litiliu commented on code in PR #3540:
URL: https://github.com/apache/fluss/pull/3540#discussion_r3526798711
##########
fluss-filesystems/fluss-fs-s3/src/main/java/org/apache/fluss/fs/s3/token/S3DelegationTokenProvider.java:
##########
@@ -147,6 +168,33 @@ private AWSSecurityTokenService buildStsClient() {
return builder.build();
}
+ @Nullable
+ AWSCredentialsProvider createStsCredentialsProvider() {
+ if (credentialProviderList != null) {
+ AWSCredentials credentials =
credentialProviderList.getCredentials();
+ checkArgument(
Review Comment:
Added a note to the IRSA/instance profile section clarifying that the
explicit server-side provider mode only supports long-term credentials and
cannot be combined with s3.assumed.role.arn. IRSA and instance profile
providers should continue to use the default AWS credential chain. Thanks!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
