adobe / adobe/ops-cli

Migrate ec2inventory plugin to use boto3

未关闭
#2 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
204
派生
39
PR 合并指标
30 天内没有已合并 PR

描述

[Migrated]

The upgrade to Boto3 is part of an ongoing initiative of having a single instance which coordinates deployments - with support for automatic deployments in pre-production environments.

Boto3 has built-in support for the default AWS Credentials Providers stack.

We need to set the cross-account trusting policies for our accounts, being then able to specify automatic role assumption in a cross-account context via ~/.aws/config.

It might now work out of the box, as it doesn't for aws-cli (see: https://github.com/aws/aws-cli/issues/1604 and https://github.com/aws/aws-cli/issues/1390).
In that case, we would need to do programatic role assumption - I was not been able to fully test this yet (permissions).

Note
This change is intended to be backward-compatible with the current setup - in other words, temporary/static credentials should work as before.

贡献指南

打开贡献指南

调研方向

首先定位 ec2inventory 插件,并追踪其当前的 AWS 凭证处理方式。检查 boto3 的默认凭证提供程序是否支持所述的跨账户配置,然后在需要时评估以编程方式承担角色;完成标准是在启用预期配置的同时,保留与临时/静态凭证的兼容性。

由索引模型根据 Issue 内容生成。

评估

技术栈
aws, python
领域
cli, cloud, infrastructure
Issue 类型
重构
难度
4/5
预计耗时
3-5 天
活跃度
停滞
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。