diff --git a/.eslintrc.js b/.eslintrc.js
index 41f051d3aefe..585e943f18be 100644
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -28,6 +28,16 @@ module.exports = {
     /** Errors */
     "simple-import-sort/imports": "error",
     "sort-export-all/sort-export-all": "error",
+    "no-restricted-imports": [
+      "error",
+      {
+        patterns: [
+          {
+            group: ["*src*", "!*CsrC*", "*dist-*"],
+          },
+        ],
+      },
+    ],
   },
   ignorePatterns: [
     "packages/nested-clients/src/submodules/**/protocols/*.ts",
diff --git a/packages/credential-provider-web-identity/src/fromTokenFile.ts b/packages/credential-provider-web-identity/src/fromTokenFile.ts
index e64f61e7213a..8ae375c9b5e7 100644
--- a/packages/credential-provider-web-identity/src/fromTokenFile.ts
+++ b/packages/credential-provider-web-identity/src/fromTokenFile.ts
@@ -1,6 +1,10 @@
 import { setCredentialFeature } from "@aws-sdk/core/client";
-import type { AttributedAwsCredentialIdentity, CredentialProviderOptions } from "@aws-sdk/types";
-import { AwsIdentityProperties, RuntimeConfigAwsCredentialIdentityProvider } from "@aws-sdk/types/src";
+import type {
+  AttributedAwsCredentialIdentity,
+  AwsIdentityProperties,
+  CredentialProviderOptions,
+  RuntimeConfigAwsCredentialIdentityProvider,
+} from "@aws-sdk/types";
 import { CredentialsProviderError } from "@smithy/property-provider";
 import { externalDataInterceptor } from "@smithy/shared-ini-file-loader";
 import { readFileSync } from "fs";