paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 48 Packages Projects Releases Wiki Activity

Merge pull request #34149 from hudsonb/bhudson/aws-wif-token-file

Browse Source 
feat(integration-aws-node): add per-account webIdentityTokenFile config
This commit is contained in:
Fredrik Adelöw
2026-05-07 16:28:12 +03:00
committed by GitHub
parent 52dd22b436 8df06ec2bc
commit 90d9e05133
7 changed files with 314 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/aws-wif-token-file.md
+14
View File
@@ -0,0 +1,14 @@
---
'@backstage/integration-aws-node': minor
---
Added `webIdentityTokenFile` to `AwsIntegrationAccountConfig` and
`AwsIntegrationDefaultAccountConfig`. When set along with a `roleName`,
`DefaultAwsCredentialsManager` retrieves credentials by calling
`AssumeRoleWithWebIdentity` (via `fromTokenFile`) using the file's
contents as the web identity token. The file is re-read on each
credential refresh.
The validator rejects combining `webIdentityTokenFile` with
`accessKeyId`/`secretAccessKey`, `profile`, or `externalId`, and
rejects setting it without a `roleName`.