Skip to content

Re-add support for STS credential provider for S3 #14476

@xokdvium

Description

@xokdvium

Describe the bug

The recent migration away from aws-sdk-cpp (cc @lovesegfault) has most likely regressed STS credentials handling (judging from me poking at aws-crt-cpp code) added in #12646. STS is not part of the default credentials chain:

            /**
             * Configuration options for a provider that implements a cached provider chain
             * based on the AWS SDK defaults:
             *
             *   Cache-Of(Environment -> Profile -> IMDS)
             */
            struct AWS_CRT_CPP_API CredentialsProviderChainDefaultConfig

Aws::Crt::Auth::CredentialsProviderSTSConfig needs special handling and reading of the config to fish out the RoleArn.

The code for STS provider factory is at https://github.com/awslabs/aws-crt-cpp/blob/aa37a25c9a4db2f24ad44f186bc5726057a21e0a/source/auth/Credentials.cpp#L451C72-L489.

Steps To Reproduce

Don't have access to AWS infra to make a reproducer for this.

Expected behavior

Metadata

Additional context

Checklist


Add 👍 to issues you find important.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions