[HADOOP-16470] Make last AWS credential provider in default auth chain EC2ContainerCredentialsProviderWrapper

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: fs/s3
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 30/Jul/19 12:48
• Updated: 22/Aug/19 18:35
• Resolved: 22/Aug/19 16:29

Description

There's a new credential provider in the AWS SDK, com.amazonaws.auth.EC2ContainerCredentialsProviderWrapper

this is designed to work within AWS containers as well as EC2 VMs, using env vars to find container credentials first, falling back to the IAM metadata service. This way, when deployed in a container or EC2 VM, it will always find the session credentials for the deployed IAM Role

Issue Links

• contains: HADOOP-16471 Restore (documented) fs.s3a.SharedInstanceProfileCredentialsProvider
• links to: GitHub Pull Request #1185