Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Config pption to pick the AWS credentials provider instead of default credentials provider chain #37432

Open
suniltheta opened this issue Nov 30, 2024 · 2 comments
Labels
area/aws_request_signing enhancement Feature requests. Not bugs or questions.

Comments

@suniltheta
Copy link
Contributor

The AWS request signing filter and AWS Lambda filter uses default credentials provider chain to get the AWS credentials. Is it possible to add option on aws/v3/credential_provider.proto so that the user has option to pick the exact credentials provider they want to use. This will help with optimizing the flow to pick the right credentials provider and execution don't have to go through the list of credentials provider one by one, thereby optimizing the flow.

Example: Say the DefaultCredentialsChain uses a chain of 'n' checks. IMDS is the last in the chain. By configuring to use ImdsCredentialsProvider, Envoy will directly query IMDS for credentials.

@suniltheta suniltheta added enhancement Feature requests. Not bugs or questions. triage Issue requires triage labels Nov 30, 2024
@ggreenway ggreenway added area/aws_request_signing and removed triage Issue requires triage labels Dec 2, 2024
@ggreenway
Copy link
Contributor

ggreenway commented Dec 2, 2024

cc @derekargueta @nbaws

@nbaws
Copy link
Contributor

nbaws commented Dec 2, 2024

@suniltheta yes - i have this planned for next PR in fact :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/aws_request_signing enhancement Feature requests. Not bugs or questions.
Projects
None yet
Development

No branches or pull requests

3 participants