Using IAM to connect to AWS s3 without credentials in Java - amazon-web-services

Question

I am new to AWS. I am trying to connect to AmazonS3 using IAM role. I am not using secret keys here. Changes have been done at AWS side regarding IAM.
I have to create AmazonS3 client object. I tried to create object by following code:
public AmazonS3 AmazonS3Provider() {
AmazonS3ClientBuilder.defaultClient();
}
But it is returning :
"status":500,"exception":"AmazonS3Exception","message":"Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied;
Next, I tried to connect AWS s3 using AWSSecretsManagerClient using the following code:
public AmazonS3 AmazonS3Provider() {     
return (AmazonS3) AWSSecretsManagerClientBuilder.defaultClient();
}
But it was throwing error that AWSSecretsManagerClient object cannot be cast to AmazonS3.
Also, I tried to build client object using the following code:
AWSCredentials credentials;
try {
credentials = new ProfileCredentialsProvider().getCredentials();
} catch (Exception e) {
throw new AmazonClientException(
"Cannot load the credentials from the credential profiles file.", e);
}
return AmazonS3ClientBuilder.standard()
.withCredentials(new AWSStaticCredentialsProvider(credentials))
.withRegion(s3EndPoint)
.build();
But is throwing AmazonClientException.
Can someone guide me how to build client object using IAM role.

Answer 1

IAM access key and secret key (AWS credential) path locations are stored in environment variable. I was able to create client object using WebIdentityTokenCredentialsProvider with the following code:
AmazonS3 client = AmazonS3ClientBuilder.standard()
.withCredentials(WebIdentityTokenCredentialsProvider.create())
.withRegion("Region-name")
.build();