Migrate ec2inventory plugin to use boto3
- 主要语言
- Python
- 星标
- 204
- 派生
- 39
- PR 合并指标
- 30 天内没有已合并 PR
描述
[Migrated]
The upgrade to Boto3 is part of an ongoing initiative of having a single instance which coordinates deployments - with support for automatic deployments in pre-production environments.
Boto3 has built-in support for the default AWS Credentials Providers stack.
We need to set the cross-account trusting policies for our accounts, being then able to specify automatic role assumption in a cross-account context via ~/.aws/config.
It might now work out of the box, as it doesn't for aws-cli (see: https://github.com/aws/aws-cli/issues/1604 and https://github.com/aws/aws-cli/issues/1390).
In that case, we would need to do programatic role assumption - I was not been able to fully test this yet (permissions).
Note
This change is intended to be backward-compatible with the current setup - in other words, temporary/static credentials should work as before.
贡献指南
调研方向
首先定位 ec2inventory 插件,并追踪其当前的 AWS 凭证处理方式。检查 boto3 的默认凭证提供程序是否支持所述的跨账户配置,然后在需要时评估以编程方式承担角色;完成标准是在启用预期配置的同时,保留与临时/静态凭证的兼容性。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- aws, python
- 领域
- cli, cloud, infrastructure
- Issue 类型
- 重构
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100