; !!##  rc^^/nSm[Rn[UU4SjS5H(nURU"U5R 55 M* U(dU"S5R 5$[ U5S:af/n[U5HBupVUb)URU"XV-5R 55 M1URU5 MD Un[ U5S:aMf[R"US5RS5$)a@Calculate a tree hash checksum. For more information see: http://docs.aws.amazon.com/amazonglacier/latest/dev/checksum-calculations.html :param body: Any file like object. This has the same constraints as the ``body`` param in calculate_sha256 :rtype: str :returns: The hex version of the calculated tree hash r$c&>TRT5$rr%)r&required_chunk_sizesrr'%calculate_tree_hash..nsdii(;LL,, -! !rrFN)rrrrrrrOrrrrrDrDs"rrDcD\rSrSrSrS SjrSrS SjrSrSr Sr S r g ) ArgumentGeneratoriaGenerate sample input based on a shape model. This class contains a ``generate_skeleton`` method that will take an input/output shape (created from ``botocore.model``) and generate a sample dictionary corresponding to the input/output shape. The specific values used are place holder values. For strings either an empty string or the member name can be used, for numbers 0 or 0.0 is used. The intended usage of this class is to generate the *shape* of the input structure. This can be useful for operations that have complex input shapes. This allows a user to just fill in the necessary data instead of worrying about the specific structure of the input arguments. Example usage:: s = botocore.session.get_session() ddb = s.get_service_model('dynamodb') arg_gen = ArgumentGenerator() sample_input = arg_gen.generate_skeleton( ddb.operation_model('CreateTable').input_shape) print("Sample input for dynamodb.CreateTable: %s" % sample_input) cXlgr_use_member_names)ruse_member_namess rrArgumentGenerator.__init__s!1rc(/nURX5$)zGenerate a sample input. :type shape: ``botocore.model.Shape`` :param shape: The input shape. :return: The generated skeleton input corresponding to the provided input shape. )_generate_skeleton)rrstacks rgenerate_skeleton#ArgumentGenerator.generate_skeletons&&u44rcURUR5 URS:Xa!URX5UR 5 $URS:Xa!UR X5UR 5 $URS:Xa!UR X5UR 5 $URS:XavUR(aUUR 5 $UR(a0[R"UR5UR 5 $UR 5 gURS;aUR 5 gURS;aUR 5 g URS :XaUR 5 g URS :Xa+[R"S SSSSS5UR 5 $UR 5 g!UR 5 f=f)N structurermaprr)integerlongr)rdoublegbooleanT timestamprr:) rrr_generate_type_structurer_generate_type_list_generate_type_maprUenumrchoicerrrrZrs rrY$ArgumentGenerator._generate_skeletons UZZ  +-44UB( IIK'F*//=$ IIK#E)..u< IIKH,)) IIK::!==4 IIK IIK$77 IIK$77 IIK I- IIKK/((q!Q1= IIK0 IIKEIIKs; G) G)? G)0"G)#0G)6G)G):G)*G))G;cURUR5S:a0$[5nURR 5HupEUR XRUS9X4'M U$)Nr:)r)countrrmembersrrY)rrrZskeleton member_name member_shapes rre*ArgumentGenerator._generate_type_structuresa ;;uzz "Q &I=).)<)<)> %K$($;$;+%<%H !*?rcSnUR(aURRnURURX#5/$)Nr)rUmemberrrYrjs rrf%ArgumentGenerator._generate_type_lists?  ! !<<$$D  # #ELL% >  rcURnURnURS:Xde[SUR XB54/5$)NrKeyName)rrrrrY)rrrZ key_shape value_shapes rrg$ArgumentGenerator._generate_type_mapsMII kk ""h...D33KGH   rrTNrl)r) rrrrrrr[rYrerfrgrrrrrRrRs%42 54  rrRc[R"U5(agS[U5RS3n[R "U5SL$)NFrr)r intersectionrhostnamermatch endpoint_urlr}s ris_valid_ipv6_endpoint_urlrsF$$\228L)22315H   x ( 44rc\[U5Rn[R"U5SL$r)rr}r r~rs ris_valid_ipv4_endpoint_urlrs& %..H == "$ ..rc[R"U5(ag[U5nURnUcg[ U5S:agUSS:XaUSSn[ R "S[ R5nURU5$)zVerify the endpoint_url is valid. :type endpoint_url: string :param endpoint_url: An endpoint_url. Must have at least a scheme and a hostname. :return: True if the endpoint url is valid. False otherwise. FNrrz;^((?!-)[A-Z\d-]{1,63}(?zz"NO  " "; /E  [99 rcSU;ag[U5nUS:dUS:ag[RU5nUbUR5[U5:wagg)a~ Check to see if the ``bucket_name`` complies with the restricted DNS naming conventions necessary to allow access via virtual-hosting style. Even though "." characters are perfectly valid in this DNS naming scheme, we are going to punt on any name containing a "." character because these will cause SSL cert validation problems if we try to use virtual-hosting style addressing. rF?T)rLABEL_REr~end) bucket_namenr~s rcheck_dns_namer@sT k KA1uB NN; 'E } s;'77 rc URRSS5(aSn[XU5 g![a/nURSn[ R SU5 SnAgSnAff=f)aV This handler looks at S3 requests just before they are signed. If there is a bucket name on the path (true for everything except ListAllBuckets) it checks to see if that bucket name conforms to the DNS naming conventions. If it does, it alters the request to use ``virtual hosting`` style addressing rather than ``path-style`` addressing. use_global_endpointFzs3.amazonaws.comrz2Not changing URI, bucket is not DNS compatible: %sN)rrswitch_to_virtual_host_styler&rrr#)rsignature_versionrdefault_endpoint_urlrrDrs r fix_s3_hostrWsk 0%881 $ (<   hh}-  @+   s 2 A+%A&&A+c URbg[U5(a[RS5 g[ UR 5nUR UlUR RS5nUc URn[U5S:aUSnU(dg[RSUR 5 [U5(a[U5S:Xa(URSS:waU=RS- slURU5 SRU5=(d SnUnUS-U-n URXURS 4n [U 5n Xl[RS U 5 g[!US 9eg) a This is a handler to force virtual host style s3 addressing no matter the signature version (which is taken in consideration for the default case). If the bucket is not DNS compatible an InvalidDNSName is thrown. :param request: A AWSRequest object that is about to be sent. :param signature_version: The signature version to sign with :param default_endpoint_url: The endpoint to use when switching to a virtual style. If None is supplied, the virtual host will be constructed from the url of the request. NzKRequest is GetBucketLocation operation, not checking for DNS compatibility.rr:z*Checking for DNS compatible bucket for: %srrrzURI updated to: %s)r) auth_path_is_get_bucket_location_requestrr#rrrrnetlocrrremoverschemerxrr&) rrrrr path_partsrrglobal_endpointhost new_tuplenew_uris rrrts`$  ( 1 1   %   W[[ !E G!!