Cache for Credentials and Service Client

[whitefloor]

Hi

I am using AWS services very well

illustrate:

1. The current business scenario is that multiple tenants will use our system.
2. The system database will store the IAM Role and IAM Role ExternalID of these users.
3. Then use STS AssumeRole to get the credential, and then create a new AWS service client through the credential.

need:

1. It is hoped that the credential or AWS service client can be cached to reduce the number of accesses to the database.

progress:

1. There are methods to operate credential from multiple API documents, but it seems that there is only a single cache. I wonder if I missed some methods?

2. I have thought about putting the credential in the database for cache, but this seems not a very safe approach.

3. The method of caching the AWS service client has not been found after looking through multiple files. I wonder if there is a way to cache the AWS service client and release the connection?

Thank you so much for reading.

[whitefloor]

Hello everyone
I figured out an optimal solution myself but that are noe implement

1. First go to the cache to find the certificate
2. If you cannot find the certificate, go to the database to find the IAM Role ARN and ExternalID
3. Then show the certificate
4. Put the certificate in the cache
5. Every time the user operates, the certificate is obtained from the cache, and the certificate is expired by checking
6. If it is a multi-container environment, because load balancing is distributed to other containers, repeat steps 1-5
7. Periodically delete expired credentials in the cache