def __init__(<EOL>self,<EOL>auth_key,<EOL>user_auth_key,<EOL>to_auth_context,<EOL>region,<EOL>scoped_auth_keys=None,<EOL>minimum_token_version=<NUM_LIT:1>,<EOL>maximum_token_version=<NUM_LIT:2>,<EOL>auth_token_max_lifetime=<NUM_LIT>,<EOL>aws_creds=None,<EOL>extra_context=None,<EOL>endpoint_url=None<EOL>):
self.auth_key = auth_key<EOL>self.user_auth_key = user_auth_key<EOL>self.to_auth_context = to_auth_context<EOL>self.region = region<EOL>if scoped_auth_keys is None:<EOL><INDENT>self.scoped_auth_keys = {}<EOL><DEDENT>else:<EOL><INDENT>self.scoped_auth_keys = scoped_auth_keys<EOL><DEDENT>self.minimum_token_version = minimum_token_version<EOL>self.maximum_token_version = maximum_token_version<EOL>self.auth_token_max_lifetime = auth_token_max_lifetime<EOL>self.aws_creds = aws_creds<EOL>if aws_creds:<EOL><INDENT>self.kms_client = kmsauth.services.get_boto_client(<EOL>'<STR_LIT>',<EOL>region=self.region,<EOL>aws_access_key_id=self.aws_creds['<STR_LIT>'],<EOL>aws_secret_access_key=self.aws_creds['<STR_LIT>'],<EOL>aws_session_token=self.aws_creds['<STR_LIT>'],<EOL>endpoint_url=endpoint_url<EOL>)<EOL><DEDENT>else:<EOL><INDENT>self.kms_client = kmsauth.services.get_boto_client(<EOL>'<STR_LIT>',<EOL>region=self.region,<EOL>endpoint_url=endpoint_url<EOL>)<EOL><DEDENT>if extra_context is None:<EOL><INDENT>self.extra_context = {}<EOL><DEDENT>else:<EOL><INDENT>self.extra_context = extra_context<EOL><DEDENT>self.TOKENS = lru.LRUCache(<NUM_LIT>)<EOL>self.KEY_METADATA = {}<EOL>self._validate()<EOL>
Create a KMSTokenValidator object.

        Args:
            auth_key: A list of KMS key ARNs or aliases to use for service
                authentication. Required.
            user_auth_key: A list of KMS key ARNs or aliases to use for user
                authentication. Required.
            to_auth_context: The KMS encryption context to use for the to
                context for authentication. Required.
            region: AWS region to connect to. Required.
            token_version: The version of the authentication token. Default: 2
            token_cache_file: he location to use for caching the auth token.
                If set to empty string, no cache will be used. Default: None
            token_lifetime: Lifetime of the authentication token generated.
                Default: 10
            aws_creds: A dict of AccessKeyId, SecretAccessKey, SessionToken.
                Useful if you wish to pass in assumed role credentials or MFA
                credentials. Default: None
            endpoint_url: A URL to override the default endpoint used to access
                the KMS service. Default: None