yangljun / s3fs

Automatically exported from code.google.com/p/s3fs
GNU General Public License v2.0
0 stars 0 forks source link

Enter one line summary #367

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Detailed description of support request:

It would be great if s3fs could support server iam roles on AWS.  Currently, it 
is possible to retrieve iam credentials and a token from the meta-data service. 
 This simplifies configuration significantly.  s3cmd supports this in it's 1.5 
alpha version.

===================================================================
The following information is very important in order to help us to help
you.  Omission of the following details may delay your support request or
receive no attention at all.
===================================================================
Version of s3fs being used (s3fs --version):

Version of fuse being used (pkg-config --modversion fuse):

System information (uname -a):

Distro (cat /etc/issue):

s3fs command line used (if applicable):

/etc/fstab entry (if applicable):

s3fs syslog messages (grep s3fs /var/log/syslog):

Original issue reported on code.google.com by edw...@indeterminate.org on 23 Aug 2013 at 2:19

GoogleCodeExporter commented 9 years ago
Hi,

IAM controls for accessing the objects by AccessKey, s3fs controls by unix 
permission.
So I think that s3fs have to need x-amz-meta headers because s3fs support like 
unix access.
Example, one user(probably root) runs s3fs on the machine, other users 
read/write to the mountpoint.
Then user does not know/control the Accesskey for it's bucket.
So that, I think that s3fs is not simple like s3cmd.

Regards,

Original comment by ggta...@gmail.com on 26 Aug 2013 at 9:55

GoogleCodeExporter commented 9 years ago
Hi,  Edward

I updated s3fs as new revision r490.
This revision supports IAM role, you can specify only IAM role name by 
"aim_role" option instead of AccessKeyId/SecretAccessKey.
(It is like s3fs-c option.)

Next version of s3fs has this option soon.
If you can, please checkout new revision and use it.

And if you find a bug about this option, please post new issue.
(I closed this issue.)

Thanks a lot.

Original comment by ggta...@gmail.com on 6 Oct 2013 at 1:54