Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for user-specified AWS credential providers #97

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

thomascollett
Copy link

Adds support for passing in a credentials provider using the s3fs_credentials_provider property.

This is useful if you are assuming a role, which requires refreshable credentials from STS using a STSAssumeRoleSessionCredentialsProvider. This would enable segregation using a separate AWS role per customer, with each role only having permissions to access their own objects in the bucket.

e.g.

STSAssumeRoleSessionCredentialsProvider credentialsProvider = new STSAssumeRoleSessionCredentialsProvider.Builder(
          roleArn,
          "sftp-server")
          .withExternalId("external-id")
          .withRoleSessionDurationSeconds(3600)
          .build();

@carlspring
Copy link

Hi @thomascollett ,

I hope you're well!

I'm not sure, if you've recieved my e-mail, but just in case -- I'm reaching out here as well. As this project seems to have been abandoned, I was wondering, if you'd be interested in contributing these fixes against our spin-off (rebranded fork) -- s3fs-nio?

Kind regards,

Martin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants