Struct S3AccessGrantsGranter 

pub struct S3AccessGrantsGranter { /* private fields */ }

Available on crate feature services-s3 only.

Grants temporary AWS credentials through S3 Access Grants GetDataAccess.

The granter binds one stable S3 Access Grants instance configuration and one complete typed grant before it is passed to reqsign_core::Granter. It signs GetDataAccess with the explicit source Credential through the existing AWS SigV4 request signer and returns only the temporary credential material issued by S3 Access Grants.

None lifetime uses the service default of one hour and omits durationSeconds. An explicit lifetime must contain whole seconds in the inclusive range from 15 minutes to 12 hours. The returned credential always uses the authoritative absolute Expiration from the AWS response.

Example

use std::time::Duration;

use reqsign_aws_v4::{
    DefaultCredentialProvider, S3AccessGrantsConfig, S3AccessGrantsGrant,
    S3AccessGrantsGranter, S3AccessGrantsPermission, S3AccessGrantsPrivilege,
    S3AccessGrantsTarget,
};
use reqsign_core::{Context, Granter};
use reqsign_http_send_reqwest::ReqwestHttpSend;

let config = S3AccessGrantsConfig::new("111122223333", "us-east-2");
let grant = S3AccessGrantsGrant::new(
    S3AccessGrantsTarget::for_prefix("example-bucket", "customer-a/"),
    S3AccessGrantsPermission::Read,
    S3AccessGrantsPrivilege::Minimal,
);
let credential = Granter::new(
    Context::new().with_http_send(ReqwestHttpSend::default()),
    DefaultCredentialProvider::new(),
    S3AccessGrantsGranter::new(config, grant),
)
.grant(Some(Duration::from_secs(900)))
.await?;

Implementations

impl S3AccessGrantsGranter

pub fn new( config: S3AccessGrantsConfig, grant: S3AccessGrantsGrant, ) -> S3AccessGrantsGranter

Create a granter for a bound instance configuration and typed grant.

pub fn with_grant(self, grant: S3AccessGrantsGrant) -> S3AccessGrantsGranter

Replace the bound grant while retaining the stable instance configuration.

Trait Implementations

impl Clone for S3AccessGrantsGranter

fn clone(&self) -> S3AccessGrantsGranter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for S3AccessGrantsGranter

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl GrantCredential for S3AccessGrantsGranter

type Credential = Credential

Credential used as the source and returned as the granted result.

fn required_valid_until( &self, _credential: &<S3AccessGrantsGranter as GrantCredential>::Credential, _expires_in: Option<Duration>, ) -> Timestamp

Return the timestamp through which the source credential must remain usable.

async fn grant_credential( &self, ctx: &Context, credential: &<S3AccessGrantsGranter as GrantCredential>::Credential, expires_in: Option<Duration>, ) -> Result<<S3AccessGrantsGranter as GrantCredential>::Credential, Error>

Grant a bounded, expiring credential from an existing service credential.