Need for the JDK support of CreateSession API of the service IAM Roles Anywhere

[eugen-eugen]

Describe the feature

For using CreateSession API of the service IAM Roles Anywhere AWS recommends to use the standalone tool aws_signing_helper. It is well integrated because is a part of standard ~/.aws/config file.

But in some cases it ist not compliant with security regulations due to starting of extra programs.

Surprisingly this Java SDK, as well as other AWS SDKs don't provide a support for Create Session API. Why not?

Please include the support of CreateSession API of the service IAM Roles Anywhere to the SDK.

Use Case

In some cases it ist not compliant with security regulations due to starting of extra programs. I would like to call CreateSession API on my own, f.e. at the boot phase of a program, without the extra process aws_signing_helper is started.

Proposed Solution

On the Internet there are a couple of solution, people have implemented for work around this problem.

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

AWS Java SDK version used

2

JDK version used

17

Operating System and version

MacOS

[debora-ito]

Hi @eugen-eugen thank you for reaching out.

As you read in the same feature request submitted to the aws/aws-sdk-net repo, this will require a cross-SDK effort for a consistent support, with the help from the IAM team to provide the specification. Currently, there's no plans to support this in the SDKs.

Community note: Let's use this issue to gather interest. If you'd like to see IAM Roles Anywhere CreateSession native support in the Java SDK, add a 👍 to the top comment, and share here some details on why you can't use the aws_signing_helper tool provided.

[krnbr]

I needed the support for CreateSession in Java AWS SDK too.

I did a JAVA port for it already - https://github.com/neuw/aws-iam-roles-anywhere

It is kinda beta, but works quite well!

<dependency>
    <groupId>in.neuw</groupId>
    <artifactId>aws-iam-roles-anywhere-core</artifactId>
    <version>0.4</version>
</dependency>