vKgG:SrSSKrSSKrSSKrSSKJr SSKJrJr SSK J r J r SSK J r SSKJr SSKJrJrJrJrJrJrJrJrJrJrJrJrJrJr SS KJ r J!r! \RD"\#5r$S r%S 00r&"S S 5r'"SS\'5r("SS\)\5r*"SS5r+g)zResolves regions and endpoints. This module implements endpoint resolution, including resolving endpoints for a given service and region and resolving the available endpoints for a service in a specific AWS partition. N)Enum)UNSIGNED xform_name)AUTH_TYPE_MAPSHAS_CRTCRT_SUPPORTED_AUTH_TYPES)EndpointProvider)EndpointProviderErrorEndpointVariantError!InvalidEndpointConfigurationErrorInvalidHostLabelErrorMissingDependencyException NoRegionErrorParamValidationError$UnknownEndpointResolutionBuiltInNameUnknownRegionErrorUnknownSignatureVersionError*UnsupportedS3AccesspointConfigurationErrorUnsupportedS3ConfigurationErrorUnsupportedS3ControlArnError&UnsupportedS3ControlConfigurationError)ensure_booleaninstance_cachez{service}.{region}.{dnsSuffix} endpointsc4\rSrSrSrSSjrSrS SjrSrg) BaseEndpointResolver4z3Resolves regions and endpoints. Must be subclassed.Nc[e)aResolves an endpoint for a service and region combination. :type service_name: string :param service_name: Name of the service to resolve an endpoint for (e.g., s3) :type region_name: string :param region_name: Region/endpoint name to resolve (e.g., us-east-1) if no region is provided, the first found partition-wide endpoint will be used if available. :rtype: dict :return: Returns a dict containing the following keys: - partition: (string, required) Resolved partition name - endpointName: (string, required) Resolved endpoint name - hostname: (string, required) Hostname to use for this endpoint - sslCommonName: (string) sslCommonName to use for this endpoint. - credentialScope: (dict) Signature version 4 credential scope - region: (string) region name override when signing. - service: (string) service name override when signing. - signatureVersions: (list) A list of possible signature versions, including s3, v4, v2, and s3v4 - protocols: (list) A list of supported protocols (e.g., http, https) - ...: Other keys may be included as well based on the metadata NotImplementedError)self service_name region_names P/var/www/highfloat_scraper/venv/lib/python3.13/site-packages/botocore/regions.pyconstruct_endpoint'BaseEndpointResolver.construct_endpoint7s 6"!c[e)zLists the partitions available to the endpoint resolver. :return: Returns a list of partition names (e.g., ["aws", "aws-cn"]). r )r"s r%get_available_partitions-BaseEndpointResolver.get_available_partitionsTs "!r(c[e)arLists the endpoint names of a particular partition. :type service_name: string :param service_name: Name of a service to list endpoint for (e.g., s3) :type partition_name: string :param partition_name: Name of the partition to limit endpoints to. (e.g., aws for the public AWS endpoints, aws-cn for AWS China endpoints, aws-us-gov for AWS GovCloud (US) Endpoints, etc. :type allow_non_regional: bool :param allow_non_regional: Set to True to include endpoints that are not regional endpoints (e.g., s3-external-1, fips-us-gov-west-1, etc). :return: Returns a list of endpoint names (e.g., ["us-east-1"]). r )r"r#partition_nameallow_non_regionals