From be0fd44b1c852d3c8d305a998c8e0339904bded7 Mon Sep 17 00:00:00 2001
From: Vincent Liu <128127889+vl-kp@users.noreply.github.com>
Date: Thu, 3 Apr 2025 22:15:24 +0800
Subject: [PATCH] chore: support EKS IRSA

---
 kong/llm/drivers/shared.lua | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kong/llm/drivers/shared.lua b/kong/llm/drivers/shared.lua
index 4c01fb21b8d..1e29878cbfd 100644
--- a/kong/llm/drivers/shared.lua
+++ b/kong/llm/drivers/shared.lua
@@ -321,6 +321,12 @@ _M.cloud_identity_function = function(this_cache, plugin_config)
         secretAccessKey = secret_key_set,
       }
 
+      aws.config.credentials = creds
+    elseif aws_config.global.AWS_WEB_IDENTITY_TOKEN_FILE 
+      and aws_config.global.AWS_ROLE_ARN then
+      -- Support for EKS IRSA (IAM Roles for Service Accounts)
+      local creds = aws:TokenFileWebIdentityCredentials()
+
       aws.config.credentials = creds
     end