Loading...

XML

Word

Printable

JSON

Quarter:
- FY23Q3
Upstream Changes Summary:
Hide

~~DRIVERS-2280~~:

Call mongocrypt_setopt_use_need_kms_credentials_state to opt in to handling the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state.

Handle the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state. If the originally configured KMS providers have an empty aws: {}, attempt to obtain AWS credentials following the logic of Obtaining Credentials (excluding the URI section). Pass the new credentials back with mongocrypt_ctx_provide_kms_providers.

A new CSFLE prose test is introduced in 5cf3ed7.

Please see the C driver implementation as a reference. Note: the C driver also supports a user-provided callback for KMS providers. That is not in scope of ~~DRIVERS-2280~~.
Show
DRIVERS-2280 : Call mongocrypt_setopt_use_need_kms_credentials_state to opt in to handling the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state. Handle the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state. If the originally configured KMS providers have an empty aws: { }, attempt to obtain AWS credentials following the logic of Obtaining Credentials (excluding the URI section). Pass the new credentials back with mongocrypt_ctx_provide_kms_providers . A new CSFLE prose test is introduced in 5cf3ed7 . Please see the C driver implementation as a reference . Note: the C driver also supports a user-provided callback for KMS providers. That is not in scope of DRIVERS-2280 .

This ticket was split from DRIVERS-2280, please see that ticket for a detailed description.

is depended on by

PYTHON-3367 Add support for GCP attached service accounts when using GCP KMS

is duplicated by

MOTOR-959 Obtain AWS credentials for CSFLE in the same way as for MONGODB-AWS

related to

PYTHON-3418 [Auth AWS] Make aws_temp_credentials public and use SDK to fetch credentials

PYTHON-3517 Add documentation for on-demand KMS providers

split from

DRIVERS-2280 Obtain AWS credentials for CSFLE in the same way as for MONGODB-AWS