Struct SigV4Signer 

pub struct SigV4Signer { /* private fields */ }

Signs REST catalog requests the way Iceberg Java’s RESTSigV4AuthSession does. Carries no credentials, so one signer serves every session.

Built with SigV4Signer::builder.

Implementations

impl SigV4Signer

pub fn builder() -> SigV4SignerBuilder<((), (), ())>

Create a builder for building SigV4Signer. On the builder, call .region(...), .service(...), .mode(...) to set the values of the fields. Finally, call .build() to create the instance of SigV4Signer.

impl SigV4Signer

pub fn sign( &self, request: &mut HttpRequest, credentials: &Credentials, ) -> Result<()>

Signs request in place. An existing Authorization moves to Original-Authorization, and a caller’s x-amz-date, x-amz-content-sha256 or x-amz-security-token that the signer overwrites moves to Original-<name> (Java keeps a caller’s content hash when there is a body). Userinfo leaves the URL, and a + in the query becomes %20, so write a literal plus as %2B.

Uses credentials as given and never refreshes them: resolve temporary ones from their provider before each call.

On error, including for a streaming body or a non-UTF-8 header, the request is left unchanged.

Send the result through a client that does not follow redirects: a redirect replays the signature, and across hosts reqwest drops Authorization but keeps Original-Authorization.

aws_sigv4 traces requests without redacting Original-Authorization. A tracing subscriber is muted for the call, but the log bridge (no subscriber, or log-always) still forwards those events, so keep aws_sigv4 below trace level there.

Trait Implementations

impl Clone for SigV4Signer

fn clone(&self) -> SigV4Signer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigV4Signer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.