Allow providing aws profile name instead of aws key and secret key

[aleybovich]

Currently you need to provide access key and secret key to the account where cloudwatch is. Can we add an option to provide just the aws profile name of the profile setup on the logstash server and the plugin would be getting access_key and secret_key from that profile? Same way as terraform does it.
We store logstash.config in code repository and for obvious security reasons we don't want to store secret keys there.

[lukewaite]

We could implement this on our own, but I'd really rather not.

AWS authentication in logstash is provided by a shared library called logstash-mixin-aws.

If we break with the convention, we'll be forced to support it on our own, and will have a different experience than any other plugin.

There's a PR for this enhancement open on the mixin, so I'd request that you register your feedback there: logstash-plugins/logstash-mixin-aws#27

[lukewaite]

Sorry - I linked to the wrong issue. There's an issue open for this particular use case, but no PR.

logstash-plugins/logstash-mixin-aws#29

[lukewaite]

v1.0.3 has just been tagged which updates to logstash-mixin-aws 4.3.0 which should solve this issue.