cogni-java-credentials

Bridges AWS Java SDK v2 credentials with cognitect/aws-api.

It enables cognitect/aws-api to use the AWS Java SDK v2's DefaultCredentialsProvider (or any other AwsCredentialsProvider implementation, if so desired), which:

• supports more authentication schemes than cognitect/aws-api includes ATOW:
  • SSO
  • Web Identity Token
  • Container Credentials and Pod Identities
• allows to take advantage of AWS' support for the Java SDK v2 provider chain
• reduces SRE headache in a polyglot ecosystem due to the provider chain consistency across other AWS SDKs, e.g. for Python or Go

Usage

Dependencies

The library pulls in optional dependencies by default:

• software.amazon.awssdk/sso
• software.amazon.awssdk/ssooidc
• software.amazon.awssdk/eksauth

• which provides convenient versatility, but they can be excluded if absolutely not needed.

leiningen

:dependencies [[io.github.michalmela/cogni-java-credentials "..."]]

deps.edn

io.github.michalmela/cogni-java-credentials {:mvn/version "..."}

REPL example

(require '[cognitect.aws.client.api :as aws])
(require '[io.github.michalmela.cogni-java-credentials :as java-credentials])

(aws/invoke
 (aws/client {:api                  :sts
              :region               (or (System/getenv "AWS_REGION")
                                        (System/getProperty "aws.region")
                                        "eu-west-1")
              :credentials-provider (java-credentials/as-cognitect-provider)})
 {:op :GetCallerIdentity})