Package software.amazon.awssdk.services.sts.auth

Class StsWebIdentityTokenFileCredentialsProvider

java.lang.Object
software.amazon.awssdk.services.sts.auth.StsCredentialsProvider
software.amazon.awssdk.services.sts.auth.StsWebIdentityTokenFileCredentialsProvider
All Implemented Interfaces:
AutoCloseable, AwsCredentialsProvider, IdentityProvider<AwsCredentialsIdentity>, ToCopyableBuilder<StsWebIdentityTokenFileCredentialsProvider.Builder,StsWebIdentityTokenFileCredentialsProvider>, SdkAutoCloseable
@SdkPublicApi public final class StsWebIdentityTokenFileCredentialsProvider extends StsCredentialsProvider implements ToCopyableBuilder<StsWebIdentityTokenFileCredentialsProvider.Builder,StsWebIdentityTokenFileCredentialsProvider>
An implementation of AwsCredentialsProvider that periodically sends an AssumeRoleWithWebIdentityRequest to the AWS Security Token Service to maintain short-lived sessions to use for authentication. These sessions are updated using a single calling thread (by default) or asynchronously (if StsCredentialsProvider.BaseBuilder.asyncCredentialUpdateEnabled(Boolean) is set). Unlike StsAssumeRoleWithWebIdentityCredentialsProvider, this reads the web identity information, including AWS role ARN, AWS session name and the location of a web identity token file from system properties and environment variables. The web identity token file is expected to contain the web identity token to use with each request. If the credentials are not successfully updated before expiration, calls to resolveCredentials() will block until they are updated successfully. Users of this provider must StsCredentialsProvider.close() it when they are finished using it. This is created using builder().