aws

const (
	// ConfigRegion represents region key required in the map "config"
	ConfigRegion = "region"
	// ConfigRole represents the key for the ARN of the role which can be assumed.
	// It is optional.
	ConfigRole = "role"

	// ConfigEFSVaultName represents the key for the EFS vault name in the map
	// "config". It is optional.
	ConfigEFSVaultName = "efsVaultName"

	// ConfigWebIdentityToken represents the key for AWS Web Identity token
	ConfigWebIdentityToken = "webIdentityToken"

	// AccessKeyID represents AWS Access key ID
	AccessKeyID = "AWS_ACCESS_KEY_ID"
	// SecretAccessKey represents AWS Secret Access Key
	SecretAccessKey = "AWS_SECRET_ACCESS_KEY"
	// SessionToken represents AWS Session Key
	SessionToken = "AWS_SESSION_TOKEN"
	// Region represents AWS region
	Region = "AWS_REGION"

	// From AWS SDK "aws/session/env_config.go"
	WebIdentityTokenFilePathEnvKey = "AWS_WEB_IDENTITY_TOKEN_FILE"
	RoleARNEnvKey                  = "AWS_ROLE_ARN"

	// TODO: Make this configurable via `config`
	AssumeRoleDurationDefault = 60 * time.Minute
	AssumeRoleDuration        = "assumeRoleDuration"
)