#&J#$|| : m   A7;;O + & &:!#$$R(C/%%,%   k *88J'.3D2O$6Dt5;;CI +G!K LL-w 7%+> >3rc8URRS5$)Nz ?location)rr*rs rrrs ;;   ,,rcb^^TRm[R"T5UU4Sj5nU$)aMethod decorator for caching method calls to a single instance. **This is not a general purpose caching decorator.** In order to use this, you *must* provide an ``_instance_cache`` attribute on the instance. This decorator is used to cache method calls. The cache is only scoped to a single instance though such that multiple instances will maintain their own cache. In order to keep things simple, this decorator requires that you provide an ``_instance_cache`` attribute on your instance. c>TU4nU(a&[[UR555nTX4nURR U5nUbU$T"U/UQ70UD6nXPRU'U$r)tuplesortedr_instance_cacher)rargsr cache_key kwarg_itemsresultfunc func_names r _cache_guard$instance_cache.._cache_guardsw% v||~ 67K"D6I%%)))4  Md,T,V,*0Y' r)r functoolswraps)rrrs` @rinstance_cachers1 I__T   rc^^UU4SjnU$)a Version of functools.lru_cache that stores a weak reference to ``self``. Serves the same purpose as :py:func:`instance_cache` but uses Python's functools implementation which offers ``max_size`` and ``typed`` properties. lru_cache is a global cache even when used on a method. The cache's reference to ``self`` will prevent garbage collection of the object. This wrapper around functools.lru_cache replaces the reference to ``self`` with a weak reference to not interfere with garbage collection. c>^^[R"T0TD6U4Sj5m[R"T5U4Sj5nTRUlU$)Nc&>T"U"5/UQ70UD6$rr)weakref_to_selfrrrs rfunc_with_weakref=lru_cache_weakref..wrapper..func_with_weakrefs);D;F; ;rc>UR5H)up4[U[5(dM[U5X#'M+ T"[R "U5/UQ70UD6$r)rr|rrweakrefref)rrr kwarg_key kwarg_valuers rinner1lru_cache_weakref..wrapper..innersP*0,,.& k400(-k(:F%+9%W[[%6HHH Hr)r lru_cacher cache_info)rrr cache_args cache_kwargss` @rwrapper"lru_cache_weakref..wrappersY   j 9L 9 < : <   I  I -77 rr)rrrs`` rlru_cache_weakrefrs  Nrc [UR5RRS5nUVs/sHoD[;dMUPM nnSn[ U5S:aUSR U5S-- nUS- nUS;ag[XSS9 gs snf) z?Switches the current s3 endpoint with an S3 Accelerate endpointrzhttps://s3-accelerate.r amazonaws.com) ListBuckets CreateBucket DeleteBucketNF)use_new_scheme)rrrrS3_ACCELERATE_WHITELISTrr _switch_hosts)roperation_namerrprs rswitch_host_s3_acceleraters W[[ ! ( ( . .s 3E >1&=!=QE >'H 5zA~CHHUOc)) HHH'E: ?s B B c[R"URRS55nUR U5(aX!n[ X5 gg)zBSwitches the host using a parameter value from a JSON request bodyrN)rrdatar;rr)r param_name request_json new_endpoints rswitch_host_with_paramr sE::gll11':;L ###/ g,$rc<[URX5nX0lgr)_get_new_endpointr)rrrfinal_endpoints rrrs& \N!Krc[U5n[U5nURnU(a URnUURURURS4n[ U5n[ RSX5 U$NrzUpdating URI from %s to %s)rrrrrxrrr#)original_endpointrrnew_endpoint_componentsoriginal_endpoint_componentsrfinal_endpoint_componentsrs rrrs&|4#+,=#> ) 0 0F(//&&$))$** ! 9:N LL$&7 rcUHNnX ;a@[X[5(a)[X[5(a[XX5 MHXX'MP g)zDeeply two dictionaries, overriding existing keys in the base. :param base: The base dictionary which will be merged into. :param extra: The dictionary to merge into the base. Keys from this dictionary will take precedence. N)r|r deep_merge)baseextrars rrr.sO K49d++5:t,, ty%* - J rcBURSS5R5$)z[Translate the form used for event emitters. :param service_id: The service_id to convert.  -)rr) service_ids rhyphenize_service_idrCs   c3 ' - - //rc.\rSrSrSrSrSrSrSrSr g) IdentityCacheiKzBase IdentityCache implementation for storing and retrieving highly accessed credentials. This class is not intended to be instantiated in user code. base_identity_cachecXlX lgr_client_credential_clsrclientcredential_clss rrIdentityCache.__init__T  -rc UR"S0UD6nU"5nURRUUURSSS9nU$)N- )r refresh_usingr1advisory_timeoutmandatory_timeoutr)build_refresh_callbackrcreate_from_metadataMETHOD)rrcallbackrcredential_entrys rget_credentialsIdentityCache.get_credentialsXsT..88://DD";; E  rc [5e)zuCallback to be implemented by subclasses. Returns a set of metadata to be converted into a new credential instance. )NotImplementedError)rs rr$IdentityCache.build_refresh_callbackds "##rrN) rrrrrrrr rrrrrrrKs #F.  $rrcl^\rSrSrSrSrSr\R"SS9U4Sj5r Sr S S jr S r U=r $) S3ExpressIdentityCacheimzS3Express IdentityCache for retrieving and storing credentials from CreateSession calls. This class is not intended to be instantiated in user code. s3expresscXlX lgrrrs rrS3ExpressIdentityCache.__init__vrrd)maxsizec>[TU]US9$)Nbucket)superr )rr __class__s rr &S3ExpressIdentityCache.get_credentialszsw&f&55rc^^UU4SjnU$)Nc>TRRTS9nUSnTRUSSS9nUSUSUSUS .$) NBucket CredentialsrsT)isorprq SessionToken)rvrwrrx)rcreate_session_serialize_if_needed)rCcredsrrrs r refresher@S3ExpressIdentityCache.build_refresh_callback..refreshersk||22&2AH]+E22l#3J$M2#$56~.)  rr)rrr&s`` rr-S3ExpressIdentityCache.build_refresh_callback~s rc[U[5(a(U(aUR5$URS5$U$Nz%Y-%m-%dT%H:%M:%S%Zr|r isoformatrrrr!s rr$+S3ExpressIdentityCache._serialize_if_needed4 e^ , ,((>>"78 8 rrrl)rrrrrrrrrr rr$r __classcell__)rs@rrrmsB F.