i have a similar problem — because my personal IAM Role doesn't have athena access, so I need to assume a pre-provisioned "query" role ... but the interface to AthenaExpress doesn't take a credential provide, it takes the whole 'aws' object (which i don't understand - isn't this global?)

i think this might work

import { ChainableTemporaryCredentials, Credentials, S3 } from "aws-sdk"

// configure creds
const credentials: Credentials = new ChainableTemporaryCredentials({
  params: {
    RoleArn: "arn:aws:iam::xxxxxx:role/foo",
    RoleSessionName: "foo"
  }
})

// set global creds 🔥
AWS.config.credentials = credentials

// construct athena express
athena = new AthenaExpress({
      aws: AWS,
      ...
})

hoping one day to instead supply either credentials or a client — example:

import { ChainableTemporaryCredentials, Credentials, S3 } from "aws-sdk"

// configure creds
const credentials: Credentials = new ChainableTemporaryCredentials({
  params: {
    RoleArn: "arn:aws:iam::453719517077:role/pmcintyre-tmp",
    RoleSessionName: "foo"
  }
})

// construct athena express with AWS.Credential
athena = new AthenaExpress({
      credentials,
      ...
})

// or; construct athena express with custom clients
const athena = new S3({ credentials })
const s3 = new S3({ credentials })
athena = new AthenaExpress({
      athena, s3,
      ...
})

Arn Role #68

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions