search

RTXteam / RTX

Software repo for Team Expander Agent (Oregon State U., Institute for Systems Biology, and Penn State U.)
https://arax.ncats.io/
MIT License
33 stars 21 forks source link

Create IAM role with permissions only to upload to S3 #1284

Closed amykglen closed 3 years ago

amykglen commented 3 years ago

creating this issue to remind us to create a new IAM role in AWS with permissions only to upload to a specific S3 bucket. can be used for instances that only need AWS-CLI for that one purpose.

saramsey commented 3 years ago

this is for KG2, right?

amykglen commented 3 years ago

yep, sorry, didn't provide much info - yes, you thought of this idea when I was doing testing for plover on an instance with aws-cli set up, but that instance only really needed to be able to upload things to the rtx-kg2/rtx-kg2-versioned buckets

saramsey commented 3 years ago

OK, so not rtx-kg2-public, is that correct?

amykglen commented 3 years ago

correct

saramsey commented 3 years ago

OK, I have created an IAM role kg2-builder. I will send the keypair to you (@amykglen) via SMS.

saramsey commented 3 years ago

Amy, can you are @kvarforl please take the lead on testing out the keypair that I sent to you?

amykglen commented 3 years ago

yep, sounds good! thanks, Steve!

kvarforl commented 3 years ago

@amykglen apologies for my total silence on this issue: does it still need testing?

amykglen commented 3 years ago

it does! I was thinking I would test it out when I next build kg2c..

amykglen commented 3 years ago

confirmed this seems to work as expected! (the keypair Steve sent allows me to upload items to the kg2 S3 bucket, but not download, as was intended). thanks!