Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-11288

When using AssumeRoleWithWebIdentity method, the STS dependencies is missing.

    XMLWordPrintableJSON

Details

    Description

      When NiFi Processors or NiFi Registry accesses AWS services using the AssumeRoleWithWebIdentity method in the AWSCredentialsProviderChain class, the correct credentials are not available due to the lack of STS dependencies.

      2023-03-14 15:56:44,700 DEBUG [Timer-Driven Process Thread-2] c.a.auth.AWSCredentialsProviderChain Unable to load credentials from WebIdentityTokenCredentialsProvider: To use assume role profiles the aws-java-sdk-sts module must be on the class path. 

      ADDITIONAL INFORMATION: STS lib needs to be on class path for the WebidentityTokenCredentialsProvider to work properly, otherwise it will be skipped in DefaultAWSCredentialsProviderChain.
      https://github.com/aws/aws-sdk-java/issues/2136

      Attachments

        Issue Links

          Activity

            People

              juldrixx Julien G.
              zhangzhonglai Julian Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 2h 20m
                  2h 20m