You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "Moritz Mack (Jira)" <ji...@apache.org> on 2021/12/03 10:07:00 UTC

[jira] [Updated] (BEAM-13244) Add STS Assume role credentials provider to AwsModule (AWS SDK v2)

     [ https://issues.apache.org/jira/browse/BEAM-13244?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Moritz Mack updated BEAM-13244:
-------------------------------
    Description: 
Java IOs for AWS SDK v1 already have support for STS assume role credentials. Scope of this ticket is to add similar support for AWS SDK v2.

However, it's critical to note that support will be limited.
 * After deserialization the {{StsAssumeRoleCredentialsProvider}} will always use the default STS client, regardless of what client was configured. The same limitation applies to the current support for AWS SDK v1.

 * Also, the {{StsAssumeRoleCredentialsProvider}} may be configured to provide a {{AssumeRoleRequest}} on demand through a {{Supplier}} function. After deserialization the {{StsAssumeRoleCredentialsProvider}} will always use the {{AssumeRoleRequest}} that was provided during serialization.

> Add STS Assume role credentials provider to AwsModule (AWS SDK v2)
> ------------------------------------------------------------------
>
>                 Key: BEAM-13244
>                 URL: https://issues.apache.org/jira/browse/BEAM-13244
>             Project: Beam
>          Issue Type: Improvement
>          Components: io-java-aws
>            Reporter: Moritz Mack
>            Assignee: Moritz Mack
>            Priority: P3
>              Labels: aws
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Java IOs for AWS SDK v1 already have support for STS assume role credentials. Scope of this ticket is to add similar support for AWS SDK v2.
> However, it's critical to note that support will be limited.
>  * After deserialization the {{StsAssumeRoleCredentialsProvider}} will always use the default STS client, regardless of what client was configured. The same limitation applies to the current support for AWS SDK v1.
>  * Also, the {{StsAssumeRoleCredentialsProvider}} may be configured to provide a {{AssumeRoleRequest}} on demand through a {{Supplier}} function. After deserialization the {{StsAssumeRoleCredentialsProvider}} will always use the {{AssumeRoleRequest}} that was provided during serialization.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)