The @aws-sdk/credential-provider-web-identity npm package is designed to provide AWS credentials to your application by leveraging web identity tokens. This is particularly useful for applications that authenticate users through federated identity providers such as Amazon Cognito, Facebook, Google, or any OpenID Connect (OIDC) compatible identity provider. It simplifies the process of assuming an AWS IAM role by using the web identity token, allowing your application to access AWS services securely.

What are @aws-sdk/credential-provider-web-identity's main functionalities?

Creating credentials from web identity tokens

This feature allows you to create AWS credentials by providing a web identity token, the ARN of the role to assume, and a session name. It's particularly useful for serverless applications that rely on federated authentication.

const { fromWebToken } = require('@aws-sdk/credential-provider-web-identity');

const credentials = fromWebToken({
  roleArn: 'arn:aws:iam::123456789012:role/WebIdentityRole',
  roleSessionName: 'web-identity-session',
  webIdentityToken: process.env.WEB_IDENTITY_TOKEN
});

Other packages similar to @aws-sdk/credential-provider-web-identity

Changelog

Source

3.428.0 (2023-10-12)

Bug Fixes

lib-dynamodb: add e2e suite and bug fixes for lib-dynamodb (#5306) (2fe0a88)
middleware-flexible-checksums: skip checksum validation for s3 whole-object multipart GET (#5345) (6a6a75e)

Features

client-auditmanager: This release introduces a new limit to the awsAccounts parameter. When you create or update an assessment, there is now a limit of 200 AWS accounts that can be specified in the assessment scope. (af41764)
client-auto-scaling: Update the NotificationMetadata field to only allow visible ascii characters. Add paginators to DescribeInstanceRefreshes, DescribeLoadBalancers, and DescribeLoadBalancerTargetGroups (6727085)
client-config-service: Add enums for resource types supported by Config (1cdcf43)
client-controltower: Added new EnabledControl resource details to ListEnabledControls API and added new GetEnabledControl API. (784c6fb)
client-customer-profiles: Adds sensitive trait to various shapes in Customer Profiles Calculated Attribute API model. (73c9229)
client-ec2: This release adds Ubuntu Pro as a supported platform for On-Demand Capacity Reservations and adds support for setting an Amazon Machine Image (AMI) to disabled state. Disabling the AMI makes it private if it was previously shared, and prevents new EC2 instance launches from it. (9c57ae3)
client-glue: Extending version control support to GitLab and Bitbucket from AWSGlue (b683df3)
client-inspector2: Add MacOs ec2 platform support (2964c2f)
client-ivs-realtime: Update GetParticipant to return additional metadata. (4adb626)
client-lambda: Adds support for Lambda functions to access Dual-Stack subnets over IPv6, via an opt-in flag in CreateFunction and UpdateFunctionConfiguration APIs (2bb63a0)
client-location: This release adds endpoint updates for all AWS Location resource operations. (f71b216)
client-machine-learning: This release marks Password field as sensitive (4d5eac6)
client-rds: This release adds support for adding a dedicated log volume to open-source RDS instances. (634a983)
client-rekognition: Amazon Rekognition introduces support for Custom Moderation. This allows the enhancement of accuracy for detect moderation labels operations by creating custom adapters tuned on customer data. (87763f3)
client-sagemaker: Amazon SageMaker Canvas adds KendraSettings and DirectDeploySettings support for CanvasAppSettings (685916c)
client-textract: This release adds 9 new APIs for adapter and adapter version management, 3 new APIs for tagging, and updates AnalyzeDocument and StartDocumentAnalysis API parameters for using adapters. (4ce1e29)
client-transcribe: This release is to enable m4a format to customers (8c24c28)
clients: update client endpoints as of 2023-10-12 (3476339)

Readme

Source

@aws-sdk/credential-provider-web-identity

An internal package

Usage

You probably shouldn't, at least directly. Please use @aws-sdk/credential-providers instead.

Keywords

FAQs

What is @aws-sdk/credential-provider-web-identity?

Is @aws-sdk/credential-provider-web-identity popular?

Is @aws-sdk/credential-provider-web-identity well maintained?

Last updated on 12 Oct 2023

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install