Versions in this module Expand all Collapse all v0 v0.9.2 Feb 6, 2026 Changes in this version + const MaxSessionDuration + const MinSessionDuration + var ErrInvalidMatcher = errors.New("invalid CEL matcher expression") + var ErrInvalidRoleArn = errors.New("invalid IAM role ARN format") + var ErrInvalidRoleMapping = errors.New("invalid role mapping configuration") + var ErrMissingRegion = errors.New("AWS region is required") + var ErrMissingRoleConfig = errors.New("either role_arn or role_mappings must be configured") + var ErrNoRoleMapping = errors.New("no role mapping found for JWT claims") + func ValidateConfig(cfg *Config) error + func ValidateRoleArn(roleArn string) error + type Config struct + FallbackRoleArn string + Region string + RoleClaim string + RoleMappings []RoleMapping + Service string + SessionDuration int32 + SessionNameClaim string + func (c *Config) GetRoleClaim() string + type RoleMapper struct + func NewRoleMapper(cfg *Config) (*RoleMapper, error) + func (rm *RoleMapper) SelectRole(claims map[string]any) (string, error) + type RoleMapping struct + Claim string + Matcher string + Priority int + RoleArn string