org.springframework.vault.authentication

Class AwsIamAuthenticationOptions

java.lang.Object

org.springframework.vault.authentication.AwsIamAuthenticationOptions

public class AwsIamAuthenticationOptions
extends Object

Authentication options for AwsIamAuthentication.

Authentication options provide the path, a AWSCredentialsProvider optional role and server name (Vault-AWS-IAM-Server-ID header). AwsIamAuthenticationOptions can be constructed using builder(). Instances of this class are immutable once constructed.

Since:

1.1

Author:

Mark Paluch

See Also:

AwsIamAuthentication, builder()

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	AwsIamAuthenticationOptions.AwsIamAuthenticationOptionsBuilder Builder for AwsIamAuthenticationOptions.

Field Summary

Fields

Modifier and Type	Field and Description
static String	DEFAULT_AWS_AUTHENTICATION_PATH

Method Summary

Modifier and Type	Method and Description
static AwsIamAuthenticationOptions.AwsIamAuthenticationOptionsBuilder	builder()
com.amazonaws.auth.AWSCredentialsProvider	getCredentialsProvider()
URI	getEndpointUri()
String	getPath()
String	getRole()
String	getServerId()
String	getServerName() Deprecated. since 2.0, renamed to getServerId().

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_AWS_AUTHENTICATION_PATH

public static final String DEFAULT_AWS_AUTHENTICATION_PATH

See Also:

Constant Field Values

Method Detail

builder

public static AwsIamAuthenticationOptions.AwsIamAuthenticationOptionsBuilder builder()

Returns:

a new AwsIamAuthenticationOptions.AwsIamAuthenticationOptionsBuilder.

getPath

public String getPath()

Returns:

the path of the aws authentication backend mount.

getCredentialsProvider

public com.amazonaws.auth.AWSCredentialsProvider getCredentialsProvider()

Returns:

the credentials provider to obtain AWS credentials.

getRole

@Nullable
public String getRole()

Returns:

the role, may be null if none.

getServerId

@Nullable
public String getServerId()

Returns:

Server name to mitigate risk of replay attacks, preferably set to Vault server's DNS name, may be null. Used for Vault-AWS-IAM-Server-ID header.

Since:

2.0

getServerName

@Nullable
 @Deprecated
public String getServerName()

Deprecated. since 2.0, renamed to getServerId().

Returns:

Server name to mitigate risk of replay attacks, preferably set to Vault server's DNS name, may be null.

getEndpointUri

public URI getEndpointUri()

Returns:

STS server URI.