opensearch-project / opensearch-project/sql-odbc
[FEATURE] Support EC2 Instance Authentication
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 10
- Forks
- 25
- PR merge metrics
- No merged PRs in 30d
Description
I would like to use the ODBC driver on Windows EC2 instances that have an instance profile and IAM role with permissions for OpenSearch. This would eliminate the need to configure or store credentials within the EC2 instance. Unfortunately, this ODBC driver has hard coded the use of the profile credential provider when selecting IAM authentication.
The ODBC driver should switch from using Aws::Auth::ProfileConfigFileAWSCredentialsProvider to instead using Aws::Auth::DefaultAWSCredentialsProviderChain which would use EnvironmentAWSCredentialsProvider, ProfileConfigFileAWSCredentialsProvider, InstanceProfileCredentialsProvider in that order. This would provide functionality with parity to the JDBC driver and most tooling that uses the AWS SDK.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is named. Find the IAM authentication path in the ODBC driver and inspect where ProfileConfigFileAWSCredentialsProvider is selected; replace that selection with the default provider chain and verify that instance-profile authentication works on a Windows EC2 instance.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, cpp
- Domain
- authentication, cloud
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 43/100