%6&6 rrc4\rSrSrSSjrSSjrSrSrSrg) S3ExpressIdentityResolveriNcx[R"U5UlUc[URU5nX0lgr)rproxyrr_cache)rrrcaches rr"S3ExpressIdentityResolver.__init__s,}}V, =*4<<HE rc[RS5 U=(d URRRnUR SUR 5 UR SUR5 g)Nz'Registering S3Express Identity Resolverbefore-call.s3before-sign.s3)rr#rmetar\registerapply_signing_cache_keyresolve_s3express_identityr event_emitteremitters rr<"S3ExpressIdentityResolver.registersW >?;4<<#4#4#;#;)4+G+GH)4+J+JKrc URS05nURSS5nURS05RS5nUS:XaUbURS05 XbSS'ggg)Nendpoint_propertiesbackend input_paramsr S3Expresssigningr)r setdefault)rparamsrrrDrErs rr=1S3ExpressIdentityResolver.apply_signing_cache_keysu%kk*?D%)))T:kk."599(C k !k&=   y" -.9I { +'> !rc BURRS05nURS5nUS:XalURS5(aUURUS'SU;a?URRS05RS05RS 5US'gggg) NrH signing_namerz v4-s3expressidentity_cacher s3_redirectrJr)rr startswithr5) rrrMrrrequest_signerrrsigning_contexts rr>4S3ExpressIdentityResolver.resolve_s3express_identitys"//--i<&**>: ; &+<+G+G , , 15 O, -/1OO'' r:S2&S] ,2 , &rr5rr) rrrrrr<r=r>rrrrr2r2sL :rr2cJ\rSrSrSrS SjrS SjrSrSrSr S r S r S r g) S3RegionRedirectorv2izUpdated version of S3RegionRedirector for use when EndpointRulesetResolver is in use for endpoint resolution. This class is considered private and subject to abrupt breaking changes or removal without prior announcement. Please do not use it directly. NcZU=(d 0Ul[R"U5Ulgr)r5rr4rrendpoint_bridgerr6s rrS3RegionRedirectorv2.__init__skr }}V, rc([RS5 U=(d URRRnUR SUR 5 UR SUR5 UR SUR5 g)Nz(Registering S3 region redirector handlerneeds-retry.s3before-parameter-build.s3zbefore-endpoint-resolution.s3) rr#rr;r\r<redirect_from_errorannotate_request_contextredirect_from_cacher?s rr<S3RegionRedirectorv2.registerst ?@;4<<#4#4#;#;)4+C+CD ')F)F   +T-E-E rc jUcgURS05RS05n[RURS55(a[R S5 gURS5(a[R S5 gUSRS 05nURS 5nUSRS 05nUS ;=(a UR S :Hn US ;=(a+ UR S:H=(a SURS05;n US:H=(a SU;n USSL=(a USR S;n US:Hn US:H=(a UR S:gn[U U U U U U/5(dgUSSSnUSRS5nURX5nUc[R SUU5 g[R SUUU5 UURU'URRnURUUSSSUSS9nURUSUR5US'SUSSS'URRS5nUb=UR!U5nUunnUUSS '0USRS!05EUEUSS!'g)" An S3 request sent to the wrong region will return an error that contains the endpoint the request should be sent to. This handler will add the redirect information to the signing context and then redirect the request. NrrOrzBS3 request was previously for an Accesspoint ARN, not redirecting. redirected6S3 request was previously redirected, not redirecting.r:ErrorryResponseMetadata301400 HeadObject HeadBucketx-amz-bucket-region HTTPHeadersAuthorizationHeaderMalformedRegionri-i.i3PermanentRedirect"IllegalLocationConstraintExceptionr client_regionS3 client configured for region %s but the bucket %s is not in that region and the proper region could not be automatically determined.S3 client configured for region %s but the bucket %s is in region %s; Please configure the proper region to avoid multiple unnecessary redirects and signing attempts.rJ)operation_model call_argsrequest_contextrT authSchemes auth_typerH)r ArnParseris_arnrr#rr?anyget_bucket_regionr5r_ruleset_resolverconstruct_endpointset_request_urlr propertiesauth_schemes_to_signing_ctx)r request_dictrC operationr redirect_ctxr6 error_coderesponse_metadatais_special_head_objectis_special_head_bucketis_wrong_signing_regionis_redirect_statusis_permanent_redirectis_opt_in_region_redirectrrt new_region ep_resolverep_info auth_schemes auth_infor{rRs rr^(S3RegionRedirectorv2.redirect_from_errors<   #'' 26::="M   L,,X6 7 7 LL     L ) ) LLH   ,YYv& $QKOO,>C . ( KY^^|-K  . ( 8,. 8% $$]B78  8 8 NX=N &a[4) : +:)!+.A A > > 1.0 "&'%&")      i(7A$Y/33OD ++F=   LL9     I     ) Fll44 00%"9-m? N $4 4%&;>rc URS5nUb0X@R;a URRU5nXQS'ggg)z If a bucket name has been redirected before, it is in the cache. This handler will update the AWS::Region endpoint resolver builtin param to use the region from cache instead of the client region to avoid the redirect. rNz AWS::Region)rr5)rbuiltinsrJrrrs rr`(S3RegionRedirectorv2.redirect_from_cacheysCH%  &KK"70J&0] ##8 rc 8URS5nSUUS.US'g)zvStore the bucket name in context for later use when redirecting. The bucket name may be an access point ARN or alias. rF)rdrrJrONr)rrJrrrs rr_-S3RegionRedirectorv2.annotate_request_contexts'H%"  rrTr) rrrrrrr<r^rrr`r_rrrrrVrVs,-  sj>? 1  rrVcJ\rSrSrSrS SjrS SjrSrSrSr S r S r S r g) S3RegionRedirectorizThis handler has been replaced by S3RegionRedirectorv2. The original version remains in place for any third-party libraries that import it. NcXlX0lURc0Ul[R"U5Ul[ R "S[S9 g)NzThe S3RegionRedirector class has been deprecated for a new internal replacement. A future version of botocore may remove this class.category)_endpoint_resolverr5rr4rwarningswarn FutureWarningrXs rrS3RegionRedirector.__init__sF"1 ;; DK}}V,   #  rcU=(d URRRnURSUR5 URSUR 5 URSUR 5 g)Nr\r9r])rr;r\r<r^rr`r?s rr<S3RegionRedirector.registersa;4<<#4#4#;#;)4+C+CD)4+?+?@4d6N6NOrc (UcgURURS055(a[RS5 gURS05RS5(a[RS5 gUSRS05nURS5nUSRS 05nUS ;=(a URS :HnUS ;=(a+ URS :H=(a S URS05;n US:H=(a SU;n USSL=(a USR S;n US:Hn [ UU U U U /5(dgUSSSn USRS5nURX5nUc[RSUU 5 g[RSUU U5 URRSU5nUSnUU US.nUUSS'UURU 'URXS5 SUSS'g)rcNrz=S3 request was previously to an accesspoint, not redirecting. s3_redirectedrer:rfryrgrhrkrlrmrnrorprrqrrrHrrtrurvs3r)rrrT) _is_s3_accesspointrrr#rr?r~rrresolver5r)rrrCrrr6rrrrrrrrrtrrrRs rr^&S3RegionRedirector.redirect_from_errorst     " "<#3#3Ir#B C C LLO     Ir * . . ? ? LLH   ,YYv& $QKOO,>C . ( KY^^|-K  . ( 8,. 