Skip to content

feat: customizable STS endpoint#91

Open
vladosentinelus wants to merge 3 commits intoSentinel-One:masterfrom
vladosentinelus:obe-9800-sts-endpoint
Open

feat: customizable STS endpoint#91
vladosentinelus wants to merge 3 commits intoSentinel-One:masterfrom
vladosentinelus:obe-9800-sts-endpoint

Conversation

@vladosentinelus
Copy link
Copy Markdown

No description provided.

Add sts_endpoint: Option<String> to Role and AccessKey variants so operators
can point sts:AssumeRole calls at a non-default STS URL (mock STS for testing,
GovCloud, private-link, compliance proxy). When unset, behaviour is unchanged.
Comment thread .gitignore Outdated
Comment thread src/aws/auth.rs
/// When set, overrides the default STS endpoint (e.g. `sts.amazonaws.com`).
/// Useful for GovCloud, private-link setups, or pointing at a mock STS in tests.
/// When unset, the AWS SDK default is used — no behaviour change for existing configs.
#[configurable(metadata(docs::examples = "http://localhost:4566"))]
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's not use localhost in docs string

Comment thread src/aws/auth.rs
.time_source(SystemTimeSource::new());
if let Some(endpoint) = sts_endpoint {
config_builder = config_builder.endpoint_url(endpoint);
}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

use [set_endpoint_url](https://docs.rs/aws-sdk-s3/latest/aws_sdk_s3/config/struct.Builder.html#method.set_endpoint_url) here

Comment thread src/aws/auth.rs
/// When set, overrides the default STS endpoint (e.g. `sts.amazonaws.com`).
/// Useful for GovCloud, private-link setups, or pointing at a mock STS in tests.
/// When unset, the AWS SDK default is used — no behaviour change for existing configs.
#[configurable(metadata(docs::examples = "http://localhost:4566"))]
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same as above

@janmejay-s1
Copy link
Copy Markdown
Contributor

@vladosentinelus can you please update the branch name to avoid : (so we can run tests / build on this branch)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants