@itentialopensource/adapter-utils 5.10.8 → 5.10.9

package/lib/authenticationHandler.js

@@ -249,6 +249,21 @@ class AuthenticationHandler {
         return callback(authOpts.headers);
       }
 
+      const myDate = new Date().getTime();
+      const mySess = `${this.myid}-${myDate}`;
+
+      /* ADAPTER PROPERTIES AUTHENTICATION WITH GLOBAL ROLE */
+      // This will use the adapter role via the credentials provided to sign the call. If there is a global role for it to assume.
+      // it will use AWS Environment variables (access and secret key are null) to sign the call.
+      if (this.allProps.authentication.aws_access_key && this.allProps.authentication.aws_secret_key && this.allProps.authentication.aws_iam_role) {
+        log.info('Using Adapter PROPERTIES for AWS Authentication to assume a global role');
+        const parmas = {
+          RoleArn: this.allProps.authentication.aws_iam_role,
+          RoleSessionName: mySess
+        };
+        return this.assumeAWSSTSRole(null, null, null, options, parmas, true, callback);
+      }
+
       /* ROLE NAME AUTHENTICATION */
       // Different scenarios to discuss here
       // 1. IAM to internal AWS Server - either Task Role (roleName) or Adapter Role (aws_iam_role)
@@ -268,8 +283,6 @@ class AuthenticationHandler {
 
       // set up data for first assume role call
       const stsrole = new AWS.STS();
-      const myDate = new Date().getTime();
-      const mySess = `${this.myid}-${myDate}`;
       const stsData = {
         RoleArn: myRole,
         RoleSessionName: mySess,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itentialopensource/adapter-utils",
-  "version": "5.10.8",
+  "version": "5.10.9",
   "description": "Itential Adapter Utility Libraries",
   "scripts": {
     "postinstall": "node utils/setup.js",