Mailing-List: contact dev-help@nifi.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@nifi.apache.org
MIME-Version: 1.0
In-Reply-To: <CAC8FukX=s+UAz12mYa2nQC_XUS4NEXH7xwOxSaXNYSUpV9AaGQ@mail.gmail.com>
References: <CAC8FukX=s+UAz12mYa2nQC_XUS4NEXH7xwOxSaXNYSUpV9AaGQ@mail.gmail.com>
From: Joe Gresock <jgresock@gmail.com>
Date: Thu, 13 Apr 2017 10:33:19 +0000
Message-ID: <CAC8FukX81wU10tRuMqi15mJVY5a_qQe0oRSNL7sdz7NWt5VSsQ@mail.gmail.com>
Subject: Re: AWS processor credentials question
To: dev@nifi.apache.org
Content-Type: multipart/alternative; boundary=001a1149258284f312054d09dab7
archived-at: Thu, 13 Apr 2017 10:33:24 -0000

--001a1149258284f312054d09dab7
Content-Type: text/plain; charset=UTF-8

Actually it's a little more complicated than the code I suggested, since
DefaultAWSCredentialsProviderChain.getInstance() is an
AWSCredentialsProvider, not an AWSCredentials object.  But the idea would
be similar.

On Thu, Apr 13, 2017 at 10:21 AM, Joe Gresock <jgresock@gmail.com> wrote:

> AWS-related devs (I'm looking at James Wing and Adam Lamar),
>
> I just added [1] to propose allowing AWS processors to specify whether to
> use anonymous credentials or to use the default AWS client credentials
> provider chain.  The driver for this is that we would like to use EC2
> instance profiles with the NiFi AWS processors, but this is not currently
> possible because NiFi passes in AnonymousAWSCredentials to the AWS client
> constructor if no credentials are explicitly configured in the processor.
> If we use the DefaultAWSCredentialsProviderChain.getInstance(), I think
> it would find our EC2 instance profile.
>
> My question to you is how you'd like to see this implemented.  Shall we
> add a property to AbstractAWSProcessor called "Allow Anonymous
> Credentials"?  Then in AbstractAWSProcessor.getCredentials(ProcessContext
> context), the return statement could be:
>
> return allowAnonymousCredentials
>      ? new AnonymousAWSCredentials
>      : DefaultAWSCredentialsProviderChain.getInstance();
>
> I thought I'd ask here first, because I see many of the AWS methods marked
> Deprecated, and I didn't want to start adding code if it was going to go
> away soon.
>
> [1] https://issues.apache.org/jira/browse/NIFI-3703
>
> Thanks,
> Joe
>
> --
> I know what it is to be in need, and I know what it is to have plenty.  I
> have learned the secret of being content in any and every situation,
> whether well fed or hungry, whether living in plenty or in want.  I can
> do all this through him who gives me strength.    *-Philippians 4:12-13*
>


-- 
I know what it is to be in need, and I know what it is to have plenty.  I
have learned the secret of being content in any and every situation,
whether well fed or hungry, whether living in plenty or in want.  I can do
all this through him who gives me strength.    *-Philippians 4:12-13*

--001a1149258284f312054d09dab7--