errors.go 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384
  1. // Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
  2. package sts
  3. const (
  4. // ErrCodeExpiredTokenException for service response error code
  5. // "ExpiredTokenException".
  6. //
  7. // The web identity token that was passed is expired or is not valid. Get a
  8. // new identity token from the identity provider and then retry the request.
  9. ErrCodeExpiredTokenException = "ExpiredTokenException"
  10. // ErrCodeIDPCommunicationErrorException for service response error code
  11. // "IDPCommunicationError".
  12. //
  13. // The request could not be fulfilled because the identity provider (IDP) that
  14. // was asked to verify the incoming identity token could not be reached. This
  15. // is often a transient error caused by network conditions. Retry the request
  16. // a limited number of times so that you don't exceed the request rate. If the
  17. // error persists, the identity provider might be down or not responding.
  18. ErrCodeIDPCommunicationErrorException = "IDPCommunicationError"
  19. // ErrCodeIDPRejectedClaimException for service response error code
  20. // "IDPRejectedClaim".
  21. //
  22. // The identity provider (IdP) reported that authentication failed. This might
  23. // be because the claim is invalid.
  24. //
  25. // If this error is returned for the AssumeRoleWithWebIdentity operation, it
  26. // can also mean that the claim has expired or has been explicitly revoked.
  27. ErrCodeIDPRejectedClaimException = "IDPRejectedClaim"
  28. // ErrCodeInvalidAuthorizationMessageException for service response error code
  29. // "InvalidAuthorizationMessageException".
  30. //
  31. // The error returned if the message passed to DecodeAuthorizationMessage was
  32. // invalid. This can happen if the token contains invalid characters, such as
  33. // linebreaks.
  34. ErrCodeInvalidAuthorizationMessageException = "InvalidAuthorizationMessageException"
  35. // ErrCodeInvalidIdentityTokenException for service response error code
  36. // "InvalidIdentityToken".
  37. //
  38. // The web identity token that was passed could not be validated by Amazon Web
  39. // Services. Get a new identity token from the identity provider and then retry
  40. // the request.
  41. ErrCodeInvalidIdentityTokenException = "InvalidIdentityToken"
  42. // ErrCodeMalformedPolicyDocumentException for service response error code
  43. // "MalformedPolicyDocument".
  44. //
  45. // The request was rejected because the policy document was malformed. The error
  46. // message describes the specific error.
  47. ErrCodeMalformedPolicyDocumentException = "MalformedPolicyDocument"
  48. // ErrCodePackedPolicyTooLargeException for service response error code
  49. // "PackedPolicyTooLarge".
  50. //
  51. // The request was rejected because the total packed size of the session policies
  52. // and session tags combined was too large. An Amazon Web Services conversion
  53. // compresses the session policy document, session policy ARNs, and session
  54. // tags into a packed binary format that has a separate limit. The error message
  55. // indicates by percentage how close the policies and tags are to the upper
  56. // size limit. For more information, see Passing Session Tags in STS (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
  57. // in the IAM User Guide.
  58. //
  59. // You could receive this error even though you meet other defined session policy
  60. // and session tag limits. For more information, see IAM and STS Entity Character
  61. // Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
  62. // in the IAM User Guide.
  63. ErrCodePackedPolicyTooLargeException = "PackedPolicyTooLarge"
  64. // ErrCodeRegionDisabledException for service response error code
  65. // "RegionDisabledException".
  66. //
  67. // STS is not activated in the requested region for the account that is being
  68. // asked to generate credentials. The account administrator must use the IAM
  69. // console to activate STS in that region. For more information, see Activating
  70. // and Deactivating Amazon Web Services STS in an Amazon Web Services Region
  71. // (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
  72. // in the IAM User Guide.
  73. ErrCodeRegionDisabledException = "RegionDisabledException"
  74. )