googleapis / googleapis/google-cloud-python
Support AWS_WEB_IDENTITY_TOKEN_FILE
Đang mở
:rotating_light:
priority: p3
type: feature request
- Ngôn ngữ chính
- Python
- Star
- 5.4k
- Fork
- 1.8k
- Merge trung bình
- 3 ngày 4 giờ
- Pull request đã merge (30 ngày)
- 122
Mô tả
AWS service accounts can assume an identity using AWS_WEB_IDENTITY_TOKEN_FILE and AWS_ROLE_ARN.
https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts
A call to `aws sts get-caller-identity` returns the correct assumed role, but `aws.py` doesn't seem to support this and [returns the cluster role](https://github.com/googleapis/google-auth-library-python/blob/49bb80551b526d9d0708f155a367a542f7567973/google/auth/aws.py#L628) instead.
I'm not sure how to support this programmatically, so filing a feature request hoping someone does.
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.