[HADOOP-15141] Support IAM Assumed roles in S3A

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Fix Version/s: 3.1.0
• Component/s: fs/s3
• Target Version/s: 3.1.0
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 22/Dec/17 20:58
• Updated: 14/Aug/18 09:40
• Resolved: 17/Jan/18 08:16

Description

Add the ability to use assumed roles in S3A

• Add a property fs.s3a.assumed.role.arn for the ARN of the assumed role
• add a new provider which grabs that and other properties and then creates a STSAssumeRoleSessionCredentialsProvider from it.
• This also needs to support building up its own list of aws credential providers, from a different property; make the changes to S3AUtils for that
• Tests
• docs
• and have the AwsProviderList forward closeable to it.
• Get picked up automatically by DDB/s3guard

Issue Links

• is related to: HADOOP-15176 Enhance IAM Assumed Role support in S3A client
• is related to: HADOOP-15671 AliyunOSS: Support Assume Roles in AliyunOSS