search

datamade / how-to

📚 Doing all sorts of things, the DataMade way
MIT License
80 stars 12 forks source link

Create process for accessing AWS resources with IAM policies and users #275

Closed smcalilly closed 1 year ago

smcalilly commented 2 years ago

See https://docs.google.com/document/d/1f7CPkaCbX4YI2jYTt56uond1jiUmEjKzXjYHxB3fc-M/edit?usp=sharing

smcalilly commented 2 years ago

learned something new, bucket policies: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-policies.html

this might be the way? i'm not sure yet if a bucket policy gives an iam user a token. the iam user token is required to remotely read/write to s3 from a django app. it's also very similar to this pattern i've outlined so it might be the same thing, but with a name.

derekeder commented 1 year ago

Sam is going to create a policy document for this and then look into scripting it