AWS Request Signing

  • v3 API reference

  • This filter should be configured with the name envoy.filters.http.aws_request_signing.

Attention

The AWS request signing filter is experimental and is currently under active development.

The HTTP AWS request signing filter is used to access authenticated AWS services. It uses the existing AWS Credential Provider to get the secrets used for generating the required headers.

Example configuration

Example filter configuration:

name: envoy.filters.http.aws_request_signing
typed_config:
  "@type": type.googleapis.com/envoy.extensions.filters.http.aws_request_signing.v3.AwsRequestSigning
  service_name: s3
  region: us-west-2

Statistics

The AWS request signing filter outputs statistics in the http.<stat_prefix>.aws_request_signing. namespace. The stat prefix comes from the owning HTTP connection manager.

Name

Type

Description

signing_added

Counter

Total authentication headers added to requests

signing_failed

Counter

Total requests for which a signature was not added