allenc97 commented on code in PR #69509:
URL: https://github.com/apache/airflow/pull/69509#discussion_r3572777923
##########
providers/databricks/src/airflow/providers/databricks/hooks/databricks_base.py:
##########
@@ -917,13 +926,17 @@ def _get_federation_subject_token(self) -> tuple[str, str
| None]:
"""
Resolve the OIDC JWT to exchange for a Databricks token (RFC 8693
``subject_token``).
- Two subject-token sources are supported:
+ Three subject-token sources are supported:
* ``federated_token_provider`` -- a dotted path to a ``Callable[[],
str]`` that returns
the JWT. The token is obtained in-process and never written to disk,
so a control
plane can vend a short-lived, per-workload identity token for the
exchange. ``client_id``
is optional here: supply it in the extra for a service principal
federation policy, or
omit it for an account-wide federation policy.
+ * AWS IAM (``federated_aws``) -- mint an AWS-signed OIDC JWT via AWS
STS
Review Comment:
Updated the docstring for `_get_federated_databricks_token` to also include
AWS STS.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
