Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[object-store]: Implement credential_process support for S3 #6422

Open
edmondop opened this issue Sep 19, 2024 · 2 comments
Open

[object-store]: Implement credential_process support for S3 #6422

edmondop opened this issue Sep 19, 2024 · 2 comments
Labels
enhancement Any new improvement worthy of a entry in the changelog

Comments

@edmondop
Copy link

Credential process is a flexible solution for providing custom authentication mechanisms for object store. It is described as a part of the AWS SDK documentation and implementing it would allow more complex use cases to be fully supported by the current setup, without adding particular complexity.

How does it work?

When user decides to use the credential process, when a client needs credentials it invokes the process, which replies with a defined schema like so:

{
    "Version": 1,
    "AccessKeyId": "an AWS access key",
    "SecretAccessKey": "your AWS secret access key",
    "SessionToken": "the AWS session token for temporary credentials", 
    "Expiration": "RFC3339 timestamp for when the credentials expire"
}  

The client knows when the expiration will occur, and will re-invoke the process when required.

What can we do?

We can then extend the AmazonS3Builder to support this use case via an environment variable

@edmondop edmondop added the enhancement Any new improvement worthy of a entry in the changelog label Sep 19, 2024
@ByteBaker
Copy link
Contributor

@alamb since the linked PR is closed, can we mark this as closed?

@edmondop
Copy link
Author

This is new, and although related to the linked issues, it is not closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Any new improvement worthy of a entry in the changelog
Projects
None yet
Development

No branches or pull requests

2 participants