根据要求，我将直接输出内容中提供的示例，然后给出一个完整的示例代码。

以下是内容中提供的示例代码：

use aws_sdk_cognitoidentity::{Client, Error};
use aws_sdk_cognitoidentity::model::{IdentityPool, Credentials};

#[tokio::main]
async fn main() -> Result<(), Error> {
    // 加载配置
    let config = aws_config::load_from_env().await;
    
    // 创建客户端
    let client = Client::new(&config);

    // 创建身份池
    let pool_name = "my-identity-pool";
    let create_pool_output = client
        .create_identity_pool()
        .identity_pool_name(pool_name)
        .allow_unauthenticated_identities(true)
        .send()
        .await?;

    println!("Created identity pool: {:?}", create_pool_output.identity_pool_id());

    // 获取ID
    let identity_id = create_pool_output.identity_pool_id().unwrap();

    // 获取凭证
    let credentials_output = client
        .get_credentials_for_identity()
        .identity_id(identity_id.to_string())
        .send()
        .await?;

    if let Some(creds) = credentials_output.credentials() {
        println!("Access Key: {}", creds.access_key_id().unwrap());
        println!("Secret Key: {}", creds.secret_key().unwrap());
        println!("Session Token: {}", creds.session_token().unwrap());
        println!("Expiration: {:?}", creds.expiration());
    }

    Ok(())
}

现在，我将提供一个更完整的示例，展示如何集成第三方登录提供商和设置IAM角色：

use aws_sdk_cognitoidentity::{Client, Error};
use aws_sdk_cognitoidentity::model::{IdentityPool, Credentials, RoleMapping, RulesConfigurationType, MappingRule};

#[tokio::main]
async fn main() -> Result<(), Error> {
    // 加载AWS配置
    let config = aws_config::load_from_env().await;
    
    // 创建Cognito Identity客户端
    let client = Client::new(&config);

    // 1. 创建身份池并配置Google登录提供商
    let pool_name = "enhanced-identity-pool";
    let google_client_id = "your-google-client-id"; // 替换为实际的Google客户端ID
    
    let create_pool_output = client
        .create_identity_pool()
        .identity_pool_name(pool_name)
        .allow_unauthenticated_identities(false) // 禁用未认证访问
        .supported_login_providers("accounts.google.com".to_string(), google_client_id.to_string())
        .send()
        .await?;

    println!("创建的身份池ID: {:?}", create_pool_output.identity_pool_id());

    // 2. 设置IAM角色映射
    let identity_id = create_pool_output.identity_pool_id().unwrap();
    let authenticated_role_arn = "arn:aws:iam::123456789012:role/Cognito_Authenticated_Role"; // 替换为实际的角色ARN
    
    let role_mapping = RoleMapping::builder()
        .type_("Rules")
        .rules_configuration(
            RulesConfigurationType::builder()
                .rules(
                    MappingRule::builder()
                        .claim("iss")
                        .match_type("Equals")
                        .value("accounts.google.com")
                        .role_arn(authenticated_role_arn)
                        .build()
                )
                .build()
        )
        .build();

    client
        .set_identity_pool_roles()
        .identity_pool_id(identity_id.to_string())
        .roles("authenticated".to_string(), authenticated_role_arn.to_string())
        .role_mappings("accounts.google.com".to_string(), role_mapping)
        .send()
        .await?;

    println!("成功设置身份池角色映射");

    // 3. 获取Google登录后的凭证
    let google_token = "google-id-token"; // 替换为实际的Google ID令牌
    
    let credentials_output = client
        .get_credentials_for_identity()
        .identity_id(identity_id.to_string())
        .logins("accounts.google.com".to_string(), google_token.to_string())
        .send()
        .await?;

    if let Some(creds) = credentials_output.credentials() {
        println!("获取到的凭证:");
        println!("Access Key: {}", creds.access_key_id().unwrap());
        println!("Secret Key: {}", creds.secret_key().unwrap());
        println!("Session Token: {}", creds.session_token().unwrap());
        println!("过期时间: {:?}", creds.expiration());
    }

    Ok(())
}

代码说明：

1. 这个完整示例展示了：

   • 创建身份池并配置Google登录提供商
   • 设置IAM角色映射，为认证用户分配特定角色
   • 使用Google登录令牌获取临时AWS凭证

2. 主要功能点：

   • 通过supported_login_providers添加Google登录支持
   • 使用set_identity_pool_roles配置IAM角色映射
   • 通过get_credentials_for_identity获取认证后的凭证

3. 使用前需要：

   • 替换示例中的Google客户端ID和角色ARN
   • 确保已正确配置AWS凭证
   • 在Google开发者控制台设置OAuth客户端

注意事项：

• 实际使用时需要替换示例中的占位值为真实值
• 确保IAM角色具有适当的权限
• 生产环境应考虑错误处理和令牌刷新机制