Optional
authorizationOptional
awsOptional
awsAn alternative to awsContainerAuthorizationTokenFile, this is the token value itself.
For browser environments, use instead authorizationToken.
Optional
awsWill be read on each credentials request to add an Authorization request header value.
Not supported in browsers.
Optional
awsIf this value is provided, it will be used as-is.
For browser environments, use instead credentialsFullUri.
Optional
awsIf this value is provided instead of the full URI, it will be appended to the default link local host of 169.254.170.2.
Not supported in browsers.
Optional
awsOptional
awsOptional
cacheOptional
callbackOptional
callbacksOptional
Internal
clientSTSClientConfig or SSOClientConfig to be used for creating inner client for auth operations.
Optional
Internal
clientOptional
configThe path at which to locate the ini config file. Defaults to the value of
the AWS_CONFIG_FILE
environment variable (if defined) or
~/.aws/config
otherwise.
Optional
credentialsAWS Credentials.
If no credentials are provided, the default credentials from @aws-sdk/credential-provider-node
will be used.
Optional
credentialsBROWSER ONLY.
In browsers, a relative URI is not allowed, and a full URI must be provided. HTTPS is required.
This value is required for the browser environment.
Optional
disableWhether to disable streaming.
If streaming is bypassed, then stream()
will defer to
invoke()
.
Optional
ec2Only used in the IMDS credential provider.
Optional
endpointOverride the default endpoint hostname.
Optional
endpointOptional
fetchA custom fetch function for low-level access to AWS API. Defaults to fetch().
Optional
init: RequestInitOptional
filepathThe path at which to locate the ini credentials file. Defaults to the
value of the AWS_SHARED_CREDENTIALS_FILE
environment variable (if
defined) or ~/.aws/credentials
otherwise.
Optional
guardrailRequired when Guardrail is in use.
Optional
guardrailIdentifier for the guardrail configuration.
Optional
guardrailVersion for the guardrail configuration.
Optional
ignoreWhen true, always reload credentials from the file system instead of using cached values. This is useful when you need to detect changes to the credentials file.
Optional
loggerFor credential resolution trace logging.
Optional
maxThe maximum number of concurrent calls that can be made.
Defaults to Infinity
, which means no limit.
Optional
maxThe maximum number of retries that can be made for a single call, with an exponential backoff between each attempt. Defaults to 6.
Optional
maxMax tokens.
Optional
metadataOptional
mfaA function that returns a promise fulfilled with an MFA token code for
the provided MFA Serial code. If a profile requires an MFA code and
mfaCodeProvider
is not a valid function, the credential provider
promise will be rejected.
The serial code of the MFA device specified.
Optional
modelModel to use. For example, "amazon.titan-tg1-large", this is equivalent to the modelId property in the list-foundation-models api.
Optional
modelAdditional kwargs to pass to the model.
Optional
onCustom handler to handle failed attempts. Takes the originally thrown error object as input, and should itself throw an error if the input error is not retryable.
Optional
Internal
parentPresent if the credential provider was created by calling the defaultCredentialProvider in a client's middleware, having access to the client's config.
The region of that parent or outer client is important because an inner client used by the credential provider may need to match its default partition or region with that of the outer client.
Optional
profileThe configuration profile to use.
Optional
regionThe AWS region e.g. us-west-2
.
Fallback to AWS_DEFAULT_REGION env variable or region specified in ~/.aws/config in case it is not provided here.
Optional
roleA function that assumes a role and returns a promise fulfilled with credentials for the assumed role.
The credentials with which to assume a role.
Optional
roleA function that assumes a role with web identity and returns a promise fulfilled with credentials for the assumed role.
Optional
roleThe IAM session name used to distinguish sessions.
Optional
ssoThe ID of the AWS account to use for temporary credentials.
Optional
ssoOptional
ssoThe AWS region to use for temporary credentials.
Optional
ssoThe name of the AWS role to assume.
Optional
ssoSSO session identifier. Presence implies usage of the SSOTokenProvider.
Optional
ssoThe URL to the AWS SSO service.
Optional
stopOptional additional stop sequences to pass to the model. Currently only supported for Anthropic and AI21.
Optional
streamingWhether or not to stream responses
Optional
tagsOptional
temperatureTemperature.
Optional
timeoutDefault is 1000ms. Time in milliseconds to spend waiting between retry attempts.
Optional
traceTrace settings for the Bedrock Guardrails.
Optional
verboseOptional
webFile location of where the OIDC
token is stored.
BROWSER ONLY.
Providing this value will set an "Authorization" request header value on the GET request.