feat(plugin): add support for storage service

internal/credential/attributes.go

@@ -44,6 +44,9 @@ func GetCredentialsConfig(in *structpb.Struct, region string) (*awsutil.Credenti
 		badFields[fmt.Sprintf("attributes.%s", ConstRegion)] = err.Error()
 	}
 
+	// the creds_last_rotated_time field will be found in the input struct for
+	// persisted secrets, this value is not needed for creating the CredentialsConfig
+	delete(unknownFields, ConstCredsLastRotatedTime)
 	for s := range unknownFields {
 		badFields[fmt.Sprintf("secrets.%s", s)] = "unrecognized field"
 	}

internal/credential/attributes_test.go

@@ -119,6 +119,20 @@ func TestGetCredentialsConfig(t *testing.T) {
 			region:              "us-west-2",
 			expectedErrContains: "secrets.bar: unrecognized field, secrets.foo: unrecognized field",
 		},
+		{
+			name: "valid ignore creds_last_rotated_time",
+			in: map[string]any{
+				ConstAccessKeyId:          "foobar",
+				ConstSecretAccessKey:      "bazqux",
+				ConstCredsLastRotatedTime: "2006-01-02T15:04:05+07:00",
+			},
+			region: "us-west-2",
+			expected: &awsutil.CredentialsConfig{
+				AccessKey: "foobar",
+				SecretKey: "bazqux",
+				Region:    "us-west-2",
+			},
+		},
 		{
 			name: "good",
 			in: map[string]any{