github.com/aws/aws-sdk-go-v2 v1.41.7: aws.AnonymousCredentials

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials in pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7
Demonstrate these symbols/APIs:
  - github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:0d1e1e0a465812fe80f602a3a13475f6616c9e6beb4b55b189749ca67964cff9","contract":["aws.AnonymousCredentials implements aws.CredentialsProvider interface","aws.AnonymousCredentials.Retrieve returns credentials with Source AnonymousCredentials and no keys","aws.AnonymousCredentials.Retrieve returns sentinel error indicating credentials cannot sign requests","aws.Config accepts aws.AnonymousCredentials as its credentials provider"],"goal":"verify github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials in pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7","kind":"HOW","packages":["pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7"],"schemaVersion":1,"symbols":["github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials"]},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7"],"schemaVersion":1,"subject":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7","symbols":["github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials"],"verifierAdapter":"golang@1"}

module sample

go 1.26.6

require github.com/aws/aws-sdk-go-v2 v1.41.7

require github.com/aws/smithy-go v1.25.1 // indirect

github.com/aws/aws-sdk-go-v2 v1.41.7 h1:DWpAJt66FmnnaRIOT/8ASTucrvuDPZASqhhLey6tLY8=
github.com/aws/aws-sdk-go-v2 v1.41.7/go.mod h1:4LAfZOPHNVNQEckOACQx60Y8pSRjIkNZQz1w92xpMJc=
github.com/aws/smithy-go v1.25.1 h1:J8ERsGSU7d+aCmdQur5Txg6bVoYelvQJgtZehD12GkI=
github.com/aws/smithy-go v1.25.1/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=

{
  "schemaVersion": 1,
  "goal": "verify github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials in pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7",
  "kind": "HOW",
  "packages": [
    "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7"
  ],
  "symbols": [
    "github.com/aws/aws-sdk-go-v2/aws.AnonymousCredentials"
  ]
}

package main

import (
	"context"
	"fmt"
	"os"
	"strings"

	"github.com/aws/aws-sdk-go-v2/aws"
)

func main() {
	if err := runTests(); err != nil {
		fmt.Fprintf(os.Stderr, "Contract test failed: %v\n", err)
		os.Exit(1)
	}
	fmt.Println("All contract tests passed successfully.")
}

func runTests() error {
	ctx := context.Background()

	// 1. aws.AnonymousCredentials implements aws.CredentialsProvider interface
	var provider aws.CredentialsProvider = aws.AnonymousCredentials{}
	if provider == nil {
		return fmt.Errorf("expected non-nil CredentialsProvider implementation")
	}

	// 2. aws.AnonymousCredentials.Retrieve returns credentials with Source AnonymousCredentials and no keys
	anon := aws.AnonymousCredentials{}
	creds, err := anon.Retrieve(ctx)
	if creds.Source != "AnonymousCredentials" {
		return fmt.Errorf("unexpected creds.Source: got %q, want %q", creds.Source, "AnonymousCredentials")
	}
	if creds.HasKeys() {
		return fmt.Errorf("expected creds.HasKeys() to be false, got true")
	}
	if creds.AccessKeyID != "" || creds.SecretAccessKey != "" || creds.SessionToken != "" {
		return fmt.Errorf("expected empty key fields in anonymous credentials, got AccessKeyID=%q, SecretAccessKey=%q, SessionToken=%q",
			creds.AccessKeyID, creds.SecretAccessKey, creds.SessionToken)
	}
	if creds.CanExpire {
		return fmt.Errorf("expected CanExpire to be false, got true")
	}

	// 3. aws.AnonymousCredentials.Retrieve returns sentinel error indicating credentials cannot sign requests
	if err == nil {
		return fmt.Errorf("expected AnonymousCredentials.Retrieve to return an error, got nil")
	}
	expectedErrMsg := "the AnonymousCredentials is not a valid credential provider"
	if !strings.Contains(err.Error(), expectedErrMsg) {
		return fmt.Errorf("expected error containing %q, got %q", expectedErrMsg, err.Error())
	}

	// 4. aws.Config accepts aws.AnonymousCredentials as its credentials provider
	cfg := aws.Config{
		Credentials: anon,
	}
	if cfg.Credentials == nil {
		return fmt.Errorf("expected cfg.Credentials to be set")
	}
	cfgCreds, cfgErr := cfg.Credentials.Retrieve(ctx)
	if cfgErr == nil {
		return fmt.Errorf("expected cfg.Credentials.Retrieve to return error, got nil")
	}
	if cfgCreds.Source != "AnonymousCredentials" {
		return fmt.Errorf("expected cfg creds Source AnonymousCredentials, got %q", cfgCreds.Source)
	}

	return nil
}