mirror of
https://github.com/BerriAI/litellm.git
synced 2026-08-28 05:25:59 +00:00
test(bedrock): cover the aws request param merge guard in the unit suite
This commit is contained in:
parent
b63ba63655
commit
b5eed5e526
1 changed files with 52 additions and 0 deletions
|
|
@ -473,3 +473,55 @@ def test_capability_lookups_fall_back_to_base_model_when_regional_entry_lacks_fi
|
|||
|
||||
assert is_claude_4_5_on_bedrock(regional) is True
|
||||
assert bedrock_converse_supports_parallel_tool_use_config(regional) is True
|
||||
|
||||
|
||||
def test_merge_bedrock_aws_request_params_strips_caller_identity_when_deployment_has_static_credentials():
|
||||
from litellm.llms.bedrock.common_utils import merge_bedrock_aws_request_params
|
||||
|
||||
merged = merge_bedrock_aws_request_params(
|
||||
litellm_params={
|
||||
"aws_access_key_id": "deployment-key",
|
||||
"aws_secret_access_key": "deployment-secret",
|
||||
"aws_region_name": "us-west-2",
|
||||
"s3_bucket_name": "deployment-bucket",
|
||||
},
|
||||
optional_params={
|
||||
"aws_access_key_id": "caller-key",
|
||||
"aws_profile_name": "caller-profile",
|
||||
"aws_role_name": "arn:aws:iam::123456789012:role/caller",
|
||||
"aws_session_token": "caller-token",
|
||||
"aws_web_identity_token": "caller-web-identity",
|
||||
"timeout": 600,
|
||||
},
|
||||
)
|
||||
|
||||
assert merged["aws_access_key_id"] == "deployment-key"
|
||||
assert merged["aws_secret_access_key"] == "deployment-secret"
|
||||
assert merged["aws_region_name"] == "us-west-2"
|
||||
assert merged["s3_bucket_name"] == "deployment-bucket"
|
||||
assert merged["timeout"] == 600
|
||||
for stripped in (
|
||||
"aws_profile_name",
|
||||
"aws_role_name",
|
||||
"aws_session_token",
|
||||
"aws_web_identity_token",
|
||||
):
|
||||
assert stripped not in merged
|
||||
|
||||
|
||||
def test_merge_bedrock_aws_request_params_keeps_caller_credentials_without_static_deployment_credentials():
|
||||
from litellm.llms.bedrock.common_utils import merge_bedrock_aws_request_params
|
||||
|
||||
merged = merge_bedrock_aws_request_params(
|
||||
litellm_params={"aws_region_name": "us-west-2"},
|
||||
optional_params={
|
||||
"aws_access_key_id": "caller-key",
|
||||
"aws_secret_access_key": "caller-secret",
|
||||
"aws_session_token": "caller-token",
|
||||
},
|
||||
)
|
||||
|
||||
assert merged["aws_access_key_id"] == "caller-key"
|
||||
assert merged["aws_secret_access_key"] == "caller-secret"
|
||||
assert merged["aws_session_token"] == "caller-token"
|
||||
assert merged["aws_region_name"] == "us-west-2"
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue