assertThat(locations).isNotEmpty();
    for (ClassPath.LocationInfo location : locations) {
      ImmutableSet<ResourceInfo> resources = location.scanResources();
      assertThat(location.scanResources()).containsExactlyElementsIn(resources);
    }
  }

  public void testLocationsFrom_idempotentLocations() {
    ImmutableSet<ClassPath.LocationInfo> locations =

    tokens = json.loads(id_token_response.text)
    id_token = tokens['id_token']

    response = sts_client.assume_role_with_web_identity(
        RoleArn='arn:aws:iam::123456789012:user/svc-internal-api',
        RoleSessionName='test',
        WebIdentityToken=id_token,
        DurationSeconds=3600
    )

    s3_resource = boto3.resource('s3',

mvn clirr:check
```

### Architecture Overview

The library follows a layered architecture:

- **Context Layer**: `CIFSContext` interface provides the main entry point
- **Resource Layer**: `SmbResource` interface represents SMB network resources  
- **Protocol Layers**: Separate SMB1 (`jcifs.internal.smb1/`) and SMB2/3 (`jcifs.internal.smb2/`) implementations
- **Authentication**: NTLM, Kerberos, SPNEGO unified subsystem

- Provide detailed error messages with context
- Add logging with contextual information

### Resource Files

- `src/main/resources/suggest_indices/suggest.json` - Index settings
- `src/main/resources/suggest_indices/suggest/mappings-default.json` - Field mappings
- `src/main/resources/suggest_settings/` - Default configurations

---

## Testing

### Test Framework

        /**
         * Verifies that the handle is automatically closed in a try-with-resources statement.
         * @throws Exception if an error occurs.
         */
        @Test
        public void testTryWithResources() throws Exception {
            // This test ensures that any implementation of SmbPipeHandle can be used in a try-with-resources block.
            try (SmbPipeHandle handle = smbPipeHandle) {

                    // Resource usage simulation
                    session.getConfig();
                }
            }, "SmbSession should work with try-with-resources");

            verify(mockSession, times(1)).close();
        }

        @Test
        @DisplayName("Should handle exceptions during resource cleanup")

boto3.set_stream_logger('boto3.resources', logging.DEBUG)

bc_session = get_session()
bc_session.get_component('credential_provider').insert_before(
    'env',
    ClientGrantsCredentialProvider('NZLOOFRSluw9RfIkuHGqfk1HFp4a',
                                   '0Z4VTG8uJBSekn42HE40DK9vQb4a'),
)

boto3_session = Session(botocore_session=bc_session)
s3 = boto3_session.resource('s3', endpoint_url='http://localhost:9000')

		return
	}
	writeSuccessResponseJSON(w, resp)
}

// checkKMSActionAllowed checks for authorization for a specific action on a resource.
func checkKMSActionAllowed(r *http.Request, owner bool, cred auth.Credentials, action policy.KMSAction, resource string) bool {
	return globalIAMSys.IsAllowed(policy.Args{
		AccountName:     cred.AccessKey,
		Groups:          cred.Groups,

# AssumeRole [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io)

## Introduction

Returns a set of temporary security credentials that you can use to access MinIO resources. AssumeRole requires authorization credentials for an existing user on MinIO. The advantages of this API are

	if len(res) != 2 {
		err = errors.New("invalid ARN - resource does not contain a \"/\"")
		return arn, err
	}

	if res[0] != string(arnResourceTypeRole) {
		err = errors.New("invalid ARN: resource type is invalid")
		return arn, err
	}

	if !validResourceIDRegex.MatchString(res[1]) {
		err = fmt.Errorf("invalid resource ID: %s", res[1])
		return arn, err
	}

	arn = ARN{