[BEAM-13244] Add STS Assume role credentials provider to AwsModule (AWS SDK v2)

• Type: Improvement
• Status: Resolved
• Priority: P3
• Resolution: Fixed
• Fix Version/s: 2.36.0
• Component/s: io-java-aws
• Labels: aws
• Assignee: Moritz Mack
• Reporter: Moritz Mack
• Created: 15/Nov/21 12:48
• Updated: 16/Feb/22 15:03
• Resolved: 08/Dec/21 15:28

Description

Java IOs for AWS SDK v1 already have support for STS assume role credentials. Scope of this ticket is to add similar support for AWS SDK v2.

However, it's critical to note that support will be limited.

• After deserialization the StsAssumeRoleCredentialsProvider will always use the default STS client, regardless of what client was configured. The same limitation applies to the current support for AWS SDK v1.

• Also, the StsAssumeRoleCredentialsProvider may be configured to provide a AssumeRoleRequest on demand through a Supplier function. After deserialization the StsAssumeRoleCredentialsProvider will always use the AssumeRoleRequest that was provided during serialization.

Issue Links

• blocks: BEAM-13174 Deprecate amazon-web-services & kinesis module (SDK v1)
• is related to: BEAM-10335 Add STS Assume role credentials provider to AwsModule
• relates to: BEAM-13956 Serialize/deserialize StsClient when serializing/deserializing StsAssumeRoleCredentialsProvider
• links to: GitHub Pull Request #16116