This AWS Credential Provider is used to load up AWS Credentials based on options provided on the Jaas config line.
As as an example
sasl.jaas.config = IAMLoginModule required awsProfileName={profile name};
The currently supported options are:
1. A particular AWS Credential profile: awsProfileName={profile name}
2. A particular AWS IAM Role, with optional access key id an secret key, and optionally AWS IAM role session name
and AWS region for the STS endpoint:
awsRoleArn={IAM Role ARN}, awsRoleAccessKeyId={access key id}, awsSecretAccessKey={secret access key},
awsRoleSessionName={session name}, awsStsRegion={region name}
3. Optional arguments to configure retries when we fail to load credentials:
awsMaxRetries={Maximum number of retries}, awsMaxBackOffTimeMs={Maximum back off time between retries in ms}
4. Optional argument to help debug credentials used to establish connections:
awsDebugCreds={true|false}
5. If no options is provided, the DefaultAWSCredentialsProviderChain is used.
The DefaultAWSCredentialProviderChain can be pointed to credentials in many different ways:
Working with AWS Credentials