Package com.amazonaws.auth

Interface Summary

Interface	Description
AccountIdAware	Interface to represent who is using the SDK, i.e., the identity of the signer, used for authentication.
AWSCredentials	Provides access to the AWS credentials used for accessing AWS services: AWS access key ID and secret access key.
AWSCredentialsProvider	Interface for providing AWS credentials.
AWSRefreshableSessionCredentials	Session credentials that can be refreshed upon request.
AWSSessionCredentials	AWS session credentials object.
AWSSessionCredentialsProvider
CanHandleNullCredentials	Used to explicitly indicate that a Signer can gracefully handle credentials being null when calling Signer.sign(SignableRequest, AWSCredentials)
EndpointPrefixAwareSigner	A signer that knows the endpoint prefix of the AWS service.
NoSessionSupportCredentials	Marker interface for credentials that should not be used to start AWS Security Token Service sessions.
Presigner	A request signer that has special-case logic to presign requests, generating a URL which embeds the signature suitable for hyperlinking.
ProviderNameAware	Interface to represent the name of the entity that resolved these credentials.
RegionAwareSigner	A signer that needs to know which region it is talking to.
RegionFromEndpointResolverAwareSigner	A signer that is aware of a RegionFromEndpointResolver that it can use for converting an endpoint into a signing region.
RequestSigner	A strategy for applying cryptographic signatures to a request, proving that the request was made by someone in posession of the given set of credentials without transmitting the secret key over the wire.
SdkClock	Clock interface to prevent static coupling to System.currentTimeMillis().
ServiceAwareSigner	A signer that needs to know which service it is talking to.
Signer	A strategy for applying cryptographic signatures to a request, proving that the request was made by someone in posession of the given set of credentials without transmitting the secret key over the wire.
SignerTypeAware	Used to mark implementations of AmazonWebServiceRequest that specify a custom signer type.
WebIdentityTokenCredentialsProvider.Builder	A builder for creating a custom WebIdentityTokenCredentialsProvider.

Class Summary

Class	Description
AbstractAWSSigner	Abstract base class for AWS signing protocol implementations.
AnonymousAWSCredentials	Basic implementation of the AWSCredentials interface that allows use of "anonymous" credentials.
AWS3Signer	Signer implementation that signs requests with the AWS3 signing protocol.
AWS4Signer	Signer implementation that signs requests with the AWS4 signing protocol.
AWS4UnsignedPayloadSigner	Exactly the same as AWS4Signer except if the request is being sent over HTTPS, then it returns the string UNSIGNED-PAYLOAD as the content SHA-256 so services that support it can avoid needing to calculate the value when authorizing the request.
AwsChunkedEncodingInputStream	A wrapper class of InputStream that implements chunked-encoding.
AWSCredentialsProviderChain	AWSCredentialsProvider implementation that chains together multiple credentials providers.
AWSStaticCredentialsProvider	Simple implementation of AWSCredentialsProvider that just wraps static AWSCredentials.
BasicAWSCredentials	Basic implementation of the AWSCredentials interface that allows callers to pass in the AWS access key and secret access in the constructor.
BasicSessionCredentials	Simple session credentials with keys and session token.
ClasspathPropertiesFileCredentialsProvider	AWSCredentialsProvider implementation that loads AWS security credentials from a properties file on the classpath.
ContainerCredentialsProvider	AWSCredentialsProvider implementation that loads credentials from a local metadata service.
DefaultAWSCredentialsProviderChain	AWS credentials provider chain that looks for credentials in this order: Environment Variables - AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (RECOMMENDED since they are recognized by all the AWS SDKs and CLI except for .NET), or AWS_ACCESS_KEY and AWS_SECRET_KEY (only recognized by Java SDK) Java System Properties - aws.accessKeyId and aws.secretKey Web Identity Token credentials from the environment or container Credential profiles file at the default location (~/.aws/credentials) shared by all AWS SDKs and the AWS CLI Credentials delivered through the Amazon EC2 container service if AWS_CONTAINER_CREDENTIALS_RELATIVE_URI" environment variable is set and security manager has permission to access the variable, Instance profile credentials delivered through the Amazon EC2 metadata service
EC2ContainerCredentialsProviderWrapper	AWSCredentialsProvider that loads credentials from an Amazon Container (e.g.
EnvironmentVariableCredentialsProvider	AWSCredentialsProvider implementation that provides credentials by looking at the: AWS_ACCESS_KEY_ID (or AWS_ACCESS_KEY) and AWS_SECRET_KEY (or AWS_SECRET_ACCESS_KEY) environment variables.
InstanceProfileCredentialsProvider	Credentials provider implementation that loads credentials from the Amazon EC2 Instance Metadata Service (IMDS).
NoOpSigner	A No-Op Signer Implementation.
PEMObject	A PEM object in a PEM file.
ProcessCredentialsProvider	A credentials provider that can load credentials from an external process.
ProcessCredentialsProvider.Builder	Used to configure and create a ProcessCredentialsProvider.
PropertiesCredentials	Simple implementation AWSCredentials that reads in AWS access keys from a properties file.
PropertiesFileCredentialsProvider	AWSCredentialsProvider implementation that loads AWS security credentials from a properties file provided on initialization.
QueryStringSigner	Signer implementation responsible for signing an AWS query string request according to the various signature versions and hashing algorithms.
SdkClock.Instance	Container for Singleton instance of the SdkClock.
SdkClock.MockClock	Mock implementation used in tests.
SessionCredentialsProviderFactory	Session credentials provider factory to share providers across potentially many clients.
SignerAsRequestSigner	An adapter class that allows a Signer to implement the RequestSigner interface
SignerFactory	Signer factory.
SignerParams	Shared parameter structure to contain information required for signing by various signer implementations.
StaticSignerProvider	Implementation of SignerProvider that always returns the same signer regardless of context.
STSAssumeRoleSessionCredentialsProvider	AWSCredentialsProvider implementation that uses the AWS Security Token Service to assume a Role and create temporary, short-lived sessions to use for authentication.
STSAssumeRoleSessionCredentialsProvider.Builder	Provides a builder pattern to avoid combinatorial explosion of the number of parameters that are passed to constructors.
STSAssumeRoleWithWebIdentitySessionCredentialsProvider	Migrating to the AWS SDK for Java v2
STSAssumeRoleWithWebIdentitySessionCredentialsProvider.Builder	Provides a builder pattern to avoid combinatorial explosion of the number of parameters that are passed to constructors.
STSSessionCredentials	Deprecated
STSSessionCredentialsProvider	AWSCredentialsProvider implementation that uses the AWS Security Token Service to create temporary, short-lived sessions to use for authentication.
SystemPropertiesCredentialsProvider	AWSCredentialsProvider implementation that provides credentials by looking at the aws.accessKeyId and aws.secretKey Java system properties.
WebIdentityFederationSessionCredentialsProvider	AWSCredentialsProvider implementation that uses the AWS Security Token Service to create temporary, short-lived sessions to use for authentication.
WebIdentityTokenCredentialsProvider	Migrating to the AWS SDK for Java v2

Enum Summary

Enum	Description
PEM	A PEM utility that can be used to read keys from PEM.
PEMObjectType	The type of a specific PEM object in a PEM file.
RSA	Utility for RSA keys.
SignatureVersion
SigningAlgorithm