search

uohzxela / heka-s3

Heka output plugin for AWS S3
13 stars 7 forks source link

Support for retrieving AWS Keys from IAM Instance Profiles #2

Open sekka1 opened 8 years ago

sekka1 commented 8 years ago

AWS Supports creating IAM Instance profiles for your nodes. This allows you to give AWS credentials to your nodes without having to pass in the aws key/secret in. The node can just go and query a known aws internal endpoint and get the credentials assigned to it. These creds also automatically rotate.

There are 2 things missing for this to work:

AWS info: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#instance-metadata-security-credentials

http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html

It would be nice to support this. The AWS Boto libs support this by default. Maybe the golang AWS libs supports this also?

uohzxela commented 8 years ago

You can have a try at this feature. Currently I'm not doing any devops work so it's hard for me to spin up an AWS instance for testing.