voxel51 / eta

ETA: Extensible Toolkit for Analytics
https://voxel51.com
Apache License 2.0
29 stars 13 forks source link

Adding support for pulling AWS credentials from an IAM role #547

Closed brimoor closed 2 years ago

brimoor commented 2 years ago

In certain workflows, AWS users may want to interact with S3 using credentials inherited from an IAM role as exposed at runtime by the following environment variables:

AWS_ROLE_ARN
AWS_WEB_IDENTITY_TOKEN_FILE

Unfortunately, credentials generated via this method are strictly temporary. Fortunately, there is a botocore.credentials.RefreshableCredentials class that provides a convenient way to automatically regenerate credentials when needed.

Helpful resources