[8.19](backport #47260) Add AWS auth method for cel and httpjson inputs#50141
Merged
[8.19](backport #47260) Add AWS auth method for cel and httpjson inputs#50141
Conversation
(cherry picked from commit c1883b5)
Contributor
🤖 GitHub commentsJust comment with:
|
6 tasks
Contributor
|
Pinging @elastic/obs-ds-hosted-services (Team:obs-ds-hosted-services) |
Contributor
|
Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane) |
Contributor
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
olegsu
approved these changes
Apr 15, 2026
|
more context #49956 (comment) |
andrewkroh
approved these changes
Apr 16, 2026
AndersonQ
approved these changes
Apr 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Proposed commit message
Add a new auth method for cel and httpjson that wraps the aws v4 signer.
As discussed here this PR introduces an new auth method that can be used in cel and httpjson integrations.
This AWS auth method is implemented by creating an HTTP transport that wraps the transport of the client, uses a configuration, AWS credentials, and v4 signer, and signs the request just before passing it to the next (actual) HTTP transport.
example of cel and httpjson configs that uses the aws auth:
The auth method config can be initialized with static credentials as well as assume role arn and every other available config in ConfigAWS.
The service name and default region can be configured or inferred from the URL of the request.
When using this method, the integration (cel or httpjson file) does not need to re-implement the aws sing process inside the file, while at the same time having the singer as http.Transport, offers some advantages (described here; like enabling an integration using all available aws auth methods based on user config with a single cel/httpjson file) and will enable the cloud connectors project to be expanded to other aws integrations (cloud connector specific changes will be introduced in a later PR).
Checklist
./changelog/fragmentsusing the changelog tool.Disruptive User Impact
Author's Checklist
How to test this PR locally
Related issues
Use cases
Screenshots
Logs
This is an automatic backport of pull request #47260 done by [Mergify](https://mergify.com).