shunping opened a new pull request, #41130:
URL: https://github.com/apache/beam/pull/41130
Part of #40528
Adds an AwsCredentialsProvider that resolves the access key ID, secret
access key and optional session token through a secret manager (e.g.
`GoogleCloudSecretManager`) using `Secret.fromJson`. Credentials are fetched
lazily (typically on workers) and cached per JVM. Only the secret specs are
serialized, never the resolved credentials.
AWS Secrets Manager (to-be-added in follow-up PRs) is rejected as the secret
manager because the AWS credentials are needed to access it, matching the
Python SDK.
`AwsModule` can now (de)serialize the provider, e.g.
```
--awsCredentialsProvider={"@type": "SecretCredentialsProvider",
"secretManager": "GoogleCloudSecretManager",
"accessKeyId": {"name": "my-key-id", "project": "p"}, ...}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
