Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for role assumption in s3 repository #20635

Closed
malpani opened this issue Sep 23, 2016 · 3 comments
Closed

Add support for role assumption in s3 repository #20635

malpani opened this issue Sep 23, 2016 · 3 comments
Labels
:Distributed Coordination/Snapshot/Restore Anything directly related to the `_snapshot/*` APIs >enhancement

Comments

@malpani
Copy link
Contributor

malpani commented Sep 23, 2016

S3 repository currently relies on either the IAM instance profile credentials or explicitly passed in access/secret credentials at time of repository creation.

I was thinking of working on a feature that allows the S3 repository module to take in an optional parameter role_name which is an IAM role name. If role_name is passed in, the plugin will use STS assume role to assume the passed role-name and use those credentials to write to S3.

The benefit is ability within an access controlled cluster to grant access to specific user roles to backup data into their own S3 buckets which could be on an AWS account completely different from the account that is running this cluster on EC2

@dadoonet
Copy link
Member

It makes sense to me. Do you want to come with a PR on master branch ?

@malpani
Copy link
Contributor Author

malpani commented Sep 23, 2016

Yes, I will work on a PR for this.

@dadoonet dadoonet removed the help wanted adoptme label Sep 23, 2016
@clintongormley clintongormley added :Distributed Coordination/Snapshot/Restore Anything directly related to the `_snapshot/*` APIs and removed :Plugin Repository S3 labels Feb 14, 2018
@tlrx
Copy link
Member

tlrx commented Mar 23, 2018

Closing in favor of #16428

@tlrx tlrx closed this as completed Mar 23, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Distributed Coordination/Snapshot/Restore Anything directly related to the `_snapshot/*` APIs >enhancement
Projects
None yet
Development

No branches or pull requests

4 participants