r%get_available_endpoints,BaseEndpointResolver.get_available_endpoints[s &"!r(N)awsF) __name__ __module__ __qualname____firstlineno____doc__r&r*r/__static_attributes__r1r(r%rr4s=":"FK"r(rc\rSrSrSrSS/rSSjrSSjrSrSS jr SS jr SS jr S r SS jr SrSrSrSrSrSrSrSrg)EndpointResolverqz7Resolves endpoints based on partition endpoint metadatazaws-isoz aws-iso-bc>SU;a [S5eXlX lg)z :type endpoint_data: dict :param endpoint_data: A dict of partition data. :type uses_builtin_data: boolean :param uses_builtin_data: Whether the endpoint data originates in the package's data directory. partitionsz%Missing "partitions" in endpoint dataN) ValueError_endpoint_datauses_builtin_data)r" endpoint_datarAs r%__init__EndpointResolver.__init__vs$ } ,DE E+!2r(clURSH!nUSU:waMUSnX;aMXASs $ g)Nr> partitionservicesr)r@)r"r#r-rFrGs r%get_service_endpoints_data+EndpointResolver.get_service_endpoints_datasH,,\:I%7 ,H+)+6 6 ;r(c^/nURSHnURUS5 M U$)Nr>rF)r@append)r"resultrFs r%r*)EndpointResolver.get_available_partitionss2,,\:I MM)K0 1; r(NcP/nURSHnUSU:waMUSnX;aMXqSnUHin XS;n U(a7U (a0URXU5n U (aURU 5 MFMHU(d U (dMXURU 5 Mk M U$)Nr>rFrGrregions)r@_retrieve_variant_datarK) r"r#r-r.endpoint_variant_tagsrLrFrGservice_endpoints endpoint_nameis_regional_endpoint variant_datas r%r/(EndpointResolver.get_available_endpointss,,\:I%7 ,H+ ( 6{ C !2 '4)8L'L$(-A#'#>#>)8:O$L$ m4$'+?+?MM-0"3;$ r(cURSHSnUSU:XdMU(a9URURS5U5nU(aSU;aUSs $MLMNUSs $ g)Nr>rFdefaults dnsSuffix)r@rPget)r"r-rQrFvariants r%get_partition_dns_suffix)EndpointResolver.get_partition_dns_suffixsx,,\:I%7("99! j13HG;'#9&{33$:w%[11;r(cTUS:Xa U(aUcSnUbASnURSHnUSU:XdMUnM UbURUUUUUS5nU$gURSH?nU(aUSUR;aMURUUUUU5nU(dM=Us $ g)Ns3z us-east-1r>rFT)r@_endpoint_for_partition!_UNSUPPORTED_DUALSTACK_PARTITIONS) r"r#r$r-use_dualstack_endpointuse_fips_endpointvalid_partitionrFrLs r%r&#EndpointResolver.construct_endpoints D &#%K  %"O!00> [)^;&/O?*55# *%  ,,\:I%+&99:11&! Fv ;r(c|URSH nURX!5(dMUSs $ [USS9e)Nr>rFz,No partition found for provided region_name.)r$ error_msg)r@ _region_matchr)r"r$rFs r%get_partition_for_region)EndpointResolver.get_partition_for_regionsH,,\:I!!)99 --;!#D  r(cPUSnU(a XpR;aSUS3n[S/US9eUSRU[5n UcSU ;aU SnO [ 5eUUU UUUS.n X9S ;aUR "S0U D6$UR X5(dU(aU RS5n U RS S 5n U (a5U (d.[RS UUU 5 XS 'UR "S0U D6$[RSUU5 UR "S0U D6$g)NrFz4Dualstack endpoints are currently not supported for z partition dualstacktagsrgrGpartitionEndpoint)rFr# service_datarSrbrcrisRegionalizedTz'Using partition endpoint for %s, %s: %srSz*Creating a regex based endpoint for %s, %sr1) rar rZDEFAULT_SERVICE_DATAr_resolverhLOGdebug) r"rFr#r$rbrcforce_partitionr-rgrpresolve_kwargspartition_endpointis_regionalizeds r%r`(EndpointResolver._endpoint_for_partitionsb#;/ ""H"HH&'z3 '[MYO O!,00 .   "l2*+>? #o%#(((&2 2   i 5 5!-!1!12E!F *../?FO!/ = &  3E/}}6~66 II<  ==2>2 2%:Ir(crX!S;agSU;a([R"US5RU5$g)NrOT regionRegexF)recompilematch)r"rFr$s r%rhEndpointResolver._region_match:s: I. . I %::i 67==kJ Jr(cURS/5nUH2n[US5[U5:XdM UR5nUs $ g)Nvariantsrn)rZsetcopy)r"rBrnrr[rLs r%rP'EndpointResolver._retrieve_variant_dataAsC $$Z4G76?