sagemaker.core.token_generator

sagemaker.core.token_generator#

AWS SageMaker Token Generator.

A lightweight module for generating short-term bearer tokens for AWS SageMaker API authentication. Provides the generate_token helper and the lower-level SageMakerTokenGenerator class.

Example:

>>> from sagemaker.core.token_generator import generate_token
>>> token = generate_token(region="us-east-1")

Functions

generate_token([region, ...])

Generate a short-lived AWS SageMaker bearer token.
class sagemaker.core.token_generator.SageMakerTokenGenerator[source]#

Bases: object

Generate short-lived AWS SageMaker bearer tokens.

get_token(credentials: botocore.credentials.Credentials, region: str) → str[source]#

Generate a token using provided credentials and region.

Parameters:

  • credentials (Credentials) – AWS credentials to sign the request.

  • region (str) – AWS region.

Returns:

A bearer token string.

Return type:

str

Raises:

ValueError – If inputs are invalid.

sagemaker.core.token_generator.generate_token(region: str | None = None, aws_credentials_provider: CredentialProvider | None = None, expiry: timedelta = datetime.timedelta(seconds=43200)) → str[source]#

Generate a short-lived AWS SageMaker bearer token.

Parameters:

  • region (str) – AWS region. Falls back to the AWS_REGION environment variable when not provided.

  • aws_credentials_provider (CredentialProvider) – Optional credential provider. Uses the default AWS credential chain when omitted.

  • expiry (timedelta) – Token lifetime. Must be between 1 second and 12 hours inclusive. Defaults to 12 hours.

Returns:

A bearer token string.

Return type:

str

Raises:

  • ValueError – If region is missing or expiry is out of range.

  • RuntimeError – If no valid AWS credentials are found.

Modules

token_generator

SageMaker Token Generator core signing logic.
Contents