Skip to content

Conversation

yuxianrz
Copy link

@yuxianrz yuxianrz commented Jul 14, 2025

Problem

aws-toolkit-vscode does not currently support assume role by inputing user keys (access key and secret key set) and role argument. To keep it consistent with other toolkit IDEs' implementation and give clients a third option to sign in beside SSO and long-term IAM credentials, this feature should be implemented.

Solution

This is part of #7507 and is built on top of #7659.

  • Add STS credentials options to LanguageClientAuth requests, including update, invalidate, and cache
  • Add STS credentials' role argument input to IAM credentials form to webview
  • Modify clients to support IAM and STS credentials

Meanwhile, we are making changes to language-servers and language-server-runtimes such that authentication for IAM credentials can happen on Flare side.


  • License: I confirm that my contribution is made under the terms of the Apache 2.0 license.

@yuxianrz yuxianrz requested review from a team as code owners July 14, 2025 18:19
Copy link

  • This pull request implements a feat or fix, so it must include a changelog entry (unless the fix is for an unreleased feature). Review the changelog guidelines.
    • Note: beta or "experiment" features that have active users should announce fixes in the changelog.
    • If this is not a feature or fix, use an appropriate type from the title guidelines. For example, telemetry-only changes should use the telemetry type.

@yuxianrz yuxianrz marked this pull request as ready for review August 1, 2025 16:25
@yuxianrz yuxianrz force-pushed the feature/sts-credentials branch from 35bc45b to 082dbf3 Compare August 1, 2025 16:28
@liramon1 liramon1 closed this Aug 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants