software.amazon.awssdk.services.sts.auth

Class StsGetSessionTokenCredentialsProvider

java.lang.Object

software.amazon.awssdk.services.sts.auth.StsGetSessionTokenCredentialsProvider

All Implemented Interfaces:

AutoCloseable, AwsCredentialsProvider, ToCopyableBuilder<StsGetSessionTokenCredentialsProvider.Builder,StsGetSessionTokenCredentialsProvider>, SdkAutoCloseable

@ThreadSafe
public class StsGetSessionTokenCredentialsProvider
extends Object
implements ToCopyableBuilder<StsGetSessionTokenCredentialsProvider.Builder,StsGetSessionTokenCredentialsProvider>

An implementation of AwsCredentialsProvider that periodically sends a GetSessionTokenRequest to the AWS Security Token Service to maintain short-lived sessions to use for authentication. These sessions are updated using a single calling thread (by default) or asynchronously (if StsCredentialsProvider.BaseBuilder.asyncCredentialUpdateEnabled(Boolean) is set). If the credentials are not successfully updated before expiration, calls to resolveCredentials() will block until they are updated successfully. Users of this provider must close() it when they are finished using it. This is created using builder().

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	StsCredentialsProvider.BaseBuilder<B extends StsCredentialsProvider.BaseBuilder<B,T>,T extends ToCopyableBuilder<B,T>> Extended by child class's builders to share configuration across credential providers.
static class	StsGetSessionTokenCredentialsProvider.Builder A builder (created by builder()) for creating a StsGetSessionTokenCredentialsProvider.

Method Summary

Modifier and Type	Method and Description
static StsGetSessionTokenCredentialsProvider.Builder	builder() Create a builder for an StsGetSessionTokenCredentialsProvider.
void	close()
protected Credentials	getUpdatedCredentials(StsClient stsClient) Implemented by a child class to call STS and get a new set of credentials to be used by this provider.
Duration	prefetchTime() The amount of time, relative to STS token expiration, that the cached credentials are considered close to stale and should be updated.
AwsCredentials	resolveCredentials()
Duration	staleTime() The amount of time, relative to STS token expiration, that the cached credentials are considered stale and should no longer be used.
StsGetSessionTokenCredentialsProvider.Builder	toBuilder()
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder

copy

Method Detail

builder

public static StsGetSessionTokenCredentialsProvider.Builder builder()

Create a builder for an StsGetSessionTokenCredentialsProvider.

getUpdatedCredentials

protected Credentials getUpdatedCredentials(StsClient stsClient)

Implemented by a child class to call STS and get a new set of credentials to be used by this provider.

toString

public String toString()

Overrides:

toString in class Object

toBuilder

public StsGetSessionTokenCredentialsProvider.Builder toBuilder()

Specified by:

toBuilder in interface ToCopyableBuilder<StsGetSessionTokenCredentialsProvider.Builder,StsGetSessionTokenCredentialsProvider>

resolveCredentials

public AwsCredentials resolveCredentials()

Specified by:

resolveCredentials in interface AwsCredentialsProvider

close

public void close()

Specified by:

close in interface AutoCloseable

Specified by:

close in interface SdkAutoCloseable

staleTime

public Duration staleTime()

The amount of time, relative to STS token expiration, that the cached credentials are considered stale and should no longer be used. All threads will block until the value is updated.

prefetchTime

public Duration prefetchTime()

The amount of time, relative to STS token expiration, that the cached credentials are considered close to stale and should be updated.