#s4y0   r(cj/nU(aURS5 U(aURS5 U$)Nrlfips)rK)r"rbrcrns r%_create_tag_list!EndpointResolver._create_tag_listHs* ! KK $  KK  r(cv0nX#U4H.nURXa5nU(dMURXu5 M0 U$r2)rP _merge_keys)r"rnrBservice_defaultspartition_defaultsrLrr[s r%_resolve_variant!EndpointResolver._resolve_variantPsD&:LMH11(AGw  1N r(cURS05RU05nURS5(a[RSU35 URS05nURS05n URXV5n U (a;UR XX5n U 0:XaSUSU3n [ XS9eUR X{5 OUn SU ;aUSU S'US U S 'XKS 'UR X5 UR X5 URUU S UUU S5U S 'S U ;aURUU S UUU S5U S 'U $) Nr deprecatedz3Client is configured with the deprecated endpoint: rXzEndpoint does not exist for z in region rmrYrF endpointNamehostname sslCommonName)rZrtwarningrrr r_expand_template) r"rFr#rprSrbrcrBrrrnrLrgs r%rsEndpointResolver._resolveZs%((b9== 2    \ * * KKEm_U (++J;&]]:r:$$%;O **%5F|2<.A!!.1+JJ   ] 3"F f $"+K"8F; ' 4{!.~ )2 +4!22  :    ;   z f $&*&;&;'{# 'F? # r(c0UHnX2;dM XX#'M gr2r1)r" from_datarLkeys r%rEndpointResolver._merge_keyssC 'n r(c"URX4US9$)N)serviceregionrY)format)r"rFtemplater#rSrYs r%r!EndpointResolver._expand_templates )  r()r@rA)F)r3)r3FNr2)NNFF)r4r5r6r7r8rarCrHr*r/r\r&rir`rhrPrrrsrrr9r1r(r%r;r;qsA)2K(@% 37 " :59 $$ 0d ?3B?B-  r(r;cH\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrSrg)EndpointResolverBuiltinsiz AWS::Regionz AWS::UseFIPSzAWS::UseDualStackzAWS::STS::UseGlobalEndpointzAWS::S3::UseGlobalEndpointzAWS::S3::AcceleratezAWS::S3::ForcePathStylezAWS::S3::UseArnRegionzAWS::S3Control::UseArnRegionz'AWS::S3::DisableMultiRegionAccessPointsz SDK::EndpointzAWS::Auth::AccountIdz AWS::Auth::AccountIdEndpointModer1N)r4r5r6r7 AWS_REGION AWS_USE_FIPSAWS_USE_DUALSTACKAWS_STS_USE_GLOBAL_ENDPOINTAWS_S3_USE_GLOBAL_ENDPOINTAWS_S3_ACCELERATEAWS_S3_FORCE_PATH_STYLEAWS_S3_USE_ARN_REGIONAWS_S3CONTROL_USE_ARN_REGIONAWS_S3_DISABLE_MRAP SDK_ENDPOINT ACCOUNT_IDACCOUNT_ID_ENDPOINT_MODEr9r1r(r%rrsZJ"L,#@">-74$B C"L'JAr(rc\rSrSrSrSSjrSrSrSrSr S r S r S r \ S 5r\ S 5r\ S5rSrSrSrSrSrSrg)EndpointRulesetResolveriz5Resolves endpoints using a service's endpoint rulesetNc [UUS9UlURRRUlX0lX@lXPlX`lXpl Xl 0Ul g)N) ruleset_datapartition_data) r _providerruleset parameters_param_definitions_service_model _builtins_client_context_event_emitter_use_ssl_requested_auth_scheme_instance_cache) r"endpoint_ruleset_datar service_modelbuiltinsclient_context event_emitteruse_sslrequested_auth_schemes r%rC EndpointRulesetResolver.__init__sZ*.) #'.."8"8"C"C+!-+ &;#!r(c fUc0nUc0nURXU5n[RSU35 URR"S 0UD6n[RSUR35 UR(d?URRS5(aURSURSS3S9nURURR5VV s0sH upXS_M sn nS 9nU$![ anUR Xd5nUceXveSnAff=fs sn nf) zAInvokes the provider with params defined in the service's rulesetNz+Calling endpoint provider with parameters: zEndpoint provider result: zhttps://zhttp://)urlr)headersr1) _get_provider_paramsrtrurresolve_endpointr #ruleset_error_to_botocore_exceptionrr startswith_replaceritems) r"operation_model call_argsrequest_contextprovider_paramsprovider_resultexbotocore_exceptionrvals r%r&*EndpointRulesetResolver.construct_endpoints[  I  " O33   9/9J K  1"nn==!O ./B/B.CDE}}!4!4!?!? !K!K-66o11!"5677O*22,;,C,C,I,I,K,KV ,K3  3% 1!%!I!I" ")(0 1(sD,D-  D*D%%D*c0nURXU5nURR5HIupgURUUUS9nUc'URbUR URUS9nUcMEXU'MK U$)aUResolve a value for each parameter defined in the service's ruleset The resolution order for parameter values is: 1. Operation-specific static context values from the service definition 2. Operation-specific dynamic context values from API parameters 3. Client-specific context parameters 4. Built-in values such as region, FIPS usage, ... ) param_namerr) builtin_namer)_get_customized_builtinsrr_resolve_param_from_contextbuiltin_resolve_param_as_builtin) r"rrrrcustomized_builtinsr param_def param_vals r%r,EndpointRulesetResolver._get_provider_paramss#;;  &*%<%<%B%B%D !J88% /#9I  Y%6%6%B ::!