IAM Role-based permissions for data sources (namely S3)

NetBox version

v3.7.4

Feature type

Change to existing functionality

Proposed functionality

Currently, in order to add a new Amazon S3 bucket as a data source, you are required to provide an AWS access key ID and AWS secret access key. The requested change is to make these fields optional as it is possible to grant role based permissions to the server which is running Netbox to allow access to a bucket.

This is already possible for media storage via configuration.py:

# By default, uploaded media is stored on the local filesystem. Using Django-storages is also supported. Provide the
# class path of the storage driver in STORAGE_BACKEND and any configuration options in STORAGE_CONFIG. For example:
STORAGE_BACKEND = 'storages.backends.s3boto3.S3Boto3Storage'
STORAGE_CONFIG = {
    # 'AWS_ACCESS_KEY_ID': 'Key ID',
    # 'AWS_SECRET_ACCESS_KEY': 'Secret',
    'AWS_STORAGE_BUCKET_NAME': '<%= @netbox_data['s3']['bucket'] %>',
    'AWS_S3_REGION_NAME': 'us-west-2',
}

Use case

This would allow for script and report uploads for users who use role-based permissions for S3 access.

Database changes

No response

External dependencies

No response

netbox-community / netbox