This AWS Credential Provider is used to load up AWS Credentials based on options provided on the Jaas config line.
As as an example
sasl.jaas.config = IAMLoginModule required awsProfileName={profile name};
The currently supported options are:
1. A particular AWS Credential profile: awsProfileName={profile name}
2. A particular AWS IAM Role and optionally AWS IAM role session name and AWS region for the STS endpoint:
awsRoleArn={IAM Role ARN}, awsRoleSessionName={session name}, awsStsRegion={region name}
3. Optional arguments to configure retries when we fail to load credentials:
awsMaxRetries={Maximum number of retries}, awsMaxBackOffTimeMs={Maximum back off time between retries in ms}
4. Optional argument to help debug credentials used to establish connections:
awsDebugCreds={true|false}
5. If no options is provided, the DefaultAWSCredentialsProviderChain is used.
The DefaultAWSCredentialProviderChain can be pointed to credentials in many different ways:
Working with AWS Credentials