[smithy-rs] Add credentials exposure test & fix STS + SSO (#2603)

## Motivation and Context
- credentials providers may leak credentials in the HTTP body at the
debug level

## Description
This adds a test to aws-config that looks for leaked credentials in all
of our provider integration tests—since these test use AWS APIs under
the hood, this also serves to test AWS services in general.

To support this, `sensitive` was added to the ParseHttpResponse trait
and code was generated to take action based on this change.

- [x] Add environment variable to force logging of the body
- [x] consider if we want to suppress request body logging as well

## Testing
<!--- Please describe in detail how you tested your changes -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

## Checklist
<!--- If a checkbox below is not applicable, then please DELETE it
rather than leaving it unchecked -->
- [x] I have updated `CHANGELOG.next.toml` if I made changes to the
smithy-rs codegen or runtime crates
- [x] I have updated `CHANGELOG.next.toml` if I made changes to the AWS
SDK, generated SDK code, or SDK runtime crates

----

_By submitting this pull request, I confirm that you can use, modify,
copy, and redistribute this contribution, under the terms of your
choice._

---------

Co-authored-by: John DiSanti <jdisanti@amazon.com>

Author: 2 people

sdk/accessanalyzer/src/operation/apply_archive_rule.rs

@@ -99,6 +99,7 @@ impl aws_smithy_http::response::ParseStrictResponse for ApplyArchiveRule {
                         crate::protocol_serde::shape_apply_archive_rule::de_apply_archive_rule_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/cancel_policy_generation.rs

@@ -98,6 +98,7 @@ impl aws_smithy_http::response::ParseStrictResponse for CancelPolicyGeneration {
                         crate::protocol_serde::shape_cancel_policy_generation::de_cancel_policy_generation_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/create_access_preview.rs

@@ -99,6 +99,7 @@ impl aws_smithy_http::response::ParseStrictResponse for CreateAccessPreview {
                         crate::protocol_serde::shape_create_access_preview::de_create_access_preview_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/create_analyzer.rs

@@ -99,6 +99,7 @@ impl aws_smithy_http::response::ParseStrictResponse for CreateAnalyzer {
                         crate::protocol_serde::shape_create_analyzer::de_create_analyzer_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/create_archive_rule.rs

@@ -105,6 +105,7 @@ impl aws_smithy_http::response::ParseStrictResponse for CreateArchiveRule {
                         crate::protocol_serde::shape_create_archive_rule::de_create_archive_rule_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/delete_analyzer.rs

@@ -111,6 +111,7 @@ impl aws_smithy_http::response::ParseStrictResponse for DeleteAnalyzer {
                         crate::protocol_serde::shape_delete_analyzer::de_delete_analyzer_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/delete_archive_rule.rs

@@ -117,6 +117,7 @@ impl aws_smithy_http::response::ParseStrictResponse for DeleteArchiveRule {
                         crate::protocol_serde::shape_delete_archive_rule::de_delete_archive_rule_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/get_access_preview.rs

@@ -109,6 +109,7 @@ impl aws_smithy_http::response::ParseStrictResponse for GetAccessPreview {
                         crate::protocol_serde::shape_get_access_preview::de_get_access_preview_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/get_analyzed_resource.rs

@@ -109,6 +109,7 @@ impl aws_smithy_http::response::ParseStrictResponse for GetAnalyzedResource {
                         crate::protocol_serde::shape_get_analyzed_resource::de_get_analyzed_resource_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.

sdk/accessanalyzer/src/operation/get_analyzer.rs

@@ -98,6 +98,7 @@ impl aws_smithy_http::response::ParseStrictResponse for GetAnalyzer {
                         crate::protocol_serde::shape_get_analyzer::de_get_analyzer_http_response(status, headers, body)
                      }
                 }
+                
             }
 
 /// Do not use this.