shunping opened a new pull request, #41132:
URL: https://github.com/apache/beam/pull/41132

   Part of #40528. Depends on #41130 and 41131.
   
   Adds the Java equivalents of Python's `--aws_access_key_id`, 
`--aws_secret_access_key`, `--aws_session_token` and 
`--aws_credentials_secret_manager`. They have the same portable option names, 
so they are also shared in cross-language pipelines.
   
   If `--awsCredentialsProvider` is not set, it is derived from these options:
   - **With `--awsCredentialsSecretManager`:** a `SecretCredentialsProvider`. 
Credentials are fetched lazily on the workers, and only the secret specs are 
serialized.
   - **Otherwise:** a `StaticCredentialsProvider`.
   
   Combining these options with `--awsCredentialsProvider`, setting them 
incompletely, or using AWS Secrets Manager as the credentials store is an error.
   
   Example:
   ```
       --awsCredentialsSecretManager=GoogleCloudSecretManager \
       --awsAccessKeyId='{"name": "my-aws-key-id", "project": "my-project"}' \
       --awsSecretAccessKey='{"name": "my-aws-secret-key", "project": 
"my-project"}'
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to