uPjiVdZddlmZddlmZddlmZGddejZy)a Custom AWS Security Credentials Supplier for Vertex AI WIF. Wraps boto3/botocore credentials so that google-auth can use them for the AWS-to-GCP Workload Identity Federation token exchange without hitting the EC2 instance metadata service. Requires google-auth >= 2.29.0. )Callable)Final)awsc,eZdZdZdedefdZdZdZy)AwsCredentialsSuppliera Supplies AWS credentials to google-auth's aws.Credentials for WIF token exchange. This bypasses the default metadata-based credential retrieval, allowing WIF to work in environments where EC2 metadata is blocked. Accepts a credentials_provider callable that is invoked on every get_aws_security_credentials() call, so that refreshed/rotated credentials are picked up automatically (important for temporary STS tokens). credentials_provider aws_regionc ||_||_y)a Args: credentials_provider: A zero-arg callable that returns a botocore.credentials.Credentials object (with access_key, secret_key, and token attributes). aws_region: The AWS region string (e.g. "us-east-1"). N)_credentials_provider_region)selfrr s t/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/vertex_ai/aws_credentials_supplier.py__init__zAwsCredentialsSupplier.__init__s&:"! c|j}tj|j|j|j S)z:Return current AWS credentials for the GCP token exchange.) access_key_idsecret_access_key session_token)r rAwsSecurityCredentials access_key secret_keytoken)r contextrequestcurrents rget_aws_security_credentialsz3AwsCredentialsSupplier.get_aws_security_credentials*s<335))!,,%00!--  rc|jS)z2Return the AWS region for credential verification.)r )r rrs rget_aws_regionz%AwsCredentialsSupplier.get_aws_region3s ||rN) __name__ __module__ __qualname____doc__rstrrrrrrrrs$  "X "3 " rrN) r"collections.abcrtypingr google.authrAwsSecurityCredentialsSupplierrr$rrr)s'%$S??$r