[
https://issues.apache.org/jira/browse/FLINK-8417?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16324096#comment-16324096
]
Sreenath Kodedala edited comment on FLINK-8417 at 1/12/18 4:33 PM:
-------------------------------------------------------------------
STSAssumeRole requires Role ARN(Mandatory) to assume and RoleSessionName (Can
set to some default value if not provided) and one thing to consider is these
Temporary credentials are set to expire in an hour (Max). How can this be
handled without blocking the data flow?
was (Author: vedarad):
STSAssumeRole requires Role ARN to assume and RoleSessionName (Can set to some
default value if not provided) and one thing to consider is these Temporary
credentials are set to expire in an hour (Max). How can this be handled without
blocking the data flow?
> Support STSAssumeRoleSessionCredentialsProvider in FlinkKinesisConsumer
> -----------------------------------------------------------------------
>
> Key: FLINK-8417
> URL: https://issues.apache.org/jira/browse/FLINK-8417
> Project: Flink
> Issue Type: New Feature
> Components: Kinesis Connector
> Reporter: Tzu-Li (Gordon) Tai
> Fix For: 1.5.0
>
>
> As discussed in ML:
> http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/Kinesis-Connectors-With-Temporary-Credentials-td17734.html.
> Users need the functionality to access cross-account AWS Kinesis streams,
> using AWS Temporary Credentials [1].
> We should add support for
> {{AWSConfigConstants.CredentialsProvider.STSAssumeRole}}, which internally
> would use the {{STSAssumeRoleSessionCredentialsProvider}} [2] in
> {{AWSUtil#getCredentialsProvider(Properties)}}.
> [1] https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html
> [2]
> https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/STSAssumeRoleSessionCredentialsProvider.html
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