*!2!20; $.7 +&Er(c~URX5nUbU$URXU5nUbU$URU5$r2)&_resolve_param_as_static_context_param'_resolve_param_as_dynamic_context_param&_resolve_param_as_client_context_param)r"rrrstaticdynamics r%r3EndpointRulesetResolver._resolve_param_from_context8sW<<    M>>    N:::FFr(cFURU5nURU5$r2)_get_static_context_paramsrZ)r"rrstatic_ctx_paramss r%r>EndpointRulesetResolver._resolve_param_as_static_context_paramGs&!;;OL $$Z00r(cZURU5nX;aXAnURU5$gr2)_get_dynamic_context_paramsrZ)r"rrrdynamic_ctx_params member_names r%r?EndpointRulesetResolver._resolve_param_as_dynamic_context_paramMs7"==oN  +,8K==- - ,r(clUR5nX;aX!nURRU5$gr2)_get_client_context_paramsrrZ)r"rclient_ctx_paramsclient_ctx_varnames r%r>EndpointRulesetResolver._resolve_param_as_client_context_paramUs= ;;=  *!2!> ''++,>? ? +r(czU[RR5;a [US9eUR U5$)N)name)r __members__valuesrrZ)r"rrs r%r1EndpointRulesetResolver._resolve_param_as_builtin[s4 7CCJJL L6LI I||L))r(cnURVs0sHnURUR_M sn$s snf)z=Mapping of param names to static param value for an operation)static_context_parametersrvaluer"rparams r%r2EndpointRulesetResolver._get_static_context_params`s< )BB B JJ #B    2cnURVs0sHnURUR_M sn$s snf)z7Mapping of param names to member names for an operation)context_parametersrrrs r%r3EndpointRulesetResolver._get_dynamic_context_paramshs> );; ; JJ)) );   rcURRVs0sH#nUR[UR5_M% sn$s snf)z7Mapping of param names to client configuration variable)rclient_context_parametersrr)r"rs r%r2EndpointRulesetResolver._get_client_context_paramspsG ,,FF F JJ 5::. .F   s)AcURRR5n[R"UR5nUR R SU3UUUUS9 U$)Nzbefore-endpoint-resolution.)rmodelparamscontext)r service_id hyphenizerrremit)r"rrrrrs r%r0EndpointRulesetResolver._get_customized_builtinsxsh((33==? "ii7   )* 6(!# ! #"r(c 2^[U[5(a[U5S:Xa [S5e[R SSR UVs/sHnSURS5S3PM sn5TR5 TR[:XaS04$UVs/sHn0UESTRUS50EPM nnTRb[U4S jU55upCO[S U55upC0nSU;a USUS'O/SU;a)[US5S:aSR US5US'SU;aUR#USS9 SU;a[%US5US'[R SUSUU5 XG4$s snfs snf![a S04s$f=f![aa S nUVs/sHo"SPM Os snfnn[(d[S U55nU(a [S S9e[!SR U5S9ef=f)aConvert an Endpoint's authSchemes property to a signing_context dict :type auth_schemes: list :param auth_schemes: A list of dictionaries taken from the ``authSchemes`` property of an Endpoint object returned by ``EndpointProvider``. :rtype: str, dict :return: Tuple of auth type string (to be used in ``request_context['auth_type']``) and signing context dict (for use in ``request_context['signing']``). rz&auth_schemes must be a non-empty list.z_Selecting from endpoint provider's list of auth schemes: %s. User selected auth scheme is: "%s"z, "rnoneNc3># UH9nTRTRUS5(dM)TRU4v M; g7frN)._does_botocore_authname_match_ruleset_authnamer).0sr"s r% FEndpointRulesetResolver.auth_schemes_to_signing_ctx..sB$)JJ33QvY5T00!4)s 'AAc3L# UHnUS[;dMUSU4v M g7fr)r)rrs r%rrs-$)yN2#QvYN)s$$Fc32# UHnU[;v M g7fr2r)rschemes r%rrs+&7F"::&7szbThis operation requires an additional dependency. Use