chore(deps): bump aws-assume-role-lib from 1.7.0 to 2.10.0 in /lambda/src

[dependabot]

Bumps aws-assume-role-lib from 1.7.0 to 2.10.0.

Release notes

Sourced from aws-assume-role-lib's releases.

v2.10

What's Changed

• Fix CLI support
• Update boto3 version requirement for SourceIdentity validation

Changelog

Sourced from aws-assume-role-lib's changelog.

Changelog

aws-assume-role-lib uses monotonic versioning.

v2.10

• Fix CLI support
• Update boto3 version requirement for SourceIdentity validation

v2.9

• Fixed get_assumed_role_session_arn(), which incorrectly used iam instead of sts in the ARN.
• If RoleSessionName is not provided but SourceIdentity is, the SourceIdentity value will be used for RoleSessionName, rather than the botocore-generated value.
  • Added special value AUTOMATIC_ROLE_SESSION_NAME; setting RoleSessionName to this will cause it to use pre-2.8 behavior (i.e., always use botocore-generated value).
• Updated for PEP 561 (typing) compliance. Link to single-file module has changed to https://github.com/benkehoe/aws-assume-role-lib/stable/aws_assume_role_lib/aws_assume_role_lib.py
  • Link to single-file module now uses stable branch, which will point to a release commit.

v2.8

• If region_name=None (the default), the child session region is linked to the parent session region (not copied, which happens if region_name=True). If the parent session is using a config profile, this means the child session will have a region, rather than needing/using a separately-set region (e.g., via the AWS_DEFAULT_REGION environment variable). For safety, this release increments the compatibility version to 2.
• Added command line functionality.
• PolicyArns can be provided as a list of ARNs in addition to the verbose list-of-single-element-dicts required by the API.

v1.7

• generate_lambda_session_name() now performs truncation to return a value that is always 64 characters or less.

v1.6

• Ensured new functions get imported when doing from aws_assume_role_lib import *.

v1.5

• Added get_role_arn() and get_assumed_role_session_arn() functions.

v1.4

• Added support for the new SourceIdentity parameter.

Note that you don't need to wait for any future new parameters to be added to the library to start using them, because they can be passed in through the additional_kwargs parameter. For SourceIdentity, before v1.4 this would have looked like including the parameter additional_kwargs={'SourceIdentity': '...'} to the assume_role() call.

v1.3

• Added the generate_lambda_session_name() function.

v1.2

• Added region_name parameter.
• Added patch_boto3() function.

Commits

• 8afda13 v2.10
• 8277de5 Add GitHub Action to publish package
• 3ec7f99 Update boto3 version requirement for SourceIdentity validation
• 6da4045 Add mypy as dev dependency
• af80fc6 Update Lambda demo
• c3adf57 Fix CLI support
• a273c55 Update README.md
• 87694d2 Merge Lambda demo #7 from benkehoe/lambda-demo
• 37f1836 v2.9
• ed298a6 Use stable branch for link to single-file module
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)