AWS Request Signing

• v3 API reference

• This filter should be configured with the name envoy.filters.http.aws_request_signing.

Attention

The AWS request signing filter is experimental and is currently under active development.

The HTTP AWS request signing filter is used to access authenticated AWS services. It uses the existing AWS Credential Provider to get the secrets used for generating the required headers.

Example configuration

Example filter configuration:

name: envoy.filters.http.aws_request_signing
typed_config:
  "@type": type.googleapis.com/envoy.extensions.filters.http.aws_request_signing.v3.AwsRequestSigning
  service_name: s3
  region: us-west-2

Statistics

The AWS request signing filter outputs statistics in the http.<stat_prefix>.aws_request_signing. namespace. The stat prefix comes from the owning HTTP connection manager.

Name	Type	Description
signing_added	Counter	Total authentication headers added to requests
signing_failed	Counter	Total requests for which a signature was not added