Allowing async refresh for role credential provider

aws · Jul 10, 2024 · 67acb73 · 67acb73
1 parent df5d25d
commit 67acb73
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/main/java/software/amazon/msk/auth/iam/internals/MSKCredentialProvider.java b/src/main/java/software/amazon/msk/auth/iam/internals/MSKCredentialProvider.java
@@ -166,8 +166,9 @@ protected AwsCredentialsProvider getDefaultProvider() {
 
     @Override
     public AwsCredentials resolveCredentials() {
+        log.error("RESOLVING CREDENTIALS!!");
         AwsCredentials credentials = loadCredentialsWithRetry();
-        if (credentials != null && shouldDebugCreds && log.isDebugEnabled()) {
+        if (credentials != null && shouldDebugCreds) {
             logCallerIdentity(credentials);
         }
         return  credentials;
@@ -218,7 +219,7 @@ private void logCallerIdentity(AwsCredentials credentials) {
         try {
             StsClient stsClient = getStsClientForDebuggingCreds(credentials);
             GetCallerIdentityResponse response = stsClient.getCallerIdentity();
-            log.debug("The identity of the credentials is {}", response.toString());
+            log.error("The identity of the credentials is {}", response.toString());
         } catch (Exception e) {
             //If we run into an exception logging the caller identity, we should log the exception but
             //continue running.
@@ -362,6 +363,7 @@ StsAssumeRoleCredentialsProvider createSTSRoleCredentialProvider(
             return StsAssumeRoleCredentialsProvider.builder()
                 .stsClient(stsClient)
                 .refreshRequest(roleRequest)
+                .asyncCredentialUpdateEnabled(true)
                 .build();
         }
 
@@ -379,6 +381,7 @@ StsAssumeRoleCredentialsProvider createSTSRoleCredentialProvider(
             return StsAssumeRoleCredentialsProvider.builder()
                 .stsClient(stsClient)
                 .refreshRequest(roleRequest)
+                .asyncCredentialUpdateEnabled(true)
                 .build();
         }
 
@@ -395,6 +398,7 @@ StsAssumeRoleCredentialsProvider createSTSRoleCredentialProvider(
             return StsAssumeRoleCredentialsProvider.builder()
                 .stsClient(getStsClientBuilder(Region.of(stsRegion)).build())
                 .refreshRequest(roleRequest)
+                .asyncCredentialUpdateEnabled(true)
                 .build();
         }
     }