[CXX-2508] Obtain AWS credentials for CSFLE in the same way as for MONGODB-AWS Created: 05/May/22  Updated: 27/Oct/23  Resolved: 29/Mar/23

Status: Closed
Project: C++ Driver
Component/s: None
Affects Version/s: None
Fix Version/s: 3.8.0

Type: New Feature Priority: Unknown
Reporter: PM Bot Assignee: Colby Pike
Resolution: Works as Designed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Issue split
split from DRIVERS-2280 Obtain AWS credentials for CSFLE in t... Closed
Quarter: FY24Q1
Upstream Changes Summary:

DRIVERS-2280:

  • Call mongocrypt_setopt_use_need_kms_credentials_state to opt in to handling the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state.
  • Handle the new MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS state. If the originally configured KMS providers have an empty aws: {}, attempt to obtain AWS credentials following the logic of Obtaining Credentials (excluding the URI section). Pass the new credentials back with mongocrypt_ctx_provide_kms_providers.
  • A new CSFLE prose test is introduced in 5cf3ed7.

Please see the C driver implementation as a reference. Note: the C driver also supports a user-provided callback for KMS providers. That is not in scope of DRIVERS-2280.


 Description   

This ticket was split from DRIVERS-2280, please see that ticket for a detailed description.



 Comments   
Comment by Kevin Albertson [ 05/Jun/23 ]

This work is done in the C driver as part of CDRIVER-4382. Users only need to upgrade the C driver to get these changes.

Generated at Wed Feb 07 22:06:08 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.