class Aws::S3::AccessGrantsCredentials

def get_data_access_options
  @gdao ||= begin
    input = Aws::S3Control::Client.api.operation(:get_data_access).input
    Set.new(input.shape.member_names)
  end
end

def initialize(options = {})
  @client = options[:client]
  @get_data_access_params = {}
  options.each_pair do |key, value|
    if self.class.get_data_access_options.include?(key)
      @get_data_access_params[key] = value
    end
  end
  @async_refresh = true
  super
end

def refresh
  c = @client.get_data_access(@get_data_access_params)
  credentials = c.credentials
  @matched_grant_target = c.matched_grant_target
  @credentials = Credentials.new(
    credentials.access_key_id,
    credentials.secret_access_key,
    credentials.session_token
  )
  @expiration = credentials.expiration
end