Does AssumeRoleProvider refresh expired credentials?

[lcmgh]

Environment: OIDC authorized Kubernetes POD that sets AWS environment variables to make it work with from_env

let provider = aws_config::sts::AssumeRoleProvider::builder(role_name.clone())
        .region(Region::new(region.clone()))
        .session_name(session_name.unwrap_or("my_service_session".into()))
        .build(
            Arc::new(EnvironmentVariableCredentialsProvider::new_with_env(
                credentials_provider,
            )) as Arc<_>,
        );
 
let config: SdkConfig = aws_config::from_env()
    .credentials_provider(provider)
    .load()
    .await;
 

[ysaito1001]

Hi @lcmgh, to answer your question, yes credentials will get refreshed. To be more precise, given the provided code snippet above, the AssumeRoleProvider will be backed by LazyCache whose resolve_cached_identity method will internally call AssumeRoleProvider::provide_credentials as credentials get close to their expiration times.