software.amazon.awssdk.auth.credentials

Class DefaultCredentialsProvider

java.lang.Object

software.amazon.awssdk.auth.credentials.DefaultCredentialsProvider

All Implemented Interfaces:

AutoCloseable, AwsCredentialsProvider, SdkAutoCloseable

public final class DefaultCredentialsProvider
extends Object
implements AwsCredentialsProvider, SdkAutoCloseable

AWS credentials provider chain that looks for credentials in this order:

1. Java System Properties - aws.accessKeyId and aws.secretAccessKey
2. Environment Variables - AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
3. Credential profiles file at the default location (~/.aws/credentials) shared by all AWS SDKs and the AWS CLI
4. Credentials delivered through the Amazon EC2 container service if AWS_CONTAINER_CREDENTIALS_RELATIVE_URI" environment variable is set and security manager has permission to access the variable,
5. Instance profile credentials delivered through the Amazon EC2 metadata service

See Also:

SystemPropertyCredentialsProvider, EnvironmentVariableCredentialsProvider, ProfileCredentialsProvider, WebIdentityTokenFileCredentialsProvider, ContainerCredentialsProvider, InstanceProfileCredentialsProvider

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	DefaultCredentialsProvider.Builder Configuration that defines the DefaultCredentialsProvider's behavior.

Method Summary

Modifier and Type	Method and Description
static DefaultCredentialsProvider.Builder	builder() Get a builder for defining a DefaultCredentialsProvider with custom configuration.
void	close()
static DefaultCredentialsProvider	create() Create an create of the DefaultCredentialsProvider using the default configuration.
AwsCredentials	resolveCredentials() Returns AwsCredentials that can be used to authorize an AWS request.
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Detail

create

public static DefaultCredentialsProvider create()

Create an create of the DefaultCredentialsProvider using the default configuration. Configuration can be specified by creating an create using the builder().

builder

public static DefaultCredentialsProvider.Builder builder()

Get a builder for defining a DefaultCredentialsProvider with custom configuration.

resolveCredentials

public AwsCredentials resolveCredentials()

Description copied from interface: AwsCredentialsProvider

Returns AwsCredentials that can be used to authorize an AWS request. Each implementation of AWSCredentialsProvider can chose its own strategy for loading credentials. For example, an implementation might load credentials from an existing key management system, or load new credentials when credentials are rotated.

If an error occurs during the loading of credentials or credentials could not be found, a runtime exception will be raised.

Specified by:

resolveCredentials in interface AwsCredentialsProvider

Returns:

AwsCredentials which the caller can use to authorize an AWS request.

close

public void close()

Specified by:

close in interface AutoCloseable

Specified by:

close in interface SdkAutoCloseable

toString

public String toString()

Overrides:

toString in class Object