8% $$]B78  8 8 NX=N &a[4) : +:)!+.A A&'%&"     i(3H=$Y/33OD ++F=   LL,     :     **224DN+!   .= Y *- F \ +BC37 Y0rc>USnUSSnSU;aUS$URS05RSS5nUbU$URRUS9nUSSnURSS5nU$![anURSSnSnAN5SnAff=fr)rrrr rC)rrrCrrrrrDs rr$S3RegionRedirector.get_bucket_regions$A;+,>? N $4 4#$9: :"%%gr266xF  M D||//v/>H12=AG2D9  Djj!34]CG Ds!A66 BBBc vURS05RSS5nUb[USUS5US'gg)NrHrrF)rrrrJrrrs rr"S3RegionRedirector.set_request_url1s@;;y"-11*dC  -fUmXuMF5M rc URU5(agURS5nURRU5nUbXRS'gSU0US'g)zn This handler retrieves a given bucket's signing context from the cache and adds it into the request context. NrrHr)rrr5)rrJrrrrRs rr`&S3RegionRedirector.redirect_from_cache6sU  " "7 + + H%++//&1  &!0I "*F!3GI rc SU;$Nrr)rrs rr%S3RegionRedirector._is_s3_accesspointDs 7**r)r5rrr) rrrrrrr<r^rrr`rrrrrrrs/ "P aFBN 4+rrc\rSrSrSrg)InvalidArnExceptioniHrN)rrrrrrrrrrHsrrc*\rSrSrSr\S5rSrg)r|iLcURSS5n[U5S:a[SUS35eUSUSUSUS USS .$) N:zProvided ARN: zE must be of the format: arn:partition:service:region:account:resourcer:rr) partitionserviceraccountresource)rrr)rarn arn_partss r parse_arnArnParser.parse_arnMsmIIc1% y>A % &@@  #1 |l |!!   rc[U[5(aURS5(dg[5nUR U5 g![ a gf=f)Nzarn:FT)r|r~rPr|rr)r arn_parsers rr}ArnParser.is_arn\sQ%%%U-=-=f-E-E[     '"  sA AArN)rrrrr staticmethodr}rrrrr|r|Ls  rr|c\rSrSr\R "S5r\R "S5rS/rSSjr Sr Sr S r S r S rS rS rg)S3ArnParamHandlerihzA^(?Paccesspoint|outpost)[/:](?P.+)$zc^(?P[a-zA-Z0-9\-]{1,63})[/:]accesspoint[/:](?P[a-zA-Z0-9\-]{1,63}$)rNc6XlUc[5Ulggr _arn_parserr|rrs rrS3ArnParamHandler.__init__r%  ({D  rc<URSUR5 g)Nr]r< handle_arnrr@s rr<S3ArnParamHandler.registerws:DOOLrc URUR;agURU5nUcgUSS:XaURXU5 gUSS:XaUR XU5 gg)N resource_type accesspointoutpost)r_BLACKLISTED_OPERATIONS"_get_arn_details_from_bucket_param_store_accesspoint_store_outpost)rrJmodelrr arn_detailss rrS3ArnParamHandler.handle_arnzso ::55 5 ==fE     '= 8  # #F[ A  )Y 6    =7rcSU;a4USnURRU5nURX#5 U$g![a gf=f)Nr)rr_add_resource_type_and_namer)rrJrrs rr4S3ArnParamHandler._get_arn_details_from_bucket_params_ v  X&"..88= 00B""'  s2< A A cURRUS5nU(a)URS5US'URS5US'g[US9e)Nrr resource_name)r)_RESOURCE_REGEXr~groupr3)rrrr~s rr-S3ArnParamHandler._add_resource_type_and_namesQ$$**;z+BC +0;;+GK (+0;;+GK ('C0 0rcHUSUS'USUSUSUSUSS.US'g) Nrrrrrr)rrrrrrrrrJrrs rr$S3ArnParamHandler._store_accesspointsH'7x0"9-$[1!(+"9- %  !rcUSnURRU5nU(d [US9eURS5nXaS'URS5UUSUSUSUS S .US 'g) Nr)raccesspoint_namer outpost_namerrrr)rrrrrrr)_OUTPOST_RESOURCE_REGEXr~r1r)rrJrrrr~rs rr S3ArnParamHandler._store_outposts#O4 ,,22=A1 N N!;;'9:+x!KK7$"9-$[1!(+"9- %  !rrr)rrrrrrrrrrr<rrrrrrrrrrrhsXjjLO!jj 6 ..+ M > 1 " rrc\rSrSrSrSrSSjrSrSrSr S r S r S r S r S rSrSrSrSrSrSrSrSrSrSrSrSrSr\S5r\S5r\S5rSr g) S3EndpointSetteriawsrNcXlX lX0lX`lUc0UlX@lXPlUcUR Ulggrr_region _s3_config_use_fips_endpoint _endpoint_url _partition_DEFAULT_PARTITIONrendpoint_resolverr s3_configrruse_fips_endpoints rrS3EndpointSetter.__init__sJ#4 #"3   DO)#  "55DO rcURSUR5 URSUR5 URSUR5 g)Nr:zchoose-signer.s3z%before-call.s3.WriteGetObjectResponse)r< set_endpoint set_signer#update_endpoint_to_s3_object_lambdars rr<S3EndpointSetter.registersH/1B1BC14??C 3  4 4 rc "UR(a [SS9eURUS5 UR(agURnUR SUR 5nSRUSUSS9n[USUS 5US'g) NzOS3 client does not support accelerate endpoints for S3 Object Lambda operationsmsgs3-object-lambdazhttps://{host_prefix}{hostname} host_prefixr})rr}rF) _use_accelerate_endpointr4_override_signing_namerrrrformatr)rrJrrresolverresolvedrs rr4S3EndpointSetter.update_endpoint_to_s3_object_lambdas  ( (1e  ##G-?@    **..   9??}-j)@ *&-uMu rc URU5(agURU5 URU5 URU5 UR U5nUR U5 UR X5 gUR(a5UR(a[SURS3S9e[SSU0UD6 UR(aUR"SSU0UD6 gg)Nz8Client is configured to use the FIPS psuedo region for "zA", but S3 Accelerate does not have any FIPS compatible endpoints.rrr) _use_accesspoint_endpoint_validate_accesspoint_supported_validate_fips_supported_validate_global_regions(_resolve_region_for_accesspoint_endpoint._resolve_signing_name_for_accesspoint_endpoint_switch_to_accesspoint_endpointrrr4rr_s3_addressing_handler)rrrrs rrS3EndpointSetter.set_endpoints  ) )' 2 2  0 0 9  ) )' 2  ) )' 2GGK  ? ? H  0 0 F   ( (&&5 $ ~.00 & @g @ @  & &  ' ' B B6 B 'rc SUR;$rrrs rr*S3EndpointSetter._use_accesspoint_endpoint s7??22rcvUR(dgSURSS;a [S1S9eSURS;a[SURS3S9eURSSnX R:wa<URR S S 5(d[S URS US 3S9egg)Nfipsrr,Invalid ARN, FIPS region not allowed in ARN.rrz4Client is configured to use the FIPS psuedo-region "z2", but outpost ARNs do not support FIPS endpoints.use_arn_regionTz8Client is configured to use the FIPS psuedo-region for "z1", but the access-point ARN provided is for the "zn" region. For clients using a FIPS psuedo-region calls to access-point ARNs in another region are not allowed.)rrr2rrrrraccesspoint_regions rr )S3EndpointSetter._validate_fips_supported s&&  W__%56x@ @<CD  W__-=> ><J4<<.YFF %__-=>xH  -??&&'7>>A $ ~. 23422? .rcURRSS5(agURS;a[SURS3S9eg)Nr-T)z aws-globalz s3-external-1z6Client is configured to use the global psuedo-region "zJ". When providing access-point ARNs a regional endpoint must be specified.r)rrrr2rs rr!)S3EndpointSetter._validate_global_regions2 sT ??  / 6 6  <<: :< ~&22  ;rcUR(a [SS9eURSSnX R:wa[SURSUS3S9eURSR S5nUS :Xa)UR R S 5(a [S S9eURSR S 5nU(a)UR R S 5(a [S S9eUR U5 g)NzZClient does not support s3 accelerate configuration when an access-point ARN is specified.rrrClient is configured for "z3" partition, but access-point ARN provided is for "zE" partition. The client and access-point partition must be the same.rruse_dualstack_endpointzjClient does not support s3 dualstack configuration when an S3 Object Lambda access point ARN is specified.rzTClient does not support s3 dualstack configuration when an outpost ARN is specified.)rr2rrrr_validate_mrap_s3_config)rrrequest_partition s3_servicers rr0S3EndpointSetter._validate_accesspoint_supported> s  ( (<=  $OO,<=kJ  /<00AB-->,?@@@ __%56::9E + +0C0C $1 1 =N  '78<<^L DOO//0HII<8  %%g.rc[UR5(dgURRS5(a [ SS9eURRS5(a [ SS9eg)N$s3_disable_multiregion_access_pointszCInvalid configuration, Multi-Region Access Point ARNs are disabled.rr5zeClient does not support s3 dualstack configuration when a Multi-Region Access Point ARN is specified.)rrrrr2rs rr6)S3EndpointSetter._validate_mrap_s3_configc sl$W__55  ??  E F F<)  __ !9 : :<I ;rc[UR5(aURUS5 UR $URR SS5(a%URSSnURX5 U$UR $)Nrr-Trr)rr_override_signing_regionrrrr.s rr"9S3EndpointSetter._resolve_region_for_accesspoint_endpointu s|  1 1  ) )'3 7||__ !14 8 8!(1A!B8!L   ) )' F% %||rc N[U5(a[(ag[SS9eg)Ns3v4azzUsing S3 with an MRAP arn requires an additional dependency. You will need to pip install botocore[crt] before proceeding.r)rr r.)rrrs rrS3EndpointSetter.set_signer s,  ) )w07 *rc`URSSnURURU5 g)Nrrrr)rraccesspoint_services rr#?S3EndpointSetter._resolve_signing_name_for_accesspoint_endpoint s,%oo.>? J ##GOO5HIrc@[UR5n[URUR UR U5UR URUR 5URS45n[RSURU5 XAlgr) rrrr _get_netlocr_get_accesspoint_pathrrxrr#)rrroriginal_componentsaccesspoint_endpoints rr$0S3EndpointSetter._switch_to_accesspoint_endpoint s&w{{3)#**  +>**',,goo$))    ('++7K + rcf[U5(aURU5$URX5$r)r_get_mrap_netloc_get_accesspoint_netloc)rryrs rrHS3EndpointSetter._get_netloc s/  1 1((9 9//M MrcUSnSnUS/nUR(a1[UR5RnURU5 O(USnUR SUUR U5/5 SR U5$)Nrz s3-globalrrrr)rrrrr_get_partition_dns_suffixr)rryrrmrap_netloc_componentsendpoint_url_netlocrs rrN!S3EndpointSetter._get_mrap_netloc s()9:! "0"8!9   "*4+=+=">"E"E  " ) )*= >&{3I " ) )!229= xx.//rcUSnSRUSUS5/nURS5nUR(aIU(aURU5 [ UR5R nURU5 OU(aUS/nUR U5 OPUSS:Xa$URSU5nURU5 O#URS U5nURU5 URRS 5(aURS 5 UR X RU5/5 S RU5$) Nrz{}-{}rrr s3-outpostsrrzs3-accesspointr5r=r) rrrrrrr_inject_fips_if_neededr_get_dns_suffixr) rryrraccesspoint_netloc_componentsrrT outpost_host components rrO(S3EndpointSetter._get_accesspoint_netloc sG()9: NN>&1>)3L M) %&)).9   -44\B"*4+=+=">"E"E  ) 0 01D E ,m< -44\B *.@@ 77& .44Y? 77$o .44Y?""#;<<-44[A ) 0 022;?@ xx566rc2UR(aUS3$U$)N-fipsr)rr\rys rrX'S3EndpointSetter._inject_fips_if_needed s  " "[& &rcPUSSnURSU-SS5=(d S$)Nrrrrr:)r)r original_pathryrs rrI&S3EndpointSetter._get_accesspoint_path s2 /08$$S4ZQ7>3>rcZURRU5nUc URnU$r)rget_partition_dns_suffix_DEFAULT_DNS_SUFFIX)rpartition_name dns_suffixs rrR*S3EndpointSetter._get_partition_dns_suffix s4,,EE    11JrczURRSU5nURnU(a SU;aUSnU$Nr dnsSuffixrrrgrrrris rrY S3EndpointSetter._get_dns_suffix D**== + --  x/!+.Jrc`URRS05nX#S'X1RS'gNrHrrrrrrrRs rr>)S3EndpointSetter._override_signing_region .!//--i< %0!%4 "rc8URS05nX#S'X1S'gNrHrMr)rrrMrRs rr'S3EndpointSetter._override_signing_name s$!++i4 +7', rctURRS5(agURcg[UR5RnUR S5(dgUR S5nUSS:wagUSS n[U5[[U55:wag[S U55$) Nuse_accelerate_endpointTFrrr s3-accelerater:c32# UH o[;v M g7frr.0rs r .- sGA//) rrrrrr*rrsetall)rrr feature_partss rr)S3EndpointSetter._use_accelerate_endpoint s ??  8 9 9    %$,,-44// S! 8 &a  } S%7!8 8GGGGrcpUR(agURRS5nU(aU$g)Nvirtualaddressing_style)rrr)rconfigured_addressing_styles r_addressing_style"S3EndpointSetter._addressing_style/ s6  ( ('+oo&9&9:L&M# &. . 'rcURS:Xa[RS5 [$URS:Xd URb[RS5 g[RS5 [ $)Nrz'Using S3 virtual host style addressing.rzUsing S3 path style addressing.zSDefaulting to S3 virtual host style addressing with path style addressing fallback.)rrr#rrrrs rr%'S3EndpointSetter._s3_addressing_handler; si  ! !Y . LLB C/ /  ! !V +t/A/A/M LL: ;  . rrrrrrrNNNNF)!rrrrrrgrr<rrrr r!rr6r"rr#r$rHrNrOrXrIrRrYr>rrDrrr%rrrrrrs) 6* N6C03< #/J$  J+$N 0$7@ ?5- H HD / /rrc\rSrSrSrSr\R"S5rSSjr Sr Sr S r S r S rS rS rSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSr Sr!g) S3ControlEndpointSetteriT rrz^[a-zA-Z0-9\-]{1,63}$NcXlX lX0lX`lUc0UlX@lXPlUcUR Ulggrrrs rr S3ControlEndpointSetter.__init__Y sJ#4 #"3   DO)#  "55DO rc<URSUR5 g)Nzbefore-sign.s3-control)r<rrs rr< S3ControlEndpointSetter.registerm s79J9JKrc URU5(aVURU5 URU5nURU5 UR X5 UR U5 gUR U5(aPURU5 URUS5 URUR5nURX5 ggNrW) _use_endpoint_from_arn_details-_validate_endpoint_from_arn_details_supported _resolve_region_from_arn_details&_resolve_signing_name_from_arn_details"_resolve_endpoint_from_arn_details_add_headers_from_arn_details_use_endpoint_from_outpost_id#_validate_outpost_redirection_validr_construct_outpost_endpointr_update_request_netloc)rrrr new_netlocs rr$S3ControlEndpointSetter.set_endpointp s  . .w 7 7  > >w G??HK  7 7 @  3 3G I  . .w 7  / / 8 8  4 4W =  ' ' ?99$,,GJ  ' ' < 9rc SUR;$)Nrr(rs rr6S3ControlEndpointSetter._use_endpoint_from_arn_details} s//rc SUR;$)N outpost_idr(rs rr5S3ControlEndpointSetter._use_endpoint_from_outpost_id sw..rc2SURSS;a[URSSSS9eURRSS5(d=URSSnX R:waS US URS 3n[ US 9eURSS nX@R :wa[ SUR SUS3S 9eURRS5(a [ SS 9eSURS;aURU5 gg)Nr+rrrr,rrr-FzCThe use_arn_region configuration is disabled but received arn for "z(" when the client is configured to use "rrrr4z&" partition, but arn provided is for "z;" partition. The client and arn partition must be the same.r|7S3 control client does not support accelerate endpointsr)rr5rrrr6rr)rr arn_regionrVrequest_partions rrES3ControlEndpointSetter._validate_endpoint_from_arn_details_supported s; W__]3H= =.OOM2:>B ""#3U;; 7AJ\\)))3 5#||nA/ =KK!