audienceproject/spark-dynamodb

Providing a region and a roleArn still uses global STS endpoint

Closed this issue · 0 comments

When you pass a roleArn and a region, a AWSSecurityTokenServiceClient is built that still uses the global STS endpoint. This does not allow use in an isolated VPC outside of us-east-1.

val stsClient = AWSSecurityTokenServiceClientBuilder
.standard()
.withCredentials(new DefaultAWSCredentialsProviderChain)
.withRegion(chosenRegion)
.build()