IAM Roles Anywhere now provides a Java plugin for the AWS SDK

AWS Identity and Access Management (IAM) Roles Anywhere has introduced a Java plugin for the AWS SDK for Java v2, enabling workloads outside AWS to obtain temporary credentials directly within the Java application process. The plugin operates within the same Java Virtual Machine (JVM) as the application, eliminating the need for a separate credential helper process or manual configuration of credential_process in AWS profiles. This integration simplifies credential management for Java-based applications running outside AWS infrastructure.

The plugin is configured directly on the AWS SDK for Java v2 service client builder, automatically resolving temporary credentials without requiring developers to write credential-fetching logic. It handles calls to CreateSession and refreshes credentials before expiration, ensuring continuous access. The plugin supports RSA, Elliptic Curve (EC), and ML-DSA key types and requires Java 8 or higher. AWS states there is no additional charge for using the plugin, making it a cost-effective solution for credential management.

IAM Roles Anywhere is available across all AWS Regions, including AWS GovCloud (US) Regions, the AWS European Sovereign Cloud (Germany) Region, and China Regions. This broad availability ensures compatibility with diverse regulatory and operational environments. Organizations can leverage the plugin in any supported region without additional regional restrictions.

To implement the Java plugin, AWS provides documentation for getting started, along with access to the current version, release notes, and signature verification instructions via the plugin's Maven Central page and the roles-anywhere-java repository on GitHub. These resources offer step-by-step guidance for integration and troubleshooting.