@@ -18,6 +18,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
1818 *
1919 * > The size of the security token that STS API operations return is not fixed. We strongly recommend that you make no
2020 * > assumptions about the maximum size.
21+ *
22+ * @var Credentials|null
2123 */
2224 private $ credentials ;
2325
@@ -26,6 +28,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
2628 * `WebIdentityToken` that was submitted with the `AssumeRoleWithWebIdentity` call. The identifier is typically unique
2729 * to the user and the application that acquired the `WebIdentityToken` (pairwise identifier). For OpenID Connect ID
2830 * tokens, this field contains the value returned by the identity provider as the token's `sub` (Subject) claim.
31+ *
32+ * @var string|null
2933 */
3034 private $ subjectFromWebIdentityToken ;
3135
@@ -34,26 +38,34 @@ class AssumeRoleWithWebIdentityResponse extends Result
3438 * resulting temporary security credentials. For example, you can reference these credentials as a principal in a
3539 * resource-based policy by using the ARN or assumed role ID. The ARN and ID include the `RoleSessionName` that you
3640 * specified when you called `AssumeRole`.
41+ *
42+ * @var AssumedRoleUser|null
3743 */
3844 private $ assumedRoleUser ;
3945
4046 /**
4147 * A percentage value that indicates the packed size of the session policies and session tags combined passed in the
4248 * request. The request fails if the packed size is greater than 100 percent, which means the policies and tags exceeded
4349 * the allowed space.
50+ *
51+ * @var int|null
4452 */
4553 private $ packedPolicySize ;
4654
4755 /**
4856 * The issuing authority of the web identity token presented. For OpenID Connect ID tokens, this contains the value of
4957 * the `iss` field. For OAuth 2.0 access tokens, this contains the value of the `ProviderId` parameter that was passed
5058 * in the `AssumeRoleWithWebIdentity` request.
59+ *
60+ * @var string|null
5161 */
5262 private $ provider ;
5363
5464 /**
5565 * The intended audience (also known as client ID) of the web identity token. This is traditionally the client
5666 * identifier issued to the application that requested the web identity token.
67+ *
68+ * @var string|null
5769 */
5870 private $ audience ;
5971
@@ -76,6 +88,8 @@ class AssumeRoleWithWebIdentityResponse extends Result
7688 * [^1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts#iam-term-role-chaining
7789 * [^2]: https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.html
7890 * [^3]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
91+ *
92+ * @var string|null
7993 */
8094 private $ sourceIdentity ;
8195
0 commit comments