-
Type:
New Feature
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
None
-
Go Drivers
-
None
-
None
-
None
-
None
-
None
-
None
The build in MONGODB-AWS authenticator in the Go driver uses a minimal internal AWS implementation that derives the signing region from the server-sent STS host (sm.Host), ignoring standard AWS SDK environment variables like AWS_STS_REGIONAL_ENDPOINT=regional and AWS_REGION. This forces users to create custom authenticator solutions which can be rather complicated (see here).
This ticket proposes that we create an optional submodule:
go.mongodb.org/mongo-driver/v2/x/driver/auth/mongoaws
That depends on github.com/aws/aws-sdk-go-v2 so that users can optionally register an AuthenticatorFactory that uses the official AWS SDK
import "go.mongodb.org/mongo-driver/v2/x/driver/auth/mongoaws" func main() { auth.RegisterAuthenticatorFactory(auth.MongoDBAWS,mongoaws.AF) }
- is duplicated by
-
GODRIVER-3454 Allow users to provide custom AWS configuration
-
- Closed
-
- is related to
-
GODRIVER-3570 AWS Go SDK is EOL by August 2025
-
- Needs Triage
-
-
GODRIVER-3568 Should Go driver honor AWS_STS_REGIONAL_ENDPOINTS/AWS_REGION in AssumeRoleProvider.RetrieveWithContext
-
- Needs Triage
-
- related to
-
DRIVERS-3194 Add opt-in AWS SDK delegation for MONGODB-AWS Authentication
-
- Closed
-