Uploaded image for project: 'Build'
  1. Build
  2. BUILD-1178

Upgrade to AWS SDK 2.21.x

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Neutral
    • None
    • None
    • None
    • None
    • Yes

    Description

      There is a new AWS SDK minor version that came out. Although we haven't seen it in Renovate yet, we should upgrade to using it, considering AWS will not backport all security fixes, such as explicitely said to fgrilli here: https://github.com/aws/aws-sdk-java-v2/issues/4638

          - This release contains a major internal refactor of authentication. The 
          refactor is part of moving the SDK to a standardized AWS SDK architecture.

            It paves the way for new features to be released over the coming months: SDK plugins to provide a unified interface to add third-party functionality to the SDK and the ability to define additional ways of authenticating with services. 

            With this release, custom 3rd party credential providers can be created with fewer SDK dependencies (with the new `identity-spi` module), and AWS signers can be used with fewer SDK dependencies (with the new `http-auth-aws` module).

            Because this is a major refactor that may result in backwards-compatible behavior changes, this release bumps the minor version of the SDK to 2.21.

      AC

      • run the validation pipeline
      • services-demo-integration tests (when available) may also be used as QA marker
      • communicate this on Slack for downstream developers to not be caught by surprise
      • re: do we even need to manage Netty ourselves - check with Andrei if still true. There have been runtime glitches due to version misalignment in the past, but back then we didn't have e.g. the validation pipeline.
        • 'I remember that there was a compatibility matrix from aws to pair the aws sdk with the transport library (netty). In the past, we had an issue where the 2 libraries were miss-aligned and causing runtime exceptions in the code.'

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              fgrilli Federico Grilli
              mmichel Maxime Michel
              Foundation
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Work Started:

                Checklists

                  Task DoR