//-8E oo -800AB((7'8966  ??  8 9 98M  W__]; ;  4 4W = r)rrrs rr8S3ControlEndpointSetter._resolve_region_from_arn_details sM ??  / 7 7 7AJ  ) )' > ||rcLURSSnURX5 U$)NrrrD)rr arn_services rr>S3ControlEndpointSetter._resolve_signing_name_from_arn_details s)oom4Y?  ##G9rcHURX5nURX5 gr) _resolve_netloc_from_arn_detailsr)rrrrs rr:S3ControlEndpointSetter._resolve_endpoint_from_arn_details s%::   ##G8rc[UR5n[URUURUR S45n[ RSURU5 XAlgr)rrrrrrxrr#)rrrrJarn_details_endpoints rr.S3ControlEndpointSetter._update_request_netloc sc&w{{3)#**#((#))     ('++7K + rczURSnSU;aURU5$USnURX$5$)Nrrr)rr_construct_s3_control_endpoint)rrrrrs rr8S3ControlEndpointSetter._resolve_netloc_from_arn_details sDoom4 [ (33K@ @i(22;HHrc8URRU5$r)_HOST_LABEL_REGEXr~)rlabels r_is_valid_host_label,S3ControlEndpointSetter._is_valid_host_label s%%++E22rcTUH"nURU5(aM[US9e g)N)r)rr))rlabelsrs r_validate_host_labels-S3ControlEndpointSetter._validate_host_labels s(E,,U33+%88rcURX5 UR(a#[UR5RnX#/nO8US/nUR U5 UR U5nUR X/5 URU5$)N s3-control)rrrr_add_dualstackrYr_construct_netloc)rrrrTrris rr6S3ControlEndpointSetter._construct_s3_control_endpoint s "";8   "*4+=+=">"E"E 3FF    '--k:J MM;3 4%%f--rcURU5 UR(a[UR5R$SUUR U5/nUR U5 UR U5$r)rrrrrY _add_fipsr)rrrs rr3S3ControlEndpointSetter._construct_outpost_endpoint sl "";/   D../66 6$$[1F NN6 "%%f--rc$SRU5$)Nr)rrrs rr)S3ControlEndpointSetter._construct_netloc sxxrc>UR(a USS-US'gg)Nrr_r`rs rr!S3ControlEndpointSetter._add_fips s"  " "q G+F1I #rchURRS5(aURS5 gg)Nr5r=)rrrrs rr&S3ControlEndpointSetter._add_dualstack s) ??  7 8 8 MM+ & 9rczURRSU5nURnU(a SU;aUSnU$rlrnros rrY'S3ControlEndpointSetter._get_dns_suffix rqrc`URRS05nX#S'X1RS'grsrtrus rr>0S3ControlEndpointSetter._override_signing_region rwrc`URRS05nX#S'X1RS'gryrt)rrrMrRs rr.S3ControlEndpointSetter._override_signing_name s.!//--i< +7'%4 "rcvURSnURS5nU(aURX5 gg)Nrr)rr_add_outpost_id_header)rrrrs rr5S3ControlEndpointSetter._add_headers_from_arn_details s4oom4 "~6   ' ' > rc X!RS'g)Nzx-amz-outpost-id)r)rrrs rr.S3ControlEndpointSetter._add_outpost_id_header& s.:*+rrr)"rrrrrrgrrrrr<rrrrrrrrrrrrrrrrrrYr>rrrrrrrrrT s) #;< 6(L =0/>> 9 + I39 . . ,'55? ;rrc\rSrSrSr\R "S5rSSjrSr Sr Sr S r S r S rS rS rSrSrSrSrSrg)S3ControlArnParamHandleri* zThis handler has been replaced by S3ControlArnParamHandlerv2. The original version remains in place for any third-party importers. z[/:]NcfXlUc[5Ul[R"S[S9 g)NzThe S3ControlArnParamHandler class has been deprecated for a new internal replacement. A future version of botocore may remove this class.r)rr|rrrrs rr!S3ControlArnParamHandler.__init__1 s.%  ({D   #  rc<URSUR5 g)Nz!before-parameter-build.s3-controlrrs rr<!S3ControlArnParamHandler.register< s / OO rc URS;aURXU5 gURXU5 URXU5 g)N)rListRegionalBuckets)r_handle_outpost_id_param_handle_name_param_handle_bucket_param)rrJrrrs rr#S3ControlArnParamHandler.handle_arnB sA ::@ @  ) )& A  # #F7 ;  % %fW =rcX!;agXnURRU5nX4S'URU5US'U$![a gf=f)Nr resources)rr_split_resourcer)rrJrrrs r_get_arn_details_from_param4S3ControlArnParamHandler._get_arn_details_from_paramL sc  # $C**44S9K&) #'+';';K'HK $ "  s8A A Ac>URRUS5$)Nr)_RESOURCE_SPLIT_REGEXr)rrs rr(S3ControlArnParamHandler._split_resourceX s))// J0GHHrcvUSnSU;a*USU:wa!SRUS5n[USUS9eX1S'g)Nr AccountIdzGAccount ID in arn does not match the AccountId parameter provided: "{}"rr)rr5)rrJr account_idrVs r_override_account_id_param3S3ControlArnParamHandler._override_account_id_param[ s] + & VK%8J%F!fVK() / + ){rc"SU;agUSUS'g)N OutpostIdrr)rrJrrs rr1S3ControlArnParamHandler._handle_outpost_id_paramh s f $  &{ 3 rcURS:XagURUS5nUcgURU5(aURXU5 gSn[ USUS9eNCreateAccessPointNamez4The Name parameter does not support the provided ARNrr)rr_is_outpost_accesspoint_store_outpost_accesspointr5rrJrrrrVs rr+S3ControlArnParamHandler._handle_name_paramm sk ::, , 66vvF     ' ' 4 4  + +F[ INI. + rcnUSS:wagUSn[U5S:wagUSS:H=(a USS :H$) NrrWFrrrrrrrrrrs rr0S3ControlArnParamHandler._is_outpost_accesspoint} sH y !] 2 , y>Q |y(JYq\]-JJrcdURX5 USSnXAS'XCS'USSUS'X2S'g)Nrrrrr:rrr)rrJrrrs rr3S3ControlArnParamHandler._store_outpost_accesspoint sL ''<&{3A6)v*:&'&1+&>q&A N#!, rcURUS5nUcgURU5(aURXU5 gSn[USUS9eNrz6The Bucket parameter does not support the provided ARNrr)r_is_outpost_bucket_store_outpost_bucketr5rs rr-S3ControlArnParamHandler._handle_bucket_param sc66vxH     " "; / /  & &v DI / + rcnUSS:wagUSn[U5S:wagUSS:H=(a USS :H$) NrrWFrrrrrrr r s rr+S3ControlArnParamHandler._is_outpost_bucket sH y !] 2 , y>Q |y(EYq\X-EErcdURX5 USSnXAS'XCS'USSUS'X2S'g)Nrrrrr:rrr)rrJrrrs rr.S3ControlArnParamHandler._store_outpost_bucket sK ''<!