{
  "context": "This criteria evaluates how well the engineer uses the aws-requests-auth package to handle different types of AWS credentials (static and temporary) for authenticating HTTP requests to AWS services. The focus is on proper use of credential management features provided by the package.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "AWSRequestsAuth Initialization",
      "description": "Uses the AWSRequestsAuth class from aws-requests-auth to create authentication handlers with proper initialization parameters (aws_access_key, aws_secret_access_key, aws_host, aws_region, aws_service).",
      "max_score": 25
    },
    {
      "name": "Static Credentials",
      "description": "Correctly implements static credential handling using AWSRequestsAuth with aws_access_key and aws_secret_access_key parameters, without using aws_token.",
      "max_score": 20
    },
    {
      "name": "Temporary Credentials",
      "description": "Properly uses the aws_token parameter when initializing AWSRequestsAuth to handle AWS STS temporary credentials and session tokens.",
      "max_score": 25
    },
    {
      "name": "Multi-Service Configuration",
      "description": "Demonstrates correct configuration of AWSRequestsAuth for different AWS services by properly setting the aws_service and aws_host parameters for services like 'es', 'execute-api', and 'lambda'.",
      "max_score": 15
    },
    {
      "name": "Requests Integration",
      "description": "Returns authentication handlers that are compatible with the requests library auth parameter, leveraging AWSRequestsAuth's implementation of the AuthBase interface.",
      "max_score": 15
    }
  ]
}