errors.go 3.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283
  1. // Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
  2. package sts
  3. const (
  4. // ErrCodeExpiredTokenException for service response error code
  5. // "ExpiredTokenException".
  6. //
  7. // The web identity token that was passed is expired or is not valid. Get a
  8. // new identity token from the identity provider and then retry the request.
  9. ErrCodeExpiredTokenException = "ExpiredTokenException"
  10. // ErrCodeIDPCommunicationErrorException for service response error code
  11. // "IDPCommunicationError".
  12. //
  13. // The request could not be fulfilled because the identity provider (IDP) that
  14. // was asked to verify the incoming identity token could not be reached. This
  15. // is often a transient error caused by network conditions. Retry the request
  16. // a limited number of times so that you don't exceed the request rate. If the
  17. // error persists, the identity provider might be down or not responding.
  18. ErrCodeIDPCommunicationErrorException = "IDPCommunicationError"
  19. // ErrCodeIDPRejectedClaimException for service response error code
  20. // "IDPRejectedClaim".
  21. //
  22. // The identity provider (IdP) reported that authentication failed. This might
  23. // be because the claim is invalid.
  24. //
  25. // If this error is returned for the AssumeRoleWithWebIdentity operation, it
  26. // can also mean that the claim has expired or has been explicitly revoked.
  27. ErrCodeIDPRejectedClaimException = "IDPRejectedClaim"
  28. // ErrCodeInvalidAuthorizationMessageException for service response error code
  29. // "InvalidAuthorizationMessageException".
  30. //
  31. // The error returned if the message passed to DecodeAuthorizationMessage was
  32. // invalid. This can happen if the token contains invalid characters, such as
  33. // linebreaks.
  34. ErrCodeInvalidAuthorizationMessageException = "InvalidAuthorizationMessageException"
  35. // ErrCodeInvalidIdentityTokenException for service response error code
  36. // "InvalidIdentityToken".
  37. //
  38. // The web identity token that was passed could not be validated by AWS. Get
  39. // a new identity token from the identity provider and then retry the request.
  40. ErrCodeInvalidIdentityTokenException = "InvalidIdentityToken"
  41. // ErrCodeMalformedPolicyDocumentException for service response error code
  42. // "MalformedPolicyDocument".
  43. //
  44. // The request was rejected because the policy document was malformed. The error
  45. // message describes the specific error.
  46. ErrCodeMalformedPolicyDocumentException = "MalformedPolicyDocument"
  47. // ErrCodePackedPolicyTooLargeException for service response error code
  48. // "PackedPolicyTooLarge".
  49. //
  50. // The request was rejected because the total packed size of the session policies
  51. // and session tags combined was too large. An AWS conversion compresses the
  52. // session policy document, session policy ARNs, and session tags into a packed
  53. // binary format that has a separate limit. The error message indicates by percentage
  54. // how close the policies and tags are to the upper size limit. For more information,
  55. // see Passing Session Tags in STS (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
  56. // in the IAM User Guide.
  57. //
  58. // You could receive this error even though you meet other defined session policy
  59. // and session tag limits. For more information, see IAM and STS Entity Character
  60. // Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
  61. // in the IAM User Guide.
  62. ErrCodePackedPolicyTooLargeException = "PackedPolicyTooLarge"
  63. // ErrCodeRegionDisabledException for service response error code
  64. // "RegionDisabledException".
  65. //
  66. // STS is not activated in the requested region for the account that is being
  67. // asked to generate credentials. The account administrator must use the IAM
  68. // console to activate STS in that region. For more information, see Activating
  69. // and Deactivating AWS STS in an AWS Region (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
  70. // in the IAM User Guide.
  71. ErrCodeRegionDisabledException = "RegionDisabledException"
  72. )