@@ -18,6 +18,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
18
18
*
19
19
* > The size of the security token that STS API operations return is not fixed. We strongly recommend that you make no
20
20
* > assumptions about the maximum size.
21
+ *
22
+ * @var Credentials|null
21
23
*/
22
24
private $ credentials ;
23
25
@@ -26,6 +28,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
26
28
* `WebIdentityToken` that was submitted with the `AssumeRoleWithWebIdentity` call. The identifier is typically unique
27
29
* to the user and the application that acquired the `WebIdentityToken` (pairwise identifier). For OpenID Connect ID
28
30
* tokens, this field contains the value returned by the identity provider as the token's `sub` (Subject) claim.
31
+ *
32
+ * @var string|null
29
33
*/
30
34
private $ subjectFromWebIdentityToken ;
31
35
@@ -34,26 +38,34 @@ class AssumeRoleWithWebIdentityResponse extends Result
34
38
* resulting temporary security credentials. For example, you can reference these credentials as a principal in a
35
39
* resource-based policy by using the ARN or assumed role ID. The ARN and ID include the `RoleSessionName` that you
36
40
* specified when you called `AssumeRole`.
41
+ *
42
+ * @var AssumedRoleUser|null
37
43
*/
38
44
private $ assumedRoleUser ;
39
45
40
46
/**
41
47
* A percentage value that indicates the packed size of the session policies and session tags combined passed in the
42
48
* request. The request fails if the packed size is greater than 100 percent, which means the policies and tags exceeded
43
49
* the allowed space.
50
+ *
51
+ * @var int|null
44
52
*/
45
53
private $ packedPolicySize ;
46
54
47
55
/**
48
56
* The issuing authority of the web identity token presented. For OpenID Connect ID tokens, this contains the value of
49
57
* the `iss` field. For OAuth 2.0 access tokens, this contains the value of the `ProviderId` parameter that was passed
50
58
* in the `AssumeRoleWithWebIdentity` request.
59
+ *
60
+ * @var string|null
51
61
*/
52
62
private $ provider ;
53
63
54
64
/**
55
65
* The intended audience (also known as client ID) of the web identity token. This is traditionally the client
56
66
* identifier issued to the application that requested the web identity token.
67
+ *
68
+ * @var string|null
57
69
*/
58
70
private $ audience ;
59
71
@@ -76,6 +88,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
76
88
* [^1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts#iam-term-role-chaining
77
89
* [^2]: https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.html
78
90
* [^3]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
91
+ *
92
+ * @var string|null
79
93
*/
80
94
private $ sourceIdentity ;
81
95
0 commit comments