adobe / adobe/ops-cli

Migrate ec2inventory plugin to use boto3

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
203
Forks
39
PR merge metrics
No merged PRs in 30d

Description

[Migrated]

The upgrade to Boto3 is part of an ongoing initiative of having a single instance which coordinates deployments - with support for automatic deployments in pre-production environments.

Boto3 has built-in support for the default AWS Credentials Providers stack.

We need to set the cross-account trusting policies for our accounts, being then able to specify automatic role assumption in a cross-account context via ~/.aws/config.

It might now work out of the box, as it doesn't for aws-cli (see: https://github.com/aws/aws-cli/issues/1604 and https://github.com/aws/aws-cli/issues/1390).
In that case, we would need to do programatic role assumption - I was not been able to fully test this yet (permissions).

Note
This change is intended to be backward-compatible with the current setup - in other words, temporary/static credentials should work as before.

Contributor guide

Open the contributing guide

Research direction

Locate the ec2inventory plugin and trace its current AWS credential handling first. Check whether boto3's default credentials provider supports the stated cross-account setup, then assess programmatic role assumption if needed; done means preserving temporary/static credential compatibility while enabling the intended configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
cli, cloud, infrastructure
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.