pip install botocore[crt] before proceeding.msg)signature_version signingRegionrsigningRegionSet, signingName) signing_namedisableDoubleEncodingz?Selected auth type "%s" as "%s" with signing context params: %s) isinstancelistlen TypeErrorrtrujoinrZrr_strip_sig_prefixnext StopIterationranyrrupdater)r" auth_schemesrr"rfixable_with_crtauth_type_optionssigning_contexts` r%auth_schemes_to_signing_ctx3EndpointRulesetResolver.auth_schemes_to_signing_ctxs,--\1Ba1GDE E  1 II\B\155=/+\B C  ' '    & &( 22: ' & Gv Fvt55fVnE F&    & & 2  $$)$  f #$)$  6 f $(.(?OH % 6 )6,-.2,/HH-.-) F "  " "}0E " F "f ,7E./8O3 4 M 6N    $$]C ! Rx  ! $) 8D$E 1vY $E!$Ew'*+&7+($ $4L 7*.))4E*F% s7F  #FF,F+F('F(+H; G AHc<URS5(aUSS$U$)z6Normalize auth type names by removing any "sig" prefixsigN)r)r" auth_names r%r1)EndpointRulesetResolver._strip_sig_prefixs# ) 4 4U ; ;y}JJr(cURU5nURS5SnUS:waURS5(aUSSnX!:H$)a Whether a valid string provided as signature_version parameter for client construction refers to the same auth methods as a string returned by the endpoint ruleset provider. This accounts for: * The ruleset prefixes auth names with "sig" * The s3 and s3control rulesets don't distinguish between v4[a] and s3v4[a] signers * The v2, v3, and HMAC v1 based signers (s3, s3-*) are botocore legacy features and do not exist in the rulesets * Only characters up to the first dash are considered Example matches: * v4, sigv4 * v4, v4 * s3v4, sigv4 * s3v7, sigv7 (hypothetical example) * s3v4a, sigv4a * s3v4-query, sigv4 Example mismatches: * v4a, sigv4 * s3, sigv4 * s3-presign-post, sigv4 -rr_N)r1splitr)r"botonamersnames r%rFEndpointRulesetResolver._does_botocore_authname_match_ruleset_authnamesS4''/>>#&q) t  3 3D 9 9|H!!r(cURRS5nUcgURS5(aURS5Sn[ US9$UR RnUS:XaUS:XdUS :Xa [US 9$URS 5(dnURS 5(dXURS 5(dBURS5(d,URS5(dURS5(a [US 9$UR5RS5(a [US9$US:XatURS5(aURS5n[XcS9$URS5(dURS5(a [US 9$US:Xa [US9$US:Xa.URS5(a [US 9$US:Xa [US 9$g![a UnGNf=f)ztAttempts to translate ruleset errors to pre-existing botocore exception types by string matching exception strings. r$NzInvalid region in ARN: `)labelr_z/S3 Object Lambda does not support S3 Acceleratez#Accelerate cannot be used with FIPSr#zS3 Outposts does not supportzS3 MRAP does not supportz!S3 Object Lambda does not supportzAccess Points do not supportzInvalid configuration:z#Client was configured for partitionz invalid arn:)report s3controlz Invalid ARN:Bucket)arnr$z!AccountId is required but not seteventszUInvalid Configuration: FIPS is not supported with EventBridge multi-region endpoints.z&EndpointId must be a valid host label.)kwargsrZrrD IndexErrorrrr#rrlowerrrrr )r"ruleset_exceptionrr$rKr#rOs r%r;EndpointRulesetResolver.ruleset_error_to_botocore_exceptions &&**51 ;  >>3 4 4  #q))u5 5**77 4 HH??63??=>>>>"<==>>"EFF>>"@AA>>":;;>>"GHHAcJJyy{%%n55+377 ; &~~n--jj*3EE~~6773>>5<<>#FF99+377 8 #~~69SAA>>8SAAQ  sG.. G>=G>) rrrrrrrrr)TN)r4r5r6r7r8rCr&rrrrrrrrrrrr:r1rrr9r1r(r%rrs?""00dB G1 .@ *        #a%FK"@5r(r),r8rloggingr}enumrbotocorerr botocore.authrr botocore.crtr botocore.endpoint_providerr botocore.exceptionsr r r rrrrrrrrrrrbotocore.utilsrr getLoggerr4rtDEFAULT_URI_TEMPLATErrrr;strrrr1r(r%ras  )117 : !7#R(:":"zt +t n BsDBDyyr(