[FLINK-8417] Support STSAssumeRoleSessionCredentialsProvider in FlinkKinesisConsumer

• Type: New Feature
• Status: Open
• Priority: Not a Priority
• Resolution: Unresolved
• Component/s: Connectors / Kinesis
• Labels: auto-deprioritized-major auto-deprioritized-minor usability
• Assignee: Unassigned
• Reporter: Tzu-Li (Gordon) Tai
• Created: 12/Jan/18 00:07
• Updated: 10/Dec/21 22:38

Description

As discussed in ML: http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/Kinesis-Connectors-With-Temporary-Credentials-td17734.html.

Users need the functionality to access cross-account AWS Kinesis streams, using AWS Temporary Credentials [1].

We should add support for AWSConfigConstants.CredentialsProvider.STSAssumeRole, which internally would use the STSAssumeRoleSessionCredentialsProvider [2] in AWSUtil#getCredentialsProvider(Properties).

[1] https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html
[2] https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/STSAssumeRoleSessionCredentialsProvider.html