Skip to content

aws/config: validate credentials before SigV4 signing #18333

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kcreddy merged 4 commits into from
Apr 17, 2026
Merged

aws/config: validate credentials before SigV4 signing #18333

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
215458f
aws/config: validate credentials before SigV4 signing
kcreddy Apr 10, 2026
da6c965
update pr number
kcreddy Apr 10, 2026
33cf914
Merge remote-tracking branch 'upstream/main' into aws.config-static-c…
kcreddy Apr 17, 2026
fae22ac
Address review comments
kcreddy Apr 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Address review comments
  • Loading branch information
@kcreddy
kcreddy committed Apr 17, 2026
commit fae22acaaeafbad9887b0304e50311a3fc00064a
7 changes: 3 additions & 4 deletions packages/aws/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,9 @@
# newer versions go on top
- version: "6.5.1"
changes:
- description: Add credential validation to AWS Config CEL program to emit a clear error when access_key_id or secret_access_key are missing.
type: bugfix
link: https://github.com/elastic/integrations/pull/18333
- description: Document that the AWS Config data stream requires static credentials and does not support Role ARN or other SDK-based credential methods.
- description: |
Add credential validation to AWS Config CEL program to emit a clear error when access_key_id or secret_access_key are missing.
Document that the AWS Config data stream requires static credentials and does not support Role ARN or other SDK-based credential methods.
type: bugfix
link: https://github.com/elastic/integrations/pull/18333
- version: "6.5.0"
Expand Down
6 changes: 0 additions & 6 deletions packages/aws/data_stream/config/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,12 +57,6 @@ program: |
},
},
"want_more": false,
?"session_token": state.?session_token,
?"access_key": state.?access_key,
?"secret_key": state.?secret_key,
"batch_size": state.batch_size,
"aws_region": state.aws_region,
"tld": state.tld,
}
:
// Stage 1: Check if we have existing config rules to process
Expand Down
Loading