[ 
https://issues.apache.org/jira/browse/CAMEL-18625?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17620320#comment-17620320
 ] 

Ajithlal edited comment on CAMEL-18625 at 10/19/22 12:33 PM:
-------------------------------------------------------------

I am using aws saml cli to connect aws resource.My *x_principal_arn* in 
credential file look like below.

x_principal_arn = 
arn:aws:sts::xxxxxx:[assumed-role/sso-poweruser/[email protected]|mailto:assumed-role/sso-poweruser/[email protected]]

x_security_token_expires = 2022-10-19 13:15:11+00:00

Once I login using cli, I can use the session token for specific duration. So I 
don't want to pass {*}aws_access_key_id{*},{*}aws_secret_access_key{*} 
explicitly through program. Instead If I am mentioning saml profile name in 
application.properties ,it will automatically connect when I am connected 
through aws cli and will expire once session token expire.

 


was (Author: JIRAUSER297241):
I am using aws saml cli to connect aws resource.My *x_principal_arn* in 
credential file look like below.

x_principal_arn = 
arn:aws:sts::xxxxxx:[assumed-role/sso-poweruser/[email protected]|mailto:assumed-role/sso-poweruser/[email protected]]

x_security_token_expires = 2022-10-19 13:15:11+00:00

Once I login using cli, I can use the session token for specific duration. So I 
don't want to pass {*}aws_access_key_id{*},{*}aws_secret_access_key{*} 
explicitly through program. Instead If I am mentioning saml profile name in 
application.properties ,it will automatically connect when I am connected 
through aws cli and will expire once session token expire.

Example : camle kafka has option to specify saml profile like below.We are 
using saml profile in msk connection.


camel.component.kafka.sasl-jaas-config= 
software.amazon.msk.auth.iam.IAMLoginModule required awsProfileName="intdev";
camel.component.kafka.security-protocol= SASL_SSL

camel.component.kafka.sasl-mechanism= AWS_MSK_IAM

> Provide an option to pass specific AWS SAML Profile 
> ----------------------------------------------------
>
>                 Key: CAMEL-18625
>                 URL: https://issues.apache.org/jira/browse/CAMEL-18625
>             Project: Camel
>          Issue Type: New Feature
>          Components: camel-aws
>    Affects Versions: 3.20.0
>            Reporter: Ajithlal
>            Priority: Major
>
> Currently there is no option to pass specific AWS SAML profile when I am 
> connecting to AWS secret-manager from camel aws vault program.
> I am expecting ,need a option to set aws saml profile name inside 
> application.properties file.
> If user is make below configuration
> camel.vault.aws.defaultCredentialsProvider=false
> camel.vault.aws.saml.profileCredentialName=intdev
> then it should connect to aws resource.
> ("{*}intdev{*}" is aws saml profile name."{*}intdev"{*} is not default 
> profile )
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to