Integration Between EKS IAM Roles And Spring Boot

[ofek-levy]

Hi guys,

Is there a recommended way to integrate a Spring Boot application running on EKS with IAM authentication? We would like to enable our Spring Boot application to access AWS services (such as RDS, ES, etc.) with an IAM Access Token instead of using simple (insecure) username and password authentication.

Is there a configuration we can use (e.g. in the same way a connection string can be "just configured" in Spring)?

If not are you guy aware of another way to integrate Spring with EKS IAM Service Account Creds?

(The way IAM integrates with EKS is: An Identity Token is being mounted to the pod and the pod uses the Identity Token to receive AWS credentials in order to access AWS services.)

Thanks and Best Regard, Ofek.

[eddumelendez]

I think you are interesting in https://github.com/spring-cloud/spring-cloud-aws/pull/617

[Fodoj]

@eddumelendez referenced PR is now closed. Does spring-cloud-aws work with EKS ServiceAccount provided roles? I could not find aws-sdk-sts included anywhere, which is a requirement for this EKS+IAM to work

[maciejwalkowiak]

Its closed but not merged. The issue still remains. We are happy to take a new PR.

[Fodoj]

@maciejwalkowiak is there a workaround to make it work, without patching spring-cloud?

[maciejwalkowiak]

I am not 100% sure if its enough byt you can provide custom credentials provider bean, just name it "credentialsProvider".