Package software.amazon.msk.auth.iam.internals

Class MSKCredentialProvider

java.lang.Object
software.amazon.msk.auth.iam.internals.MSKCredentialProvider
All Implemented Interfaces:
AutoCloseable, software.amazon.awssdk.auth.credentials.AwsCredentialsProvider, software.amazon.awssdk.identity.spi.IdentityProvider<software.amazon.awssdk.identity.spi.AwsCredentialsIdentity>
public class MSKCredentialProvider extends Object implements software.amazon.awssdk.auth.credentials.AwsCredentialsProvider, AutoCloseable
This AWS Credential Provider is used to load up AWS Credentials based on options provided on the Jaas config line. As an example sasl.jaas.config = IAMLoginModule required awsProfileName={profile name}; The currently supported options are: 1. A particular AWS Credential profile: awsProfileName={profile name} 2. A particular AWS IAM Role, with optional access key id, secret key and session token OR optional external id, and optionally AWS IAM role session name and AWS region for the STS endpoint: awsRoleArn={IAM Role ARN}, awsRoleAccessKeyId={access key id}, awsRoleSecretAccessKey={secret access key}, awsRoleSessionToken={session token}, awsRoleSessionName={session name}, awsStsRegion={region name} 3. Optional arguments to configure retries when we fail to load credentials: awsMaxRetries={Maximum number of retries}, awsMaxBackOffTimeMs={Maximum back off time between retries in ms} 4. Optional argument to help debug credentials used to establish connections: awsDebugCreds={true|false} 5. If no options is provided, the DefaultAWSCredentialsProviderChain is used. The DefaultAWSCredentialProviderChain can be pointed to credentials in many different ways: Working with AWS Credentials

  • Constructor Details

    • MSKCredentialProvider

      public MSKCredentialProvider(Map<String,?> options)

  • Method Details

    • getDefaultProvider

      protected software.amazon.awssdk.auth.credentials.AwsCredentialsProvider getDefaultProvider()

    • resolveCredentials

      public software.amazon.awssdk.auth.credentials.AwsCredentials resolveCredentials()
      Specified by:
      resolveCredentials in interface software.amazon.awssdk.auth.credentials.AwsCredentialsProvider

    • close

      public void close()
      Specified by:
      close in interface AutoCloseable