[
https://issues.apache.org/jira/browse/NIFI-11288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Julian Zhang updated NIFI-11288:
--------------------------------
Description:
When NiFi Processors or NiFi Registry accesses AWS services using the
AssumeRoleWithWebIdentity method in the AWSCredentialsProviderChain class, the
correct credentials are not available due to the lack of STS dependencies.
{code:java}
2023-03-14 15:56:44,700 DEBUG [Timer-Driven Process Thread-2]
c.a.auth.AWSCredentialsProviderChain Unable to load credentials from
WebIdentityTokenCredentialsProvider: To use assume role profiles the
aws-java-sdk-sts module must be on the class path. {code}
ADDITIONAL INFORMATION: STS lib needs to be on class path for the
WebidentityTokenCredentialsProvider to work properly, otherwise it will be
skipped in DefaultAWSCredentialsProviderChain.
https://github.com/aws/aws-sdk-java/issues/2136
was:
When NiFi Processors or NiFi Registry accesses AWS services using the
AssumeRoleWithWebIdentity method in the AWSCredentialsProviderChain class, the
correct credentials are not available due to the lack of STS dependencies.
{code:java}
2023-03-14 15:56:44,700 DEBUG [Timer-Driven Process Thread-2]
c.a.auth.AWSCredentialsProviderChain Unable to load credentials from
WebIdentityTokenCredentialsProvider: To use assume role profiles the
aws-java-sdk-sts module must be on the class path. {code}
> When using AssumeRoleWithWebIdentity method, the STS dependencies is missing.
> -----------------------------------------------------------------------------
>
> Key: NIFI-11288
> URL: https://issues.apache.org/jira/browse/NIFI-11288
> Project: Apache NiFi
> Issue Type: Bug
> Components: Extensions, NiFi Registry
> Reporter: Julian Zhang
> Priority: Minor
> Time Spent: 10m
> Remaining Estimate: 0h
>
> When NiFi Processors or NiFi Registry accesses AWS services using the
> AssumeRoleWithWebIdentity method in the AWSCredentialsProviderChain class,
> the correct credentials are not available due to the lack of STS dependencies.
> {code:java}
> 2023-03-14 15:56:44,700 DEBUG [Timer-Driven Process Thread-2]
> c.a.auth.AWSCredentialsProviderChain Unable to load credentials from
> WebIdentityTokenCredentialsProvider: To use assume role profiles the
> aws-java-sdk-sts module must be on the class path. {code}
> ADDITIONAL INFORMATION: STS lib needs to be on class path for the
> WebidentityTokenCredentialsProvider to work properly, otherwise it will be
> skipped in DefaultAWSCredentialsProviderChain.
> https://github.com/aws/aws-sdk-java/issues/2136
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
