amazon-kinesis-video-streams-parser-library icon indicating copy to clipboard operation
amazon-kinesis-video-streams-parser-library copied to clipboard

Published 20 hours ago • verified publisher icon aws

[QUESTION] Any plans to use aws-sdk-java V2?

Open Alex-Wenner-FHR opened this issue 1 year ago • 3 comments

I am wondering if there are any plans to upgrade the pom.xml to use aws-sdk-java-v2 found here?

I see that there are known vulnerabilities on aws-java-sdk-core:1.12.437.

After reading a bit, I found this issue where the AWS team says that they are not focused on v1 and rather have shifted focus to V2. See this issue

Does the team have any thoughts on this? Thanks!

Alex-Wenner-FHR avatar Mar 29 '23 17:03 Alex-Wenner-FHR

@Alex-Wenner-FHR ,

Moving to aws-sdk-java-v2 would be a bigger task and would require a lot of testing to ensure our SDK does not break. Will update the thread when we have more details.

disa6302 avatar Mar 29 '23 17:03 disa6302

@disa6302 thanks for the follow up. Are these vulnerabilities false positives or are they actually known real issues? Trying to understand the risk associated here for I am not super in touch with the security side of things.

Alex-Wenner-FHR avatar Mar 29 '23 17:03 Alex-Wenner-FHR

I am working on this, there is currently a blocking issue: https://github.com/aws/aws-sdk-java-v2/issues/1330 Once this is resolved I should be able to complete the update. Unfortunately I do not have a date for this at the moment.

hassanctech avatar Jun 26 '23 13:06 hassanctech