[NIFI-11288] When using AssumeRoleWithWebIdentity method, the STS dependencies is missing.

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Extensions, NiFi Registry
• Assignee: Unassigned
• Reporter: Julian Zhang
• Created: 15/Mar/23 04:46
• Updated: 15/Mar/23 07:15

Description

When NiFi Processors or NiFi Registry accesses AWS services using the AssumeRoleWithWebIdentity method in the AWSCredentialsProviderChain class, the correct credentials are not available due to the lack of STS dependencies.

2023-03-14 15:56:44,700 DEBUG [Timer-Driven Process Thread-2] c.a.auth.AWSCredentialsProviderChain Unable to load credentials from WebIdentityTokenCredentialsProvider: To use assume role profiles the aws-java-sdk-sts module must be on the class path. 

ADDITIONAL INFORMATION: STS lib needs to be on class path for the WebidentityTokenCredentialsProvider to work properly, otherwise it will be skipped in DefaultAWSCredentialsProviderChain.
https://github.com/aws/aws-sdk-java/issues/2136

Issue Links

• links to: GitHub Pull Request #7045