Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ClientAuthenticationFactory should enable to set the region for AWS IAM Authentication #681

Closed
Amuerte opened this issue Mar 17, 2023 · 0 comments
Assignees
Milestone

Comments

@Amuerte
Copy link

Amuerte commented Mar 17, 2023

In some cases, the Vault instance which is making the proxy call to AWS, is configured to use the global STS endpoint (on us-east-1), which is the default behavior. But when your application is deployed in another region, the authentication will fail as spring-vault use the region from your application and the request to AWS are signed with that region.

As a consequence, you end up with an application deployed in one region and a Vault instance using the global STS endpoint, without no easy way to use the spring-vault client to login.

I propose to enable the region configuration in the ClientAuthenticationFactory and will be glad to help with a PR.

PS:
The problem was initially discussed in this issue from spring-vault.

@mp911de mp911de self-assigned this Mar 20, 2023
@mp911de mp911de added this to the 4.0.1 milestone Mar 28, 2023
@mp911de mp911de changed the title ClientAuthenticationFactory should enable to set the region for AWS IAM Authentication ClientAuthenticationFactory should enable to set the region for AWS IAM Authentication Mar 28, 2023
spencergibb pushed a commit that referenced this issue Sep 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants