Question

如果不使用系统级别的默认配置，则无法连接到Spring Cloud Stream Kinesis绑定程序（1.2.0.RELEASE）中的AWS kinesis。仅当系统已配置为使用默认配置文件且访问密钥ID和秘密访问密钥已通过[默认]配置文件设置时，该应用程序才能运行。否则，它将无法通过抛出此异常来连接到AWS资源：

Caused by: com.amazonaws.SdkClientException: Unable to load AWS credentials from any provider in the chain: [com.amazonaws.auth.EC2ContainerCredentialsProviderWrapper@3b2c8bda: Unable to load credentials from service endpoint, com.amazonaws.auth.profile.ProfileCredentialsProvider@688d619c: No AWS profile named 'default']
    at com.amazonaws.auth.AWSCredentialsProviderChain.getCredentials(AWSCredentialsProviderChain.java:136)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.getCredentialsFromContext(AmazonHttpClient.java:1225)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.runBeforeRequestHandlers(AmazonHttpClient.java:801)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:751)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:744)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:726)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:686)
    at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:668)
    at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:532)
    at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:512)
    at com.amazonaws.services.dynamodbv2.AmazonDynamoDBClient.doInvoke(AmazonDynamoDBClient.java:3768)
    at com.amazonaws.services.dynamodbv2.AmazonDynamoDBClient.invoke(AmazonDynamoDBClient.java:3737)
    at com.amazonaws.services.dynamodbv2.AmazonDynamoDBClient.executeDescribeTable(AmazonDynamoDBClient.java:1836)
    at com.amazonaws.services.dynamodbv2.AmazonDynamoDBClient.describeTable(AmazonDynamoDBClient.java:1804)
    at com.amazonaws.services.dynamodbv2.document.Table.describe(Table.java:137)
    at org.springframework.integration.aws.metadata.DynamoDbMetadataStore.afterPropertiesSet(DynamoDbMetadataStore.java:145)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1837)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1774)

我尝试了以下选项，但没有一个对我有用：

设置环境变量AWS_ACCESS_KEY_ID和AWS_SECRET_ACCESS_KEY
设置Java系统属性aws.accessKeyId和aws.secretKey
在cloud.aws.credentials.accessKey文件中设置cloud.aws.credentials.secretKey和application.yml。

Answer 1

我解决了这个问题。

我认为spring-cloud-starter-aws无法自动配置。所以我以编程方式设置访问密钥和秘密密钥，如下所示：

@Configuration
class AWSS3Configuration {

  @Value("\${cloud.aws.credentials.access-key}")
  val accessKey: String = ""

  @Value("\${cloud.aws.credentials.secret-key}")
  val secretKey: String = ""

  @Bean
  fun amazonS3(): AmazonS3 =
    AmazonS3ClientBuilder.standard()
      .withCredentials(AWSStaticCredentialsProvider(BasicAWSCredentials(accessKey, secretKey)))
      .build()

}

Answer 2

由于某种原因，似乎AWSCredentialProvide Bean加载不正确，因此我能够通过设置以下Bean暂时解决此问题。这不是一个正确的解决方法，但是它确实阻止了我的工作：

@Configuration
public class AWSCredentialProvider {
  @Value("${aws.access-key}")
  protected String accessKey;

  @Value("${aws.secret-key}")
  protected String secretKey;

  @Bean
  @Primary
  public AWSCredentialsProvider buildAWSCredentialsProvider() {
    AWSCredentials awsCredentials = new BasicAWSCredentials(accessKey, secretKey);
    return new AWSStaticCredentialsProvider(awsCredentials);
  }
}

Answer 3

这几乎使我发疯。仔细跟踪AWS代码后，我发现如果将系统属性 cloud.aws.credentials.use-default-aws-credentials-chain 设置为 true ，在DefaultAWSCredentialsProviderChain中切换。否则，它将使用两个提供程序的链-EC2ContainerCredentialsProviderWrapper和ProfileCredentialsProvider。这是针对Spring Boot 2.3.4的。对于版本2.2.5，系统属性为 cloud.aws.credentials.useDefaultAwsCredentialsChain 。我还没有研究过将其更改为烤肉串的版本。没有此功能，它将忽略在环境变量或系统属性中传递的凭据。这段代码在ContextCredentialsAutoConfiguration.registerBeanDefinitions（）中。

无法从Spring Cloud Stream Kinesis绑定程序链中的任何提供商加载AWS凭证

3 个答案: