credential_process is not implemented

[tyehle]

The SDK is not compatible with an external credential_process

Expected Behavior

Specifying a credential_process in the credentials file should allow a user of the sdk to authenticate.

Current Behavior

The credential_process option is ignored.

Possible Solution

I have some thoughts about how to implement this and I would be happy to work on a PR, I just wanted to make sure that was something that would be useful. If so we can talk more about an implementation.

Steps to Reproduce

• Put a credentials_process line in ~/.aws/credentials
• Try to build a client with a ProfileCredentialsProvider

Context

Your Environment

• AWS Java SDK version used: 2.0.0-preview-9
• JDK version used: 1.8.0_161

[dagnir]

@tyehle Thanks for your interest in the SDK!

Can you explain your use case for supporting credential_process?

At a glance, it seems like similar functionality can be achieved by a custom implementation of AwsCredentialsProvider that communicates with the external process.

[tyehle]

I'm sure that extending AwsCredentialsProvider would work. My thoughts were that since the Python API and the CLI support credential_process it might be nicer to users to add that functionality to the Java API. Especially since code surrounding credential_process could have security consequences.

[millems]

We've internally discussed the credentials features that we intend to support in the non-Python/CLI SDKs, and credential_process isn't currently one we intend to roll out to the other SDKs at this time.

+1s on this issue will help show the customer demand for the feature and will enable us to roll out something similar to credential_process in the non-Python/CLI SDKs.

[JathinSanghvi]

+1

[ChristianWilkie]

+1

[jnewbigin]

+1

[zachahuy-zz]

+1

[bijaya1]

+1

[lorengordon]

+1 though "something similar" is not what I'm looking for. I want to be able to configure the AWS shared config file, and have every SDK support every option the same way. Anything less feels like it breaks the user experience.