aws/aws-msk-iam-auth v2.4.0 on GitHub

What's changed in 2.4.0

Add built-in CnameRegionProvider that resolves the signing region by following a hostname's CNAME chain, for DNS layouts where a stable endpoint name is a Route 53 failover CNAME over per-region names in a customer-owned domain (#254, fixes #253)
Add built-in LookupDnsRegionProvider that resolves the signing region from the resolved IP address of a bootstrap DNS name, for layouts where a stable bootstrap name repoints across regions and the active region is signalled by the network the name resolves into (#254)

Fixed a resource leak where MSKCredentialProvider.close() did not close the default credentials provider chain, leaving background credential refresh threads running after the client was closed (#257, fixes #256)

All DNS-backed region providers now serve the last known good region when a refresh fails, instead of falling through to the DefaultAwsRegionProviderChain
All DNS-backed region providers now accept dns.timeout.ms and dns.retries parameters
Region ids read from TXT records are validated before use

Requires Java 17 or later (since 2.3.8).

<dependency>
    <groupId>software.amazon.msk</groupId>
    <artifactId>aws-msk-iam-auth</artifactId>
    <version>2.4.0</version>
</dependency>

The attached aws-msk-iam-auth-2.4.0-all.jar is the self-contained uber jar for use on the Kafka client classpath.