AWS First Steps
New feature

IAM Roles Anywhere now offers a Java plugin for the AWS SDK

IAM Roles Anywhere provides a plugin for the AWS SDK for Java v2, allowing workloads running outside AWS to obtain temporary AWS credentials directly within the Java application process, eliminating the need for a separate credential helper process.

IAM Roles Anywhere provides a plugin for the AWS SDK for Java v2, enabling workloads running outside AWS to retrieve temporary AWS credentials directly within Java applications. The plugin runs in the same JVM as the application, eliminating the need to run the IAM Roles Anywhere credential helper in a separate process or configure credential_process in the AWS profile. Users can automatically resolve temporary credentials by configuring the plugin in the AWS SDK for Java v2 service client builder. The plugin calls CreateSession and automatically refreshes credentials before expiration. It supports RSA, elliptic curve (EC), and ML-DSA keys, requiring Java 8 or higher. Using this plugin incurs no additional charges. IAM Roles Anywhere is available in all AWS regions, including AWS GovCloud (US), AWS European Sovereign Cloud (Germany), and China regions.

Why it matters

IAM Roles Anywhere is a service that allows applications running outside AWS to securely access AWS resources. This update improves security and usability by enabling direct credential retrieval within Java applications.

Read the original AWS announcement

Related articles and terms

AWS IAMAn authentication and authorization service for securely controlling access to AWS resources, providing fine-grained access management through users, groups, roles, and policiesDesigning Identity and Access Management - Achieving Zero Trust Security with IAMLearn access management design techniques with AWS IAM, including the principle of least privilege, policy design, and achieving zero trust security through Cognito integration.Amazon Q DeveloperAn AI assistant for developers that helps with code generation, debugging, and optimizationAccelerating AWS Development with Amazon Q Developer - AI Code Generation and TroubleshootingLearn how to use Amazon Q Developer for in-IDE code generation, AWS console troubleshooting, and code transformation.Automating Framework Migration - Bulk Language and Runtime Upgrades with AWS Transform CustomLearn how to automate framework and runtime migrations with AWS Transform Custom. Covers Java version upgrades, Python 2 to 3 migration, and enterprise-specific transformation patterns.