Skip to content
This repository was archived by the owner on Feb 26, 2025. It is now read-only.

Support for user-specified AWS credential providers #97

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

thomascollett
Copy link

Adds support for passing in a credentials provider using the s3fs_credentials_provider property.

This is useful if you are assuming a role, which requires refreshable credentials from STS using a STSAssumeRoleSessionCredentialsProvider. This would enable segregation using a separate AWS role per customer, with each role only having permissions to access their own objects in the bucket.

e.g.

STSAssumeRoleSessionCredentialsProvider credentialsProvider = new STSAssumeRoleSessionCredentialsProvider.Builder(
          roleArn,
          "sftp-server")
          .withExternalId("external-id")
          .withRoleSessionDurationSeconds(3600)
          .build();

@carlspring
Copy link

Hi @thomascollett ,

I hope you're well!

I'm not sure, if you've recieved my e-mail, but just in case -- I'm reaching out here as well. As this project seems to have been abandoned, I was wondering, if you'd be interested in contributing these fixes against our spin-off (rebranded fork) -- s3fs-nio?

Kind regards,

Martin

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants