如何使用WebIdentityTokenFileCredentialsProvider连接Dynamo DB

Question

我有访问密钥、密钥、区域和dynamo DBendpoint，通过它们我可以连接到数据库，并且我在应用程序中保留了配置。属性文件。现在的要求是不在应用程序中保留访问密钥和密钥。属性文件并遵循AWS STS中的Web标识令牌。我已从应用程序中删除访问密钥和密码。属性文件，并具有以下配置。当我启动应用程序时，我收到以下消息

考虑定义COM类型的bean。亚马逊。服务。发电机BV2。AmazonDynamoDB'在您的配置中。

import com.amazonaws.services.dynamodbv2.datamodeling.DynamoDBMapperConfig;
import com.amazonaws.services.dynamodbv2.datamodeling.DynamoDBMapperConfig.DefaultTableNameResolver;
import com.amazonaws.services.dynamodbv2.datamodeling.DynamoDBMapperConfig.TableNameOverride;
import com.amazonaws.services.dynamodbv2.datamodeling.DynamoDBTypeConverterFactory;
import org.socialsignin.spring.data.dynamodb.repository.config.EnableDynamoDBRepositories;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import software.amazon.awssdk.auth.credentials.WebIdentityTokenFileCredentialsProvider;
import software.amazon.awssdk.regions.Region;
import software.amazon.awssdk.services.dynamodb.DynamoDbClient;

@Configuration
@EnableDynamoDBRepositories(dynamoDBMapperConfigRef = "dynamoDBMapperConfig", basePackages = "com.xyz.repository")
public class DynamoDBConfiguration {

  @Value("${aws.dynamodb.endpoint}")
  private String endpoint;

  @Value("${aws.region}")
  private String region;

  @Value("${aws.dynamodb.table.name}")
  private String tableName;

  @Bean
  public DynamoDBMapperConfig dynamoDBMapperConfig(TableNameOverride tableNameOverrider) {
    DynamoDBMapperConfig.Builder builder = new DynamoDBMapperConfig.Builder();
    builder.withTypeConverterFactory(DynamoDBTypeConverterFactory.standard());
    builder.withTableNameResolver(DefaultTableNameResolver.INSTANCE);
    builder.withTableNameOverride(tableNameOverrider());
    return builder.build();
  }

  @Bean
  public TableNameOverride tableNameOverrider() {
    return TableNameOverride.withTableNamePrefix(tableName);
  }

  @Bean
  public DynamoDbClient amazonDynamoDB() {
    return DynamoDbClient.builder()
        .region(Region.of(region))
        .credentialsProvider(WebIdentityTokenFileCredentialsProvider.create())
        .build();
  }

} 

pom.xml我有以下与AWS相关的依赖项。

<dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>software.amazon.awssdk</groupId>
                <artifactId>bom</artifactId>
                <version>2.15.0</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
</dependencyManagement>

        <dependency>
            <groupId>io.github.boostchicken</groupId>
            <artifactId>spring-data-dynamodb</artifactId>
            <version>5.2.5</version>
        </dependency>
        <dependency>
            <groupId>software.amazon.awssdk</groupId>
            <artifactId>dynamodb</artifactId>
        </dependency>
        <dependency>
            <groupId>software.amazon.awssdk</groupId>
            <artifactId>sts</artifactId>
        </dependency> 

Answer 1

你有比信用问题更多的东西。在Java代码中，您在导入语句中引用V1。Java V1 API始终以以下内容开头：

com.amazonaws.services.dynamodbv2。**

Java DyanamoDB V2 API是：

软件亚马逊。awssdk。服务。发电机B*

现在，您的POM文件引用V2 API：

<dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>software.amazon.awssdk</groupId>
                <artifactId>bom</artifactId>
                <version>2.15.0</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
</dependencyManagement>

你不应该混淆V1和V2。您将V2用于服务客户端，V1用于DynamoDBMapperConfig对象。这不是好的做法，也不会奏效。

去掉v1api，只替换为v2api。您似乎想要使用DynamoDBMapper功能。对于V2，这现在是增强型客户端的一部分。

在AWS SDK for Java 2中使用DynamoDB增强型客户端。十、

要查看介绍如何使用AWS SDK for Java V2（包括增强型客户端）构建Spring BOOT应用程序的AWS教程，请参阅：

创建Amazon DynamoDB web应用程序项跟踪器

在本教程中，EnvironmentVariableCredentialsProvider用于处理AWS键值。