software.amazon.awssdk.services.sts.auth

Class StsAssumeRoleWithWebIdentityCredentialsProvider

java.lang.Object

software.amazon.awssdk.services.sts.auth.StsAssumeRoleWithWebIdentityCredentialsProvider

All Implemented Interfaces:

AutoCloseable, AwsCredentialsProvider, SdkAutoCloseable

@ThreadSafe
public class StsAssumeRoleWithWebIdentityCredentialsProvider
extends Object

An implementation of AwsCredentialsProvider that periodically sends a AssumeRoleWithWebIdentityRequest to the AWS Security Token Service to maintain short-lived sessions to use for authentication. These sessions are updated asynchronously in the background as they get close to expiring. If the credentials are not successfully updated asynchronously in the background, calls to getCredentials() will begin to block in an attempt to update the credentials synchronously. This provider creates a thread in the background to periodically update credentials. If this provider is no longer needed, the background thread can be shut down using close(). This is created using builder().

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	StsAssumeRoleWithWebIdentityCredentialsProvider.Builder A builder (created by builder()) for creating a StsAssumeRoleWithWebIdentityCredentialsProvider.

Method Summary

Modifier and Type	Method and Description
static StsAssumeRoleWithWebIdentityCredentialsProvider.Builder	builder() Create a builder for an StsAssumeRoleWithWebIdentityCredentialsProvider.
void	close()
AwsCredentials	getCredentials() Returns AwsCredentials that can be used to authorize an AWS request.
String	toString()

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Detail

builder

public static StsAssumeRoleWithWebIdentityCredentialsProvider.Builder builder()

Create a builder for an StsAssumeRoleWithWebIdentityCredentialsProvider.

toString

public String toString()

Overrides:

toString in class Object

getCredentials

public AwsCredentials getCredentials()

Description copied from interface: AwsCredentialsProvider

Returns AwsCredentials that can be used to authorize an AWS request. Each implementation of AWSCredentialsProvider can chose its own strategy for loading credentials. For example, an implementation might load credentials from an existing key management system, or load new credentials when credentials are rotated.

If an error occurs during the loading of credentials or credentials could not be found, a runtime exception will be raised.

Specified by:

getCredentials in interface AwsCredentialsProvider

Returns:

AwsCredentials which the caller can use to authorize an AWS request.

close

public void close()

Description copied from interface: SdkAutoCloseable

Specified by:

close in interface AutoCloseable

Specified by:

close in interface SdkAutoCloseable