d2a4u/sqs4s

Streaming client for AWS SQS using fs2

sqs4s's Issues

Tutorial micro site using tut

Need to write some tutorial/examples/document using https://github.com/tpolecat/tut to explain Encoding/Decoding and Serialization

Performance tests

Need to performance tests the library to compare with AWS Java SDK performance

Automatic auth discovery inside AWS

When running on EC2 / ECS / EKS you can attach roles directly to your application, instead of passing them explicit credentials.
The Java SDK is capable of automatically finding the ACCESS KEY, SECRET KEY and SESION_TOKEN for authorizing your requests.

It would be great if this library would be able to do the same.

Missing support for AWS Security Token Service (STS)

Similar to #126, when searching for credentials inside a container running in a AWS kubernetes cluster (EKS) with an assigned service account and matching IAM role, the credentials are provided via the following env vars:

AWS_DEFAULT_REGION:              eu-central-1
AWS_REGION:                      eu-central-1
AWS_ROLE_ARN:                    arn:aws:iam::<ACCOUNT_ID>role/<ROLE>
AWS_WEB_IDENTITY_TOKEN_FILE:     /var/run/secrets/eks.amazonaws.com/serviceaccount/token

Currently sqs4s does not support this method of authentication.

The AWS Java SDK implementation can be found here: https://github.com/aws/aws-sdk-java/blob/master/aws-java-sdk-sts/src/main/java/com/amazonaws/auth/STSAssumeRoleWithWebIdentitySessionCredentialsProvider.java

Without this support, the credentials chain resolve to the EKS (EC2) node credentials, which in my case are not correct.

I may be able to provide a "starting PR" with a naive implementation using the temporaryCredentials method and a call to the web identity token service.

Docs:

• Associate an IAM role to a service account
• Assume Role with Web Identity Token