OSGeo / gdal / 9009551084

push

github

/vsis3/: include AWS_CONTAINER_CREDENTIALS_TOKEN in container credentials flow (#9877)

This PR extends the [container credentials](https://docs.aws.amazon.com/sdkref/latest/guide/feature-container-credentials.html) functionality of `vsis3` to cover more cases, particularly [EKS Pod Identities](https://docs.aws.amazon.com/eks/latest/userguide/pod-identities.html).

Two additional environment variables are now considered in the container credentials flow: `AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE` and `AWS_CONTAINER_AUTHORIZATION_TOKEN`, with the former taking precedence over the latter (as described in AWS SDK documentation).

In addition to the included tests, I have tested the `AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE`-based credential flow in practice on EKS.

21 of 22 new or added lines in 1 file covered. (95.45%)

534567 of 773705 relevant lines covered (69.09%)

205780.08 hits per line