Skip to content

SNOW-2919437 Python support for AWS WIF using get_web_identity_token #2737

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
sfc-gh-xizhao wants to merge 1 commit into
base: main
Choose a base branch
from
+17 −0
Draft

SNOW-2919437 Python support for AWS WIF using get_web_identity_token #2737

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions src/snowflake/connector/wif_util.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -187,6 +187,23 @@ def create_aws_attestation(
# TODO: SNOW-2223669 Investigate if our adapters - containing settings of http traffic - should be passed here as boto urllib3session. Those requests go to local servers, so they do not need Proxy setup or Headers customization in theory. But we may want to have all the traffic going through one class (e.g. Adapter or mixin).
session = get_aws_session(impersonation_path)

# enable_aws_get_web_identity_token_for_wif = os.environ.get(
# "ENABLE_AWS_GET_WEB_IDENTITY_TOKEN_FOR_WIF"
# )
# if (
# enable_aws_get_web_identity_token_for_wif
# and enable_aws_get_web_identity_token_for_wif.lower() == "true"
# ):
# response = session.client("sts").get_web_identity_token(
# Audience=[SNOWFLAKE_AUDIENCE],
# SigningAlgorithm="RS256",
# )
# return WorkloadIdentityAttestation(
# AttestationProvider.AWS,
# response["WebIdentityToken"],
# {"region": region, "partition": partition},
# )

aws_creds = session.get_credentials()
if not aws_creds:
raise ProgrammingError(
Expand Down
Loading