SSO & Parameter Store

[FluidSense]

Hello! 👋

I am using currently migrating from a manual setup to using spring-cloud-aws-starter-parameter-store:3.1.0 for variables.
However, I use AWS SSO for authentication towards AWS for most things. Is there a way to have this dependency get the credentials from .aws/sso/cache too?

It does not seem to be able to autoconfigure with SSO, all I get is this:

***************************
APPLICATION FAILED TO START
***************************

Description:

Config data resource '[ParameterStoreConfigDataResource@2d35442b context = '/config/app', optional = false]' via location 'aws-parameterstore:/config/app' does not exist

Action:

Check that the value 'aws-parameterstore:/config/app' at class path resource [application-local.yml] - 8:9 is correct, or prefix it with 'optional:'


Process finished with exit code 1

[maciejwalkowiak]

I'm not very familiar with this topic. How did you get credentials from this file before? If you have custom credentials provider you can configure it in bootstrap context like explained in docs: https://docs.awspring.io/spring-cloud-aws/docs/3.1.1/reference/html/index.html#customizing-ssmclient

Does it help?

[FluidSense]

Thank you for replying.

How did you get credentials from this file before?

Earlier, I used the AWS CLI to set all environment properties before boot. The AWS CLI automatically picks up the SSO credentials. Now I am moving to using spring-cloud-aws-starter-parameter-store to set them instead, and this does not automatically pick up that I am signed in.

If you have custom credentials provider you can configure it in bootstrap context like explained in docs.

I tried setting this up with the new (Spring Boot 3) META-INF setup, but I am not sure whether it detects the file or not.
Setting it in the old META-INF/spring.factories did not seem to do anything either. So maybe there is something else with my setup.

Even adding it with this.addBootstrapRegistryInitializer(ParameterStoreBootstrapConfiguration()) in Application did nothing, as far as I can tell

[christoph-herb-mw]

i have the same issue. Did you find a solution for this problem?

[FluidSense]

Sadly, no.
I ended up using a work-around through Jetbrains' Intellij, where the AWS plugin supports SSO login and worked with the automatic credential configuration for this dependency. Since I only used this plugin for local development, that was enough for me to keep working.

[christoph-herb-mw]

I found a solution for this problem. If you add the following dependencies to your project, it works just fine:

  implementation 'io.awspring.cloud:spring-cloud-aws-starter-parameter-store:3.1.1'
  implementation 'software.amazon.awssdk:sso:2.26.5'
  implementation 'software.amazon.awssdk:ssooidc:2.26.5'

[MatejNedic]

@FluidSense @christoph-herb-mw
Yes, you need to include sso dependency in other for AWS DefualCredentialsProvider to include it.

No implementation needed since AWS SDK already takes care of it but you need dependency included.