-
Notifications
You must be signed in to change notification settings - Fork 2
Description
Description
AmazonSQSActivationSpec should support DefaultAWSCredentialsProviderChain, either by providing a dedicated @ActionvationConfigProperty or just by default:
return new DefaultAWSCredentialsProviderChain().getCredentials();
Expected Outcome
The default credentials chain should be accessible for users
Current Outcome
only env vras and hard-coded string literals are supported, which makes it difficult to manage credentials securely
Context
All AWS SDKs support chaining of credential providers, by default checking for env vars, ~/.aws files and when deployed in Amazon containers obtaining credentials from the network. Since the AmazonSQS adapter needs to be deployed as a .rar it's impossible to implement not-yet-supported credentials providers, so support for default scheme can only be implemented in the library itself. This would take the burden of managing different secrets for different environments securely from the users.
Ecosystem Tool
Cloud Connectors