jfuechsl opened a new issue, #163:
URL: https://github.com/apache/arrow-rs-object-store/issues/163

   **Which part is this question about**
   `object_store` crate.
   
   **Describe your question**
   The `AmazonS3Builder` implements its own AWS credentials resolution and 
provisioning (which currently doesn't support ECS environments natively).
   AWS SDKs (see 
[here](https://github.com/awslabs/aws-sdk-rust/blob/d1962fd42d376c5c695877041d2a269fd1fa50cd/sdk/aws-config/src/default_provider/credentials.rs#L25)
 for the Rust SDK) feature a well defined Credential Provider Chain.
   
   My question is: why does this project not use the official AWS Rust SDK 
implementation for credentials (and possibly the S3 client implementation)?
   
   **Additional context**
   
   Issue apache/arrow-rs#4283 should fix credentials resolution for ECS runtime 
environments. However the fix doesn't work, since the provided 
metadata_endpoint is still used in the context of the EC2 credentials provider 
which postfixes a `/latest/api/token` path, which breaks credentials resolution 
for ECS: 
https://github.com/apache/arrow-rs/blob/77aa8f5b2645a91724048f5c1d644c6b52880028/object_store/src/aws/credential.rs#L429
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@arrow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to