in TokenVendingLayer/src/main/java/tenant/vendinglayer/TokenVendor.java [88:108]
public AwsCredentialsProvider vendTokenJwt(Map<String, String> headers) {
Map<String, String> policyData = new HashMap<>();
policyData.put("table", DB_TABLE);
FilePolicyGenerator policyGenerator = new FilePolicyGenerator(templateDir, policyData);
JwtTokenVendor jwtTokenVendor = JwtTokenVendor.builder()
.policyGenerator(policyGenerator)
.durationSeconds(900)
.headers(headers)
.role(ROLE)
.region(AWS_REGION)
.build();
AwsCredentialsProvider awsCredentialsProvider = jwtTokenVendor.vendToken();
tenant = jwtTokenVendor.getTenant();
logger.info("Vending JWT security token for tenant {}", tenant);
return awsCredentialsProvider;
}