Struct rusoto_sts::WebIdentityProvider
source · [−]pub struct WebIdentityProvider {
pub web_identity_token: Variable<Secret, CredentialsError>,
pub role_arn: Variable<String, CredentialsError>,
pub role_session_name: Option<Variable<Option<String>, CredentialsError>>,
pub duration_seconds: Option<i64>,
pub policy: Option<String>,
pub policy_arns: Option<Vec<PolicyDescriptorType>>,
}
Expand description
WebIdentityProvider using OpenID Connect bearer token to retrieve AWS IAM credentials.
See https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html for more details.
Fields
web_identity_token: Variable<Secret, CredentialsError>
The OAuth 2.0 access token or OpenID Connect ID token that is provided by the identity provider. Your application must get this token by authenticating the user who is using your application with a web identity provider before the application makes an AssumeRoleWithWebIdentity call.
role_arn: Variable<String, CredentialsError>
The Amazon Resource Name (ARN) of the role that the caller is assuming.
role_session_name: Option<Variable<Option<String>, CredentialsError>>
An identifier for the assumed role session. Typically, you pass the name or identifier that is associated with the user who is using your application. That way, the temporary security credentials that your application will use are associated with that user. This session name is included as part of the ARN and assumed role ID in the AssumedRoleUser response element.
duration_seconds: Option<i64>
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
policy: Option<String>
An IAM policy in JSON format that you want to use as an inline session policy.
policy_arns: Option<Vec<PolicyDescriptorType>>
The Amazon Resource Names (ARNs) of the IAM managed policies that you want to use as managed session policies.
Implementations
sourceimpl WebIdentityProvider
impl WebIdentityProvider
sourcepub fn new<A, B, C>(
web_identity_token: A,
role_arn: B,
role_session_name: Option<C>
) -> Self where
A: Into<Variable<Secret, CredentialsError>>,
B: Into<Variable<String, CredentialsError>>,
C: Into<Variable<Option<String>, CredentialsError>>,
pub fn new<A, B, C>(
web_identity_token: A,
role_arn: B,
role_session_name: Option<C>
) -> Self where
A: Into<Variable<Secret, CredentialsError>>,
B: Into<Variable<String, CredentialsError>>,
C: Into<Variable<Option<String>, CredentialsError>>,
Create new WebIdentityProvider by explicitly passing its configuration.
sourcepub fn from_k8s_env() -> Self
pub fn from_k8s_env() -> Self
Creat a WebIdentityProvider from the following environment variables:
AWS_WEB_IDENTITY_TOKEN_FILE
path to the web identity token file.AWS_ROLE_ARN
ARN of the role to assume.AWS_ROLE_SESSION_NAME
(optional) name applied to the assume-role session.
See https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html for more information about how IAM Roles for Kubernetes Service Accounts works.
Trait Implementations
sourceimpl Clone for WebIdentityProvider
impl Clone for WebIdentityProvider
sourcefn clone(&self) -> WebIdentityProvider
fn clone(&self) -> WebIdentityProvider
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for WebIdentityProvider
impl Debug for WebIdentityProvider
sourceimpl ProvideAwsCredentials for WebIdentityProvider
impl ProvideAwsCredentials for WebIdentityProvider
Auto Trait Implementations
impl !RefUnwindSafe for WebIdentityProvider
impl Send for WebIdentityProvider
impl Sync for WebIdentityProvider
impl Unpin for WebIdentityProvider
impl !UnwindSafe for WebIdentityProvider
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more