STSAssumeRoleCredentialsProvider.h

Go to the documentation of this file.

 
#pragma once
 
#include <aws/identity-management/IdentityManagment_EXPORTS.h>
#include <aws/core/auth/AWSCredentialsProvider.h>
 
#include <memory>
#include <mutex>
#include <atomic>
 
namespace Aws
{
    namespace STS
    {
        class STSClient;
    }
 
    namespace Auth
    {
        static const int DEFAULT_CREDS_LOAD_FREQ_SECONDS = 900;
 
        class AWS_IDENTITY_MANAGEMENT_API STSAssumeRoleCredentialsProvider : public AWSCredentialsProvider
        {
        public:
            STSAssumeRoleCredentialsProvider(const Aws::String& roleArn, const Aws::String& sessionName = Aws::String(), 
                const Aws::String& externalId = Aws::String(), int loadFrequency = DEFAULT_CREDS_LOAD_FREQ_SECONDS, 
                const std::shared_ptr<Aws::STS::STSClient>& stsClient = nullptr);
 
            AWSCredentials GetAWSCredentials() override;
 
        private:
            void LoadCredentialsFromSTS();
 
            std::shared_ptr<Aws::STS::STSClient> m_stsClient;
            AWSCredentials m_cachedCredentials;
            Aws::String m_roleArn;
            Aws::String m_sessionName;
            Aws::String m_externalId;
            std::atomic<int64_t> m_expiry;
            std::mutex m_credsMutex;
            std::atomic<int> m_loadFrequency;
        };
    }
}