flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sreenath Kodedala (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (FLINK-8417) Support STSAssumeRoleSessionCredentialsProvider in FlinkKinesisConsumer
Date Fri, 12 Jan 2018 16:34:00 GMT

    [ https://issues.apache.org/jira/browse/FLINK-8417?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16324096#comment-16324096
] 

Sreenath Kodedala edited comment on FLINK-8417 at 1/12/18 4:33 PM:
-------------------------------------------------------------------

STSAssumeRole requires Role ARN(Mandatory) to assume and RoleSessionName (Can set to some
default value if not provided) and one thing to consider is these Temporary credentials are
set to expire in an hour (Max). How can this be handled without blocking the data flow?


was (Author: vedarad):
STSAssumeRole requires Role ARN to assume and RoleSessionName (Can set to some default value
if not provided) and one thing to consider is these Temporary credentials are set to expire
in an hour (Max). How can this be handled without blocking the data flow?

> Support STSAssumeRoleSessionCredentialsProvider in FlinkKinesisConsumer
> -----------------------------------------------------------------------
>
>                 Key: FLINK-8417
>                 URL: https://issues.apache.org/jira/browse/FLINK-8417
>             Project: Flink
>          Issue Type: New Feature
>          Components: Kinesis Connector
>            Reporter: Tzu-Li (Gordon) Tai
>             Fix For: 1.5.0
>
>
> As discussed in ML: http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/Kinesis-Connectors-With-Temporary-Credentials-td17734.html.
> Users need the functionality to access cross-account AWS Kinesis streams, using AWS Temporary
Credentials [1].
> We should add support for {{AWSConfigConstants.CredentialsProvider.STSAssumeRole}}, which
internally would use the {{STSAssumeRoleSessionCredentialsProvider}} [2] in {{AWSUtil#getCredentialsProvider(Properties)}}.
> [1] https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html
> [2] https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/STSAssumeRoleSessionCredentialsProvider.html



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message