+.q1 &x%0M"&1+&>q&A N#!, rrr)rrrrrrrrrr<rrrrrrrrrrrrrrrrr* s\JJw/   > I )4  K- F-rrcL\rSrSrSrS SjrSrSrSrSr S r S r S r S r g)S3ControlArnParamHandlerv2i aUpdated version of S3ControlArnParamHandler for use when EndpointRulesetResolver is in use for endpoint resolution. This class is considered private and subject to abrupt breaking changes or removal without prior announcement. Please do not use it directly. Nc6XlUc[5Ulggrrrs rr#S3ControlArnParamHandlerv2.__init__ rrc<URSUR5 g)Nz%before-endpoint-resolution.s3-controlrrs rr<#S3ControlArnParamHandlerv2.register s 3 OO rcURS:XagURUS5nUcgURU5 URU5 UR U5(aUR XU5 gSn[ USUS9er)rr_raise_for_fips_pseudo_region_raise_for_accelerate_endpointrrr5rs rr-S3ControlArnParamHandlerv2._handle_name_param s ::, , 66vvF    **;7 ++G4  ' ' 4 4  + +F[ INI. + rc&URX5 grrrs rr5S3ControlArnParamHandlerv2._store_outpost_accesspoint  ''> !  s  &&c$XR;agg)NTF)rC)rrs rrB3ContainerMetadataFetcher._check_if_whitelisted_host1 s && &rcFURU5nURU5$)zRetrieve JSON metadata from container metadata. :type relative_uri: str :param relative_uri: A relative URI, e.g "/foo/bar?id=123" :return: The parsed JSON response. )r;r:)r relative_urir;s r retrieve_uri%ContainerMetadataFetcher.retrieve_uri6 s#==.))(33rc.SS0nUbURU5 SnURXUR5$![aOn[R SUSS9 UR UR5 US- nX@R:aeSnAOSnAff=fM{)NAcceptzapplication/jsonrTzAReceived error when attempting to retrieve container metadata: %sr4r:) r, _get_responser4r-rr#r5 SLEEP_TIMERETRY_ATTEMPTS)rr; extra_headersrattemptsrDs rr:.ContainerMetadataFetcher._retrieve_credentialsB s/0  $ NN= ) ))t';';*  -!   DOO,A 2223  s9 BAB  Bc[RRnU"SXS9nURR UR 55nUR RS5nURS:wa[SURSU3S9e[R"U5$![a" Sn[RS X5 [US9ef=f![an S U 3n[US9eSn A ff=f) NrHr0rr2zReceived non 200 response z from container metadata: rUz>Unable to parse JSON returned from container metadata servicesz%s:%sz?Received error when attempting to retrieve container metadata: )rrr;rr=r>rer;r?r-rrrrr#rA) rr;rrr;rrC response_textrVrDs rrS&ContainerMetadataFetcher._get_responseX s >!,,77J 8MG}}))'//*;''(c+ )9= =  >s*BCB'',CC C3 C..C3c$SURU3$)Nzhttp://) IP_ADDRESS)rrNs rr;!ContainerMetadataFetcher.full_urlr s),88r)rr5r)rrrrr4rUrTr]rCtimer6rr<r9rArBrOr:rSr;rrrrr1r1 saONJ J N $4:: =  4,>49rr1c:[U5(a0$[5$r)should_bypass_proxiesrrs rrrv sS!! |rc[[U5R5(agg![[R 4a gf=f)z2 Returns whether we should bypass proxies or not. TF)rrrr socketgaierrorrbs rrara} sI  ,, - - .  v '   s#(AAc`U(dg[U5$![[4a Of=f[US5(as[US5(abUR 5nUR SS5 UR 5nUR U5 X!- $![ Ra gf=fg)Nrseektellr)rAttributeErrorr rrhrgioUnsupportedOperation)r&orig_pos end_file_poss rdetermine_content_lengthrn s  4y I &   tVv!6!6 yy{H IIaO99;L IIh * *&&     s ((ABB,+B,cURS5nU(dg[RR5nX#S'UR S5nUbU$SU;aU$g)zReturns encodings from given HTTP Header Dict. :param headers: dictionary to extract encoding from. :param default: default encoding if the content-type is text z content-typeNcharsetr@)rrYmessagerz get_param)rdefault content_typerqrps rget_encoding_from_headersru s_;;~.L mm##%G*N *G rc [U[[45(a [U5nO [ U5n[ R "U5RS5$)KThis function has been deprecated, but is kept for backwards compatibility.r7)r|r bytearray_calculate_md5_from_bytes_calculate_md5_from_filebase64 b64encoder;)r&r binary_md5s r calculate_md5r~ sD$ *++.t4 -d3   J ' . .w 77rc6[USS9nUR5$)rwFusedforsecurity)rr.) body_bytesmd5s rryry s *e 4C ::<rc^TR5n[SS9n[U4SjS5HnURU5 M TR U5 UR 5$)rwFrc&>TRS5$r#r%)fileobjsrr'*_calculate_md5_from_file.. sgll;7rr)rhrr+r,rgr.)rstart_positionrr1s` rrzrz sN\\^N % (C7= 5> LL ::<rcnURS05RS05nURS5S:H$)NrrDrErGr)rJrDs r_is_s3express_requestr s; **Y377r  " "9 - <Dzz)R044ZD)--.AB04EE6""V$$})"4262 +5y-(*}rc&\rSrSr\4SjrSrSrg)FileWebIdentityTokenLoaderi6 cXlX lgr)_web_identity_token_pathr)rweb_identity_token_pathrs rr#FileWebIdentityTokenLoader.__init__7 s (?% rcURUR5nUR5sSSS5 $!,(df  g=fr)rrr)r token_files r__call__#FileWebIdentityTokenLoader.__call__; s, ZZ55 6*??$7 6 6s 6 A)rrN)rrrropenrrrrrrrr6 s6:%rrc8\rSrSrSSjrSrSSjrSSjrSrg) SSOTokenLoaderi@ NcUc0nXlgrr5rr6s rrSSOTokenLoader.__init__A  =E rcvUnUbUn[R"URS55R5$Nr)r)sha1rr-)r start_url session_namers r_generate_cache_key"SSOTokenLoader._generate_cache_keyF s5  #$I||I,,W56@@BBrcBURX5nX RU'gr)rr5)rrrrrs r save_tokenSSOTokenLoader.save_tokenL s,,YE !& IrcURX5n[RSU5 X0R;aUnUbUnSUS3n[ US9eURUnSU;dSU;aSUS3n[ US9eU$)Nz Checking for cached token at: %sz Token for z does not existrU accessToken expiresAtz is invalid)rrr#r5r0)rrrrrrVrs rrSSOTokenLoader.__call__P s,,YE  7C KK 'D'#$TF/:I#i8 8 I&  %E)A$YK{;I#i8 8 rrr) rrrrrrrrrrrrrr@ s C 'rrcB\rSrSrSrSrS SjrSrSrSr S S jr S r g) EventbridgeSignerSetteria rrNc(XlX lX0lgr)rrr)rr rrs rr EventbridgeSignerSetter.__init__e s"3 )rctURSUR5 URSUR5 g)Nz'before-parameter-build.events.PutEventszbefore-call.events.PutEvents)r<check_for_global_endpointset_endpoint_urlrs rr< EventbridgeSignerSetter.registerj s7 5  * *   *D,A,A rc XSU;a$USn[RSUSU5 XAS'gg)Neventbridge_endpointzRewriting URL from %s to %sr)rr#rs rr(EventbridgeSignerSetter.set_endpoint_urls s: !W ,56H LL-ve}h %5M -rc URS5nUcg[U5S:Xa [SS9e[(d [ SS9eURS5nSnUb.UR (a [SS9eUR (aS/nURc7[S U35nURU:wa [S S9eURXFS 9nO URnXS 'S US'g)N EndpointIdrz+EndpointId must not be a zero length stringrzqUsing EndpointId requires an additional dependency. You will need to pip install botocore[crt] before proceeding.r.z>FIPS is not supported with EventBridge multi-region endpoints.r=https://z-EndpointId is not a valid hostname component.endpoint_variant_tagsrv4ar{) rrr'r r.r r5rrr}_get_global_endpoint) rrJrrrrHrrresolved_endpoints rr1EventbridgeSignerSetter.check_for_global_endpoint{ s ::l+    x=A 3A w,3  _- $  ''7.,,)4 %    %xz23E~~)7G!% 9 9!:! !% 2 2 *;&'$ rcURnURUR5nUc URnUR XBS9nUc UR nSUSUS3$)Nrrz.endpoint.events.r)rget_partition_for_regionrrrfrg)rrrrrris rr,EventbridgeSignerSetter._get_global_endpoint ss**55dllC  //I66 7   11J(#4ZLBBr)rrrrr) rrrrrrgrr<rrrrrrrrra s))*  %*%X Crrc>Ucg[U5nURRS5(aURS;agURR S5nUSS:wagUSSn[ U5[ [ U55:wag[S U55$) zDoes the URL match the S3 Accelerate endpoint scheme? Virtual host naming style with bucket names in the netloc part of the URL are not allowed by this function. Fr)r?httprrr}r:r~c32# UH o[;v M g7frrrs rr'is_s3_accelerate_url.. sC]++]r)rrr*rrrrr)r url_partsrrs ris_s3_accelerate_urlr s  { I    $ $     !2 2    " "3 'E Qx?"!BKM =S]!344 C]C CCrc\rSrSrSr\R R\R RSSSS55r \ S4Sjr S r S r S r S rS rSrSSjrSrg) JSONFileCachei zJSON file cache. This provides a dict like interface that stores JSON serializable objects. The objects are serialized to JSON and stored in a file. These values can be retrieved at a later time. ~.awsbotor6Nc:XlUc URnX lgr) _working_dir_default_dumps_dumps)r working_dir dumps_funcs rrJSONFileCache.__init__ s'  ,,J rc>[R"XRS9$)N)rs)rdumpsr$)rrLs rrJSONFileCache._default_dumps szz#'@'@AArcbURU5n[RRU5$r)_convert_cache_keyr risfile)rr actual_keys r __contains__JSONFileCache.__contains__ s%,,Y7 ww~~j))rcURU5n[U5n[R"U5sSSS5 $!,(df  g=f![[ 4a [ U5ef=f)z Retrieve value from a cache key.N)rrrloadrrKeyError)rrrrs r __getitem__JSONFileCache.__getitem__ sV,,Y7  &j!Qyy|"!!$ &9% % &s% A> A A A AA+cURU5n[U5nUR5 g![a [ U5ef=fr)rrunlinkFileNotFoundErrorr)rrrkey_paths r __delitem__JSONFileCache.__delitem__ sE,,Y7  &J'H OO   &9% % &s /AcURU5nURU5n[R R UR5(d[R"URSS9 [R"URSS9upV[R"US5nURU5 UR5 [R"UR55 SSS5 [R "Xc5 g![[4a [SU35ef=f!,(df  NG=f)Nz3Value cannot be cached, must be JSON serializable: T)exist_okz.tmp)dirsuffixw)rrr rr risdirrmakedirstempfilemkstempfdopenwriteflushfsyncfilenor)rrrfull_key file_contenttemp_fd temp_pathrs r __setitem__JSONFileCache.__setitem__ s**95 ;;u-L ww}}T..// KK))D 9%--!!& YYw $ GGL ! GGI HHQXXZ % 9':& EeWM  % $sD)AD0D-0 D>c`[RRURUS-5nU$)Nz.json)r rrr)rr full_paths rr JSONFileCache._convert_cache_keys'GGLL!2!2I4GH rc[U[5(a(U(aUR5$URS5$U$r*r+r-s rr$"JSONFileCache._serialize_if_neededr/r)rrrl)rrrrrr r expanduserr CACHE_DIRrrrrrrrr$rrrrrr s^""277<<VVW#MNI#,! B*&&(*rrch[R"URS55R5$r)r)r*rr-)sign_in_session_names rgenerate_login_cache_keyr s& >>.55g> ? I I KKrc,UcgURS5$)NFz--x-s3)r*rs ris_s3express_bucketr$s ~ ??8 $$rc[U[5(aUR5(dgUc[Rn[ U5nUR U5$r)r|r~rr r _get_bearer_env_var_namer)rMr env_vars rget_token_from_environmentr*sG lC ( ( 0B0B0D0D**&|4G ;;w rclURSS5RSS5R5nSU3$)Nr_rAWS_BEARER_TOKEN_)rupper)rM bearer_names rrr4s7&&sC088cBHHJK {m ,,rrnappmeshzapp-meshzds-datazdirectory-service-dataglobalacceleratorzglobal-accelerator iotwirelessz iot-wirelesskinesisanalyticsv2zkinesis-analytics-v2z lexv2-modelsz lex-models-v2z lexv2-runtimezlex-runtime-v2z sms-voicezpinpoint-sms-voicerkrlrm s3controlrrorprqrrzservicecatalog-appregistryzservice-catalog-appregistry)rtrucJS[R;aQ[RR[RS5n[RR U5nU$[RR [RR SSSS55$)z>Returns which directory contains the login_session token filesAWS_LOGIN_CACHE_DIRECTORYrrloginr6)r r r expandvarsrrrs rget_login_token_cache_directoryr.sm"bjj0ww!!"**-H"IJww!!$' ww!!"'',,sFGW"MNNrc.\rSrSrSrSSjrSrSrSrg) LoginTokenLoaderiz+Loads and saves login access tokens to diskNcUc0nXlgrrrs rrLoginTokenLoader.__init__rrc6[U5nX RU'grrr5)rrrrs rrLoginTokenLoader.save_tokens,\: !& IrcV[U5nX R;agURU$rr4)rrrs r load_tokenLoginTokenLoader.load_tokens(,\: KK '{{9%%rrr) rrrrrrrr7rrrrr0r0s5 '&rr0)Trlr)z ISO-8859-1)r{r9r email.messagerYrr)rjloggingr rrrdrr_rrr ipaddressrpathlibrurllib.requestrrdateutil.parserr  dateutil.tzrurllib3.exceptionsr rbotocore.awsrequestbotocore.httpsessionbotocore.compatr r r r rrrrrrrrrrrrrrrrrrbotocore.exceptionsr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/r0r1r2r3r4r5r6botocore.pluginr7r8r9 getLoggerrrrmr!r"r SAFE_CHARSrrrAr EVENT_ALIASESrr$PRIORITY_ORDERED_SUPPORTED_PROTOCOLSrrrrrrrrrrrr Exceptionrrrrorrrrrrrrrrr rrr r2r?r8rDrRrrrr$rrrrrrrrrrrrrrrr2rVrrrr|rrrrrr1rrarnrur~ryrzrrrrrrrrrrrrrrrSERVICE_NAME_ALIASES.CLIENT_NAME_TO_HYPHENIZED_SERVICE_ID_OVERRIDESr.r0rrrrMs    / 3102   8 $#$ -2* ::4 5  '-B}B9B[B- B 9 B + B>B-B /B-B-B.B B *B B *!B"(#B$O%B&-'B(%)B*0+B, '-B. /B0)1B2+3B45B647B89B: #;B< (=B> U?B@@ABB !CBD mEBFGBH IBJ*KBL+MBNOOBP.QBR(SBT UBV)WBX@YBZ#$D[B\2]B^1_B` ?aBb.cBd,eBfwgBh!>((, '7''*,CB L**# -- ($ ,"N"% #06@ < $ I ) @.@.F~k~B??D#K#L$:(,, +5##L$.'* D >&-`*Z&!67B1"""(a a H5/ #: :6  <6:=?@-B>;&-!(*0$$D&]&R--`H H Vt+t+n * 8R R jTTn S;S;lB-B-JJ!9JZw9w9t*:.8 =(85 $62%%BRCRCjDBFFRL%  -,-@A72-72972z 72 > 72 - 72 /72-72-72.72 72 *72O72%72-72 0!72" '#72$ %72&''72())72*++72, #-72. (/720 !1722 m3724-5726 7728*972:>;72<+=72>0?72@OA72B.C72DOE72F(G72H%I72J K72L)M72N#$DO72P@Q72R1S72T ?U72V%W72X =Y72Zz[72\(]72^_72` :a72b'c72d7e72f'g72h!"?i72j'm72.tO&&r