[FLINK-29496] Add Configuration for STS endpoint when using ASSUME_ROLE credential provider

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.16.0, 1.15.2
• Fix Version/s: 1.17.0
• Component/s: Connectors / Kinesis
• Labels: pull-request-available
• Assignee: Aleksandr Pilipenko
• Reporter: Aleksandr Pilipenko
• Created: 03/Oct/22 14:07
• Updated: 19/Jun/23 10:33
• Resolved: 31/Oct/22 14:58

Description

When using Kinesis connector with credentials provider configured as ASSUME_ROLE in the job running in VPC without internet connection, credentials provider logic tries to access global STS endpoint, sts.amazonaws.com. However, only regional endpoints for STS are available in that case.

Connector need support for configuring STS endpoint to allow such use-case.

Issue Links

• is duplicated by: FLINK-32375 Flink AWS Source AssumeRole in VPC
• links to: GitHub Pull Request #21129