Aws sdk go irsa. Apr 5, 2022 · In this article I will show how to setup IAM Roles for Service Accounts (IRSA) using Terraform and Kubernetes manifests, and how to use this authentication mechanism with a microservice running. The main modification is the process of generating the keys. json document. Documentation. Use of this credentials provider requires the 'sts' module to be on the classpath. Example of using the AWS SDK for Go v2 with IAM Roles for Service Accounts and ECR - jimmyraywv/aws-sdk-go-v2-irsa-ecr The steps below are based on the guide for configuring IRSA for DIY Kubernetes, with modifications specific to EKS Anywhere’s cluster provisioning workflow. In this post we’ll create a function in Golang that uses AWS IAM and ambient credentials to create and manage resources in AWS. Feb 10, 2011 · To use the credentials from IAM roles for service accounts (IRSA), your code can use any AWS SDK to create a client for an AWS service with an SDK, and by default the SDK searches in a chain of locations for AWS Identity and Access Management credentials to use. Dec 2, 2019 · While the SDKs just work with other AWS hosting models, you need to do some manual work to get EKS IAM role assumption to work. This isn’t consistent across SDK languages – the Go SDK seems to fall into the Just Works category, but others like the Java SDK need a tweak. Feb 3, 2022 · When using IAM Roles for Service Accounts (IRSA) the java library authenticates using WebIdentityTokenFileCredentialsProvider and it requires the sts module to work. Jul 9, 2025 · We show you how to create AWS ECR repositories from a function written in Go using IAM Roles for Service Accounts. gifylgegfmoildeajyxyuxrkswrbsbfdtduwdkshakdrj