cube-js / cube-js/cube

Cube API and Refresh Worker use Instance Metadata for AWS Credentials like Cube Store does

Open
#4,334 1 comment 0 reactions 0 assignees View on GitHub
help wanted
Dominant language
Rust
Stars
20.8k
Forks
2.1k
Avg merge
1d 2h
Merged PRs (30d)
181

Description

Right now it doesn't appear that the Cube API or Refresh Worker is capable of using AWS Instance Metadata to authenticate with AWS. However, the Cube Store containers already have this capability.

From a security and configuration management perspective, Role Based Access is greatly preferred over passing in long-term access credentials to the containers with environment variables. Is this already on the road map?

This would be very useful when using the `CUBEJS_DB_EXPORT_BUCKET` configuration.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.