s3 sts support?

[rmannibucau]

Hi,

Is it possible to add sts support to s3 module - assume roles is mainly what I'm looking after?

[gunnarmorling]

Good question; it's not exactly my area of expertise, but it might just require adding the right dependency to the S3 module as per Claude:

Dependency addition — Add software.amazon.awssdk:sts to the S3 module's POM (and the CLI). This artifact provides StsAssumeRoleCredentialsProvider and is also needed for the default chain to resolve role_arn-based profiles from ~/.aws/config.

Just adding the sts dependency may be sufficient. The AWS SDK's default credential chain automatically uses STS when it encounters a profile with role_arn + source_profile in ~/.aws/config. No code changes needed for that path.

Wanna give it a try?

[rmannibucau]

@gunnarmorling can do it for sure, might just need the outcome of #144 since it will impact how it is done

[gunnarmorling]

Yes, good point, @rmannibucau. So I went ahead and took a stab at #144: see PR #171. We're signing and issuing requests ourselves now. Credential retrieval is pushed to the user; optionally, the new module hardwood-aws-auth can be used for bridging to the default credential provider chain. Only this module has a (small) dependency onto the auth module of the AWS SDK.

[rmannibucau]

@gunnarmorling just tested and covers very well my case so very happy